diff --git a/security-review/nightly_sweep.sh b/security-review/nightly_sweep.sh index fefa4f2..a0b88ab 100755 --- a/security-review/nightly_sweep.sh +++ b/security-review/nightly_sweep.sh @@ -202,6 +202,7 @@ scan_scanners() { # target slug T1_CRIT="$(jq -r '(.summary.confirmed_critical // 0)' "$result_json" 2>/dev/null || echo 0)" T1_HIGH="$(jq -r '(.summary.confirmed_high // 0)' "$result_json" 2>/dev/null || echo 0)" [ "$rc" -eq 1 ] && T1_BLOCK=1 + return 0 # MUST return 0: results go via globals; a falsey last cmd would trip set -e in the caller } # --- TIER 2: agentic run_headless + full review.sh over a target dir ----------