Skip to content

Fail when jq cannot parse scan results - #145

Open
00200200 wants to merge 1 commit into
anthropics:mainfrom
00200200:codex/fail-when-jq-unavailable
Open

00200200 wants to merge 1 commit into
anthropics:mainfrom
00200200:codex/fail-when-jq-unavailable

Conversation

@00200200

Copy link
Copy Markdown

Problem

When jq is unavailable or cannot parse the results file, the action falls back to findings_count=0 and an empty findings file. A failed security scan can therefore look like a clean scan.

Change

Verify that jq is available after installation and fail explicitly when result parsing or findings.json creation fails.

Validation

  • git diff --check passed.
  • The shell branches keep the existing error-result handling while making parser failures visible to the workflow.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant