fix[backend](soar): command line add tenant id on context

[AlexSanchez-bit]

No description provided.

[github-actions]

🛑 AI review — High/critical findings

One or more high/critical issues were found. Please review and fix before merging if they're real.

✅ architecture (gemini-3-flash-lite) — clean

Summary: Fixes context tenant propagation in SOAR command WebSocket disconnect handler by carrying over the tenant ID.

No findings.

🛑 bugs (gemini-3-flash-lite) — high/critical — please review

Summary: Fix tenant context in WebSocket disconnect cleanup, but defer cancelDone is inside a loop.

• high backend/modules/soar/handler/command_ws.go:202 — defer cancelDone() is placed inside a loop (or block executed repeatedly). The deferred function will not execute until the surrounding function returns, leading to a buildup of active context timers and potential resource/goroutine leaks. Move cancelDone() immediately after context creation or avoid using defer inside the loop.

✅ security (gemini-3-flash-lite) — clean

Summary: Fixes multi-tenancy context propagation in SOAR command WebSocket disconnect handler by carrying over TenantID.

No findings.

🔴 go-deps — pending updates

🔍 Discovered 31 Go projects

📦 Dependencies with updates available:

  📁 ./plugins/crowdstrike:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31

  📁 ./plugins/azure:
     - github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.23.0 → v1.23.1
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31
     - golang.org/x/crypto: v0.55.0 → v0.56.0

  📁 ./plugins/soc-ai:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31
     - golang.org/x/crypto: v0.55.0 → v0.56.0

  📁 ./plugins/events:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.31

  📁 ./plugins/gcp:
     - cloud.google.com/go/pubsub: v1.51.0 → v1.51.1
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31
     - golang.org/x/crypto: v0.55.0 → v0.56.0
     - google.golang.org/api: v0.293.0 → v0.297.0

  📁 ./plugins/bitdefender:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31
     - golang.org/x/crypto: v0.55.0 → v0.56.0

  📁 ./plugins/o365:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31

  📁 ./plugins/rule-flood-guard:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.31

  📁 ./plugins/shared:
     - golang.org/x/crypto: v0.49.0 → v0.56.0

  📁 ./plugins/stats:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.31

  📁 ./plugins/feeds:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.31
     - golang.org/x/crypto: v0.55.0 → v0.56.0

  📁 ./plugins/geolocation:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31

  📁 ./plugins/playground:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31

  📁 ./plugins/soar:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31

  📁 ./plugins/sophos:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31

  📁 ./plugins/alerts:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.31

  📁 ./plugins/aws:
     - github.com/aws/aws-sdk-go-v2: v1.43.6 → v1.45.1
     - github.com/aws/aws-sdk-go-v2/config: v1.32.37 → v1.33.2
     - github.com/aws/aws-sdk-go-v2/credentials: v1.19.36 → v1.20.2
     - github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs: v1.82.2 → v1.85.0
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31

  📁 ./log-input:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31
     - google.golang.org/grpc: v1.83.0 → v1.83.2

  📁 ./backend:
     - cloud.google.com/go/pubsub: v1.51.0 → v1.51.1
     - github.com/aws/aws-sdk-go-v2/config: v1.32.36 → v1.33.2
     - github.com/aws/aws-sdk-go-v2/credentials: v1.19.35 → v1.20.2
     - github.com/aws/aws-sdk-go-v2/service/sts: v1.45.5 → v1.48.0
     - github.com/coreos/go-oidc/v3: v3.20.0 → v3.21.0
     - golang.org/x/crypto: v0.55.0 → v0.56.0
     - google.golang.org/api: v0.293.0 → v0.297.0
     - google.golang.org/grpc: v1.83.0 → v1.83.2

  📁 ./collectors/collector:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31
     - google.golang.org/grpc: v1.83.0 → v1.83.2

  📁 ./collectors/forwarder:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31
     - google.golang.org/grpc: v1.83.0 → v1.83.2

  📁 ./collectors/as400:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31
     - google.golang.org/grpc: v1.83.0 → v1.83.2

  📁 ./collectors/utmstack:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31
     - google.golang.org/grpc: v1.83.0 → v1.83.2

  📁 ./tools/rulecheck:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31

  📁 ./agent-manager:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31
     - google.golang.org/grpc: v1.83.0 → v1.83.2

  📁 ./agent:
     - github.com/threatwinds/go-sdk: v1.1.28 → v1.1.31
     - google.golang.org/grpc: v1.83.0 → v1.83.2

❌ Please update dependencies before merging.

[AlexSanchez-bit]

change only add tenant id to the already existing manual command context