From dc8e6857cb0fa5b2b4248226b9c5146365e504f6 Mon Sep 17 00:00:00 2001
From: ruv <ruv@ruv.net>
Date: Fri, 21 Aug 2026 11:35:23 -0400
Subject: [PATCH] ci: make Rust advisory gate pipe-safe

---
 .github/workflows/security-scan.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index af1cb405..68375748 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -30,6 +30,7 @@ jobs:
 
     - name: Audit the checked-in Rust lockfile
       run: |
+        set -o pipefail
         cargo audit --file v2/Cargo.lock --json | tee v2/cargo-audit.json
 
     - name: Upload Rust advisory report