emit json instead of text

.gitlab-ci.yml

@@ -11,7 +11,7 @@ unit-tests:
 vulnerability-scan:
   stage: "test"
   script:
-    - "ci-tools/vulnerability-scan security-report.txt"
+    - "ci-tools/vulnerability-scan security-report.json"
   artifacts:
     paths:
       - "security-report.txt"

ci-tools/vulnerability-scan

@@ -42,7 +42,7 @@ fi
 # (non-whitelisted errors).  3 indicates unexpected error so we let that
 # propagate.
 set +e
-nix-shell -p vulnix --run 'vulnix ./scan-target/' | tee "$OUTPUT"
+nix-shell -p vulnix --run 'vulnix --json ./scan-target/' | tee "$OUTPUT"
 vulnix_status=$?
 set -e