CLI ignores OAuth client flags when a local API key is configured(AST-127635)

[cx-harshjeet-patil]

By submitting this pull request, you agree to the terms within the Checkmarx Code of Conduct. Please review the contributing guidelines for guidance on creating high-quality pull requests.

Description

If there's a configuration in CLI to access CxOne with an API key and an attempt is made to create a scan using OAuth client credentials, these credentials are not taken into account.

Type of Change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update

Related Issues

https://checkmarx.atlassian.net/browse/AST-127635

Checklist

• I have performed a self-review of my code
• I have added tests that prove my fix is effective or that my feature works
• I have added necessary documentation (if appropriate)
• Any dependent changes have been merged and published in downstream modules
• I have updated the CLI help for new/changed functionality in this PR (if applicable)
• All active GitHub checks for tests, formatting, and security are passing
• The correct base branch is being used

Screenshots (if applicable)

Add screenshots to help explain your changes.

Additional Notes

Add any other relevant information.

[github-actions]

Checkmarx One – Scan Summary & Details – 2ec8d993-479a-43e3-a1cb-e4ee6fcbd92a

Fixed Issues (3)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	CVE-2025-31133	Go-github.com/opencontainers/runc-v1.2.3
	CVE-2025-52565	Go-github.com/opencontainers/runc-v1.2.3
	CVE-2025-52881	Go-github.com/opencontainers/runc-v1.2.3

[cx-anjali-deore]

looks good