fix: make security fixtures fail closed

2026-08-02 05:40:58 +09:00
parent 76d0ab0f62
commit 100a3bb6ba
8 changed files with 374 additions and 83 deletions
@@ -275,13 +275,12 @@
          "script": "check:supply-chain:provider-fixtures",
          "expect": "pass"
        },
-        { "script": "scan:security:fixture", "expect": "fail", "expectedExitCode": 1, "expectedDiagnosticId": "Security scan found" },
+        { "script": "check:security:fixtures", "expect": "pass" },
        { "script": "check:browser-security", "expect": "pass" }
      ],
      "logPath": "artifacts/quality/gates/FE-GATE-013.txt",
      "evidence": [
        "artifacts/security/scan.sarif",
-        "artifacts/security/scan-fixture.sarif",
        "artifacts/release/dependency-inventory.json",
        "artifacts/release/sbom.cdx.json",
        "artifacts/release/provenance.json",