Exit Codes¶
| Code | Meaning | Automation action |
|---|---|---|
0 |
Scan and deterministic report generation succeeded, or a requested status/help action succeeded | Retain reports and apply the organization's security policy |
1 |
Scanner execution failed | Review OpenGrep/process diagnostics and filesystem access |
2 |
Configuration or command-line input is invalid | Correct paths, values, or missing arguments |
3 |
License validation failed | Use the stable license error identifier to correct activation or entitlement state |
Findings do not fail execution¶
OpenGrep exit code 1 means matches were detected. PostQ treats OpenGrep codes 0 and 1 as
successful engine completion, so a completed scan with findings still exits 0 after report
generation.
Do not use process exit alone as a security gate. Define repository acceptance from deterministic report facts in a separate version-controlled policy step.
Common license identifiers¶
License errors include a stable identifier such as:
LICENSE_REQUIREDLICENSE_EXPIREDBETA_ENDEDREPOSITORY_LIMIT_EXCEEDEDFILE_LIMIT_EXCEEDED
Other validation failures can describe malformed content, an invalid signature, unsupported product/type, inactive dates, or detected clock rollback. Do not publish the license file while troubleshooting.