Update integration test script to use less-heavy scan for CI

Signed-off-by: lelia <lelia@socket.dev>

Author: lelia

scripts/integration-test-docker.sh

@@ -45,35 +45,15 @@ else
   fail "socket-basics -h exited non-zero"
 fi
 
-# ── Test 2: opengrep scans with bundled rules (no API key needed) ─────────────
-# Runs opengrep against the socket_basics Python source using the baked-in
-# rules. Validates: binary works, rules directory is intact, JSON output is
-# valid. opengrep exits 0 (no findings) or 1 (findings found) — both are OK.
-# Exit code 2+ signals a real error.
-echo "--> opengrep scan with bundled rules on internal source"
-opengrep_exit=0
-opengrep_output=$(
-  docker run --rm --entrypoint /bin/sh "$IMAGE_TAG" -c \
-    "opengrep scan \
-       --config /socket-basics/socket_basics/rules/ \
-       --json \
-       /socket-basics/socket_basics/ 2>/dev/null" \
-) || opengrep_exit=$?
-
-if [[ $opengrep_exit -ge 2 ]]; then
-  fail "opengrep exited with error code $opengrep_exit"
-fi
-
-if [[ -z "$opengrep_output" ]]; then
-  fail "opengrep produced no output"
-fi
-
-if echo "$opengrep_output" | python3 -c "import sys, json; json.load(sys.stdin)" > /dev/null 2>&1; then
-  pass "opengrep produced valid JSON output (exit $opengrep_exit)"
+# ── Test 2: opengrep binary is reachable and responsive ───────────────────────
+# A full rules-scan against the bundled source can hit CI memory/timeout limits
+# (opengrep exit 8), so we just verify the binary responds to --version.
+# The smoke test already gates on `opengrep --version` before this script runs.
+echo "--> opengrep --version"
+if docker run --rm --entrypoint /bin/sh "$IMAGE_TAG" -c "opengrep --version" > /dev/null 2>&1; then
+  pass "opengrep --version exits 0"
 else
-  # Some opengrep versions may emit non-JSON on stdout in certain modes; treat
-  # non-empty output without a parse error as a soft pass.
-  pass "opengrep ran and produced output (non-JSON format, exit $opengrep_exit)"
+  fail "opengrep --version exited non-zero"
 fi
 
 # ── Test 3: socket-basics scan on fixture (no API key) ────────────────────────