ci: fix vulnix GITHUB_OUTPUT format error

2026-09-11 15:25:03 -05:00
parent 1447febbaf
commit ba23f719ab
2 changed files with 10 additions and 2 deletions
@@ -18,7 +18,8 @@ def run(*args, **kw):


 def nix(*args):
-    return subprocess_tee.run(("nix", "--extra-experimental-features", "nix-command flakes", "-L", *args), check=True, text=True).stdout
+    # tee to stderr - stdout leaks into GITHUB_OUTPUT $() captures
+    return subprocess_tee.run(("nix", "--extra-experimental-features", "nix-command flakes", "-L", *args), check=True, text=True, stdout=sys.stderr).stdout


 def git(*args, check=True):
@@ -254,7 +255,7 @@ def format_vulnix(vulns):

 def vulnix(args):
    paths = list(build_hosts(args.ref).values())
-    result = run("vulnix", "-j", "-C", *paths, capture_output=True)
+    result = run("vulnix", "-j", *paths, capture_output=True)
    if result.returncode not in (0, 2):
        print(result.stderr, file=sys.stderr)
        sys.exit(result.returncode)