fix(hatching-triage-sandbox): handle search API errors gracefully (#4756)

[throuxel]

Proposed changes

• Catch ServerError from the triage library in _search_for_analysis to handle 504 timeouts and other API errors gracefully
• When the search API fails, log a warning and fall back to submitting a new sample instead of crashing

Related issues

• Fixes fix(hatching-triage): unable to enrich URL #4756

Checklist

• I consider the submitted work as finished
• I have signed my commits using GPG key.
• I tested the code for its functionality using different use cases
• I added/update the relevant documentation (either on github or on notion)
• Where necessary I refactored code to improve the overall quality

Further comments

The root cause was that iterating the search paginator could raise an unhandled ServerError when the Triage API returns a 504 Gateway Timeout with a non-JSON body. The fix wraps the iteration in a try/except block, logs the error, and returns None so the connector gracefully falls back to submitting a new analysis instead of hanging.

[github-actions]

🔴 Connector Linter errors detected

• VC312: send_stix2_bundle missing cleanup_inconsistent_bundle=True (internal-enrichment/hatching-triage-sandbox/src/connector/connector.py:415)

[Copilot]

Pull request overview

This PR updates the Hatching Triage Sandbox connector to avoid crashing when the Triage search API fails during _search_for_analysis, allowing the connector to fall back to submitting a new sample instead of hanging or failing the message.

Changes:

• Wraps iteration of the Triage search paginator in a try/except and logs a warning on failure.
• Adds unit tests covering the “search fails → return None + warn” behavior for _search_for_analysis.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
internal-enrichment/hatching-triage-sandbox/src/connector/connector.py	Adds error handling around search pagination to prevent connector crashes on Triage API failures.
internal-enrichment/hatching-triage-sandbox/tests/tests_connector/test_connector.py	Introduces tests for _search_for_analysis behavior when the search API errors and when existing analysis is disabled.