Retry API authentication errors since these can be transient

src/api-client.test.ts

@@ -36,6 +36,9 @@ test("getApiClient", async (t) => {
       baseUrl: "http://api.github.localhost",
       log: sinon.match.any,
       userAgent: `CodeQL-Action/${actionsUtil.getActionVersion()}`,
+      retry: {
+        doNotRetry: [400, 410, 422, 451],
+      },
     }),
   );
 });

src/api-client.ts

@@ -51,6 +51,12 @@ function createApiClientWithDetails(
         warn: core.warning,
         error: core.error,
       },
+      retry: {
+        // The default is 400, 401, 403, 404, 410, 422, and 451. We have observed transient errors
+        // with authentication, so we remove 401, 403, and 404 from the default list to ensure that
+        // these errors are retried.
+        doNotRetry: [400, 410, 422, 451],
+      },
     }),
   );
 }