Skip to content

Commit a755027

Browse files
committed
fix(local-verification): remove || true from security audit tasks so vulnerabilities fail the build locally
1 parent 59f2b3b commit a755027

1 file changed

Lines changed: 4 additions & 4 deletions

File tree

.unirtm.toml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ fi
7171
description = 'Python dependency audit'
7272
run = '''
7373
if [ -f "requirements.txt" ] || [ -f "pyproject.toml" ]; then
74-
pip-audit || true
74+
pip-audit
7575
else
7676
echo "⏭️ Skipped (no python requirements)"
7777
fi
@@ -81,7 +81,7 @@ fi
8181
description = 'Go dependency audit'
8282
run = '''
8383
if [ -f "go.mod" ]; then
84-
govulncheck ./... || true
84+
govulncheck ./...
8585
else
8686
echo "⏭️ Skipped (no go.mod)"
8787
fi
@@ -90,8 +90,8 @@ fi
9090
[tasks."audit:trivy"]
9191
description = 'Generate and scan SBOM using Trivy'
9292
run = '''
93-
trivy fs --format cyclonedx --output sbom.json . || true
94-
trivy sbom sbom.json || true
93+
trivy fs --format cyclonedx --output sbom.json .
94+
trivy sbom sbom.json
9595
'''
9696

9797
[tasks.lint]

0 commit comments

Comments
 (0)