Skip to content

ti_anyrun: fix header key capitalisation#18858

Open
efd6 wants to merge 1 commit intoelastic:mainfrom
efd6:ti_anyrun-header-case
Open

ti_anyrun: fix header key capitalisation#18858
efd6 wants to merge 1 commit intoelastic:mainfrom
efd6:ti_anyrun-header-case

Conversation

@efd6
Copy link
Copy Markdown
Contributor

@efd6 efd6 commented May 7, 2026

Proposed commit message

ti_anyrun: fix header key capitalisation

The previous code was using TAXII in the header key. This would fail to
get the header since Go headers are canonicalised to RFC7230
capitalisation. So, lowercase "axii".

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

@efd6 efd6 self-assigned this May 7, 2026
@efd6 efd6 added bugfix Pull request that fixes a bug issue Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Integration:ti_anyrun ANY.RUN Threat Intelligence Feeds (Partner supported) labels May 7, 2026
@efd6 efd6 force-pushed the ti_anyrun-header-case branch from abe0cdf to b8f15cf Compare May 7, 2026 04:02
The previous code was using TAXII in the header key. This would fail to
get the header since Go headers are canonicalised to RFC7230
capitalisation. So, lowercase "axii".
@efd6 efd6 force-pushed the ti_anyrun-header-case branch from b8f15cf to c5804e6 Compare May 7, 2026 04:03
@elastic-vault-github-plugin-prod
Copy link
Copy Markdown

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@elasticmachine
Copy link
Copy Markdown

💚 Build Succeeded

cc @efd6

@efd6 efd6 marked this pull request as ready for review May 7, 2026 04:55
@efd6 efd6 requested a review from a team as a code owner May 7, 2026 04:55
@infra-vault-gh-plugin-prod
Copy link
Copy Markdown

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bugfix Pull request that fixes a bug issue Integration:ti_anyrun ANY.RUN Threat Intelligence Feeds (Partner supported) Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants