adam/security-review
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/security-review.git synced 2026-09-30 06:53:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(plan-groomer): avoid crash on empty DIGEST with zero findings

Browse source 
`${DIGEST:?}` aborts the script when DIGEST is unset/empty (i.e. when no
upstream checker findings exist). Replace with null-safe `${DIGEST:-}` so
the report-only mode exits cleanly on a clean week.
This commit is contained in:
seahaven-openswe[bot] 2026-08-04 12:13:28 +00:00
parent a82092f4ca
commit a0bd8632b5
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
checkers/plan-groomer.sh
View file

@ -298,7 +298,7 @@ if [ "$NOTIFY" -eq 1 ] && [ "$DRY_RUN" -eq 0 ]; then
# is REPORT-ONLY and must not auto-write. The composed digest is available in $DIGEST. # is REPORT-ONLY and must not auto-write. The composed digest is available in $DIGEST.
log "--notify requested but inert in this phase (D3: report-only; auto-write is a later toggle). No push." log "--notify requested but inert in this phase (D3: report-only; auto-write is a later toggle). No push."
fi fi
: "${DIGEST:?}" >/dev/null 2>&1 || true # DIGEST is composed for the future seam; keep it referenced. DIGEST="${DIGEST:-}" # DIGEST is composed for the future seam; keep it referenced.
log "REPORT-ONLY: groomed plan written to the mode-600 report; nothing posted (D3)." log "REPORT-ONLY: groomed plan written to the mode-600 report; nothing posted (D3)."
exit 0 exit 0