From 17d18d2fae58f5658a40d03a03f927819eb6cf1a Mon Sep 17 00:00:00 2001
From: Artur Bosch <bosch@axivion.com>
Date: Wed, 27 Sep 2023 18:43:21 +0200
Subject: [PATCH] SECURITY-3265

---
 .../plugins/analysis/warnings/axivion/AxivionSuite.java    | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/plugin/src/main/java/io/jenkins/plugins/analysis/warnings/axivion/AxivionSuite.java b/plugin/src/main/java/io/jenkins/plugins/analysis/warnings/axivion/AxivionSuite.java
index 1ce7850d49..f59c0e6e3a 100644
--- a/plugin/src/main/java/io/jenkins/plugins/analysis/warnings/axivion/AxivionSuite.java
+++ b/plugin/src/main/java/io/jenkins/plugins/analysis/warnings/axivion/AxivionSuite.java
@@ -188,7 +188,8 @@ protected Object readResolve() {
     public Report scan(final Run<?, ?> run, final FilePath workspace, final Charset sourceCodeEncoding,
             final LogHandler logger) throws ParsingException, ParsingCanceledException {
 
-        final AxivionDashboard dashboard = new RemoteAxivionDashboard(projectUrl, withValidCredentials(), namedFilter);
+        final UsernamePasswordCredentials httpClientCredentials = withValidCredentials(run.getParent());
+        final AxivionDashboard dashboard = new RemoteAxivionDashboard(projectUrl, httpClientCredentials, namedFilter);
         final AxivionParser.Config config = new Config(projectUrl, expandBaseDir(run, basedir),
                 ignoreSuppressedOrJustified);
         final AxivionParser parser = new AxivionParser(config);
@@ -207,11 +208,11 @@ public Report scan(final Run<?, ?> run, final FilePath workspace, final Charset
         return report;
     }
 
-    private UsernamePasswordCredentials withValidCredentials() {
+    private UsernamePasswordCredentials withValidCredentials(final Item context) {
         final List<StandardUsernamePasswordCredentials> all =
                 CredentialsProvider.lookupCredentials(
                         StandardUsernamePasswordCredentials.class,
-                        (Item) null,
+                        context,
                         null,
                         Collections.emptyList());