open/ktg-plugin-marketplace
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity Actions

fix(scanners): use process.exitCode instead of process.exit() after stdout.write

Browse source 
process.exit() terminates before pipe buffers drain, truncating output
at 64KB when piped through another Node.js process on macOS. Affects
scan-orchestrator (SARIF output) and supply-chain-recheck-cli.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Kjell Tore Guttormsen 2026-04-10 14:11:31 +02:00
commit d642203991
2 changed files with 8 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

9
plugins/llm-security/scanners/scan-orchestrator.mjs
View file

@ -271,10 +271,11 @@ async function main() {
`[deep-scan] Duration: ${totalDuration}ms\n`
);
// Exit code based on verdict
if (agg.verdict === 'BLOCK') process.exit(2);
if (agg.verdict === 'WARNING') process.exit(1);
process.exit(0);
// Exit code based on verdict — use exitCode instead of exit() to allow
// stdout pipe buffers to drain fully (process.exit() truncates >64KB on macOS)
if (agg.verdict === 'BLOCK') process.exitCode = 2;
else if (agg.verdict === 'WARNING') process.exitCode = 1;
else process.exitCode = 0;
}
main().catch(err => {

6
plugins/llm-security/scanners/supply-chain-recheck-cli.mjs
View file

@ -32,6 +32,6 @@ result.aggregate = { risk_score: score, verdict: verd };
process.stdout.write(JSON.stringify(result, null, 2) + '\n');
if (verd === 'BLOCK') process.exit(2);
if (verd === 'WARNING') process.exit(1);
process.exit(0);
if (verd === 'BLOCK') process.exitCode = 2;
else if (verd === 'WARNING') process.exitCode = 1;
else process.exitCode = 0;