Finalize security-review: repo-sourced hooks, two-tier nightly auto-discovery #6
1 changed files with 1 additions and 0 deletions
|
|
@ -202,6 +202,7 @@ scan_scanners() { # target slug
|
|||
T1_CRIT="$(jq -r '(.summary.confirmed_critical // 0)' "$result_json" 2>/dev/null || echo 0)"
|
||||
T1_HIGH="$(jq -r '(.summary.confirmed_high // 0)' "$result_json" 2>/dev/null || echo 0)"
|
||||
[ "$rc" -eq 1 ] && T1_BLOCK=1
|
||||
return 0 # MUST return 0: results go via globals; a falsey last cmd would trip set -e in the caller
|
||||
}
|
||||
|
||||
# --- TIER 2: agentic run_headless + full review.sh over a target dir ----------
|
||||
|
|
|
|||
Reference in a new issue