Return exit code 1 when secrets are found for CI pipeline usage

Author: luca-software-developer

src/main.rs

@@ -21,7 +21,11 @@ fn main() -> std::io::Result<()> {
     let rules = rules::load_rules(rules_file)?;
     info!("Loaded {} rules", rules.len());
 
-    scanner::scan_log(log_file, &rules)?;
+    let findings = scanner::scan_log(log_file, &rules)?;
+
+    if findings > 0 {
+        std::process::exit(1);
+    }
 
     Ok(())
 }

src/scanner.rs

@@ -16,7 +16,8 @@ pub struct Match {
 }
 
 /// Scans a log file using the provided rules and prints matches in a formatted table.
-pub fn scan_log<P: AsRef<std::path::Path>>(log_path: P, rules: &[Rule]) -> io::Result<()> {
+/// Returns the number of matches found.
+pub fn scan_log<P: AsRef<std::path::Path>>(log_path: P, rules: &[Rule]) -> io::Result<usize> {
     let file = File::open(log_path)?;
     let reader = BufReader::new(file);
 
@@ -73,9 +74,10 @@ pub fn scan_log<P: AsRef<std::path::Path>>(log_path: P, rules: &[Rule]) -> io::R
         ]));
     }
 
+    let count = table.row_count();
     println!("{table}");
 
-    Ok(())
+    Ok(count)
 }
 
 #[cfg(test)]