Add block tag to rasp.rule.match

[cataphract]

Description

Adds the missing block to appsec.rasp.rule.match metric.

Reviewer checklist

• Test coverage seems ok.
• Appropriate labels assigned.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 7179094d84

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Ensure the override RC version is distinct

When this phase runs in the same epoch second as the earlier applyRemoteConfig, both responses get the same version because AppSecContainer.applyRemoteConfig uses Instant.now().epochSecond; overrideSup.get() then only waits for that version and can be satisfied by the previous RC poll before the helper has consumed rasp_lfi_block_override. In that case the following request still uses the non-blocking rules and the 403/block:success assertions become flaky, so this test should force a new version or wait for evidence that the override path was actually applied.

Useful? React with 👍 / 👎.

[cataphract]

Although unlikely, I couldn't rule it out, so changed to use milliseconds instead.

[datadog-datadog-prod-us1-2]

✨ Fix all issues with BitsAI or with Cursor

⚠️ Warnings

🧪 1 Test failed

❄️ Known flaky: telemetry reflects the loading of a new integration() from com.datadog.appsec.php.integration.TelemetryTests     (Fix with Cursor)

Assertion failed: 

assert !foundRedis
       ||
       |true
       false

Assertion failed: 

assert !foundRedis
...

ℹ️ Info

No other issues found (see more)

❄️ No new flaky tests detected

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 60.68% (-0.04%)

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 7a45f18 | Docs | Datadog PR Page | Give us feedback!}