do not pass default branch and repo name to coana CLI (#723)

* do not pass default branch and repo name to coana CLI

* upgrade coana to 14.12.10

* fix typo

Author: mtorp

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "socket",
-  "version": "1.0.104",
+  "version": "1.0.105",
   "description": "CLI for Socket.dev",
   "homepage": "https://github.com/SocketDev/socket-cli",
   "license": "MIT",
@@ -85,7 +85,7 @@
     "@babel/preset-typescript": "7.27.1",
     "@babel/runtime": "7.28.3",
     "@biomejs/biome": "2.2.2",
-    "@coana-tech/cli": "14.12.6",
+    "@coana-tech/cli": "14.12.10",
     "@cyclonedx/cdxgen": "11.6.0",
     "@dotenvx/dotenvx": "1.49.0",
     "@eslint/compat": "1.3.2",

package.json

@@ -167,10 +167,12 @@ export async function performReachabilityAnalysis(
   const env: NodeJS.ProcessEnv = {
     ...process.env,
   }
-  if (repoName) {
+  // do not pass default repo and branch name to coana to avoid mixing
+  // buckets (cached configuration) from projects that are likely very different.
+  if (repoName && repoName !== constants.SOCKET_DEFAULT_REPOSITORY) {
     env['SOCKET_REPO_NAME'] = repoName
   }
-  if (branchName) {
+  if (branchName && branchName !== constants.SOCKET_DEFAULT_BRANCH) {
     env['SOCKET_BRANCH_NAME'] = branchName
   }