Retrieve Tenant License Information for Standalone and CXOneAssist (AST-112336)

[cx-rahul-pidde]

Description

This PR adds functionality to the cx utils tenant command to determine whether a tenant has licenses for Standalone and CXOneAssist. It queries the tenant license endpoint, processes the response, and outputs configuration keys indicating feature availability. In the CLI output:

• scan.config.plugins.standalone = true if the tenant has a Standalone license
• scan.config.plugins.cxoneassist = true if the tenant has a CXOneAssist license
• Return false if the tenant has no licence.

Test Cases

1. Tenant has both Standalone & CXOneAssist

• Run cx utils tenant
• Expect output:

Key : scan.config.plugins.standalone
Value : true
Key : scan.config.plugins.cxoneassist
Value : true

2. Tenant has only Standalone

• Run cx utils tenant
• Expect output:

Key : scan.config.plugins.standalone
Value : true
Key : scan.config.plugins.cxoneassist
Value : false

3. Tenant has only CXOneAssist

• Run cx utils tenant
• Expect:

Key : scan.config.plugins.standalone
Value : false
Key : scan.config.plugins.cxoneassist
Value: true

4. Tenant has no license

• Run cx utils tenant
• Expect:

Key : scan.config.plugins.standalone
Value : false
Key : scan.config.plugins.cxoneassist
Value: false

[github-actions]

Checkmarx One – Scan Summary & Details – cf35ab70-4945-4b86-a7f9-814813c154fb

New Issues (2)

Checkmarx found the following issues in this Pull Request

Severity	Issue	Source File / Package	Checkmarx Insight
	CVE-2025-64718	Npm-js-yaml-4.1.0	details Recommended version: 4.1.1 Description: js-yaml is a JavaScript YAML parser and dumper. In js-yaml versions through 3.14.1 and 4.x through 4.1.0, it's possible for an attacker to modify t... Attack Vector: NETWORK Attack Complexity: LOW ID: NmKge8upfpteEiUWYUGo4YMR%2F4lo18XLCmjKtTjntxA%3D Vulnerable Package
	CVE-2025-64718	Npm-js-yaml-3.14.1	details Recommended version: 3.14.2 Description: js-yaml is a JavaScript YAML parser and dumper. In js-yaml versions through 3.14.1 and 4.x through 4.1.0, it's possible for an attacker to modify t... Attack Vector: NETWORK Attack Complexity: LOW ID: sfpgtjQv3R6E0ZAxZxyYjgfR2FJqF7cAKTFZ1HaWRIk%3D Vulnerable Package

---

Use @Checkmarx to reach out to us for assistance.

Just send a PR comment with @Checkmarx followed by a natural language request.

Examples: @Checkmarx how are you able to help me? @Checkmarx rescan this PR