Skip to content

Commit c4ca553

Browse files
committed
fix(local-verification): remove remaining || true to enforce strict audit failure
1 parent a755027 commit c4ca553

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

.unirtm.toml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -51,17 +51,17 @@ run = 'gitleaks detect --source . --no-banner'
5151

5252
[tasks."audit:zizmor"]
5353
description = 'Audit GitHub Actions workflows for security flaws'
54-
run = 'zizmor . --format plain --config .zizmor.yml || true'
54+
run = 'zizmor . --format plain --config .zizmor.yml'
5555

5656
[tasks."audit:osv"]
5757
description = 'Generic vulnerability scan across lockfiles'
58-
run = 'osv-scanner scan . --config .osv-scanner.toml || true'
58+
run = 'osv-scanner scan . --config .osv-scanner.toml'
5959

6060
[tasks."audit:npm"]
6161
description = 'Node.js dependency audit'
6262
run = '''
6363
if [ -f "package.json" ]; then
64-
npm audit --registry="https://registry.npmjs.org" || true
64+
npm audit --registry="https://registry.npmjs.org"
6565
else
6666
echo "⏭️ Skipped (no package.json)"
6767
fi

0 commit comments

Comments
 (0)