Uprade coana and fix --org used with reach (#713)

* fix an issue where the wrong org slug was passed to the Coana process when the org slug was provided through --org

* upgrade Coana to 14.11.14

Author: mtorp

package-lock.json

@@ -84,7 +84,7 @@
     "@babel/preset-typescript": "7.27.1",
     "@babel/runtime": "7.28.3",
     "@biomejs/biome": "2.2.0",
-    "@coana-tech/cli": "14.11.13",
+    "@coana-tech/cli": "14.11.14",
     "@cyclonedx/cdxgen": "11.6.0",
     "@dotenvx/dotenvx": "1.48.4",
     "@eslint/compat": "1.3.2",

package.json

@@ -79,7 +79,8 @@ export async function coanaFix(
           ...ids,
           ...fixConfig.unknownFlags,
         ],
-        { cwd, spinner, env: { SOCKET_ORG_SLUG: orgSlug } },
+        fixConfig.orgSlug,
+        { cwd, spinner },
       )
     : undefined
 

src/commands/fix/coana-fix.mts

@@ -144,7 +144,8 @@ export async function performReachabilityAnalysis(
     env['SOCKET_BRANCH_NAME'] = branchName
   }
 
-  const coanaResult = await spawnCoana(coanaArgs, {
+  // Run Coana with the manifests tar hash.
+  const coanaResult = await spawnCoana(coanaArgs, orgSlug, {
     cwd,
     env,
     spinner,

src/commands/scan/perform-reachability-analysis.mts

@@ -25,6 +25,7 @@ export function extractTier1ReachabilityScanId(
 
 export async function spawnCoana(
   args: string[] | readonly string[],
+  orgSlug?: string,
   options?: SpawnOptions | undefined,
   extra?: SpawnExtra | undefined,
 ): Promise<CResult<string>> {
@@ -37,9 +38,14 @@ export async function spawnCoana(
   if (defaultApiToken) {
     mixinsEnv['SOCKET_CLI_API_TOKEN'] = defaultApiToken
   }
-  const orgSlugCResult = await getDefaultOrgSlug()
-  if (orgSlugCResult.ok) {
-    mixinsEnv['SOCKET_ORG_SLUG'] = orgSlugCResult.data
+
+  if (orgSlug) {
+    mixinsEnv['SOCKET_ORG_SLUG'] = orgSlug
+  } else {
+    const orgSlugCResult = await getDefaultOrgSlug()
+    if (orgSlugCResult.ok) {
+      mixinsEnv['SOCKET_ORG_SLUG'] = orgSlugCResult.data
+    }
   }
   try {
     const output = await spawn(