We are automating SonarCloud project binding using the POST dop-translation/project-bindings endpoint in an Enterprise plan with Azure DevOps. We have confirmed this endpoint works — we received a 201 response in testing.
The endpoint requires an internal alphanumeric projectId (e.g. AZ8ncjlqXRpWu8-v2dRP), not the project key. We create projects via api/projects/create, which returns only key, name, and qualifier — no internal ID.
We tested the following public endpoints and none return the internal ID with token authentication:
api/components/show?component={key}— returns key, name, qualifier, no IDapi/projects/search?projects={key}— same, no IDapi/navigation/component?component={key}— returns the internal ID but requires browser session authentication, returns 403 with Bearer token
What is the supported, token-authenticated way to resolve a project key to its internal ID for use with the binding API in an automation context? Is this a documented gap, and is there a workaround or a planned public endpoint?