Try to allow the failure through GitLab

.gitlab-ci.yml

@@ -10,6 +10,7 @@ unit-tests:
 
 vulnerability-scan:
   stage: "test"
+  allow_failure: true
   script:
     - "ci-tools/vulnerability-scan security-report.txt"
   artifacts:

ci-tools/vulnerability-scan

@@ -30,6 +30,7 @@ else
 fi
 '
 
-# vulnix exits with an error status if there are vulnerabilities.  we don't
-# want to fail the job in that case because then we can't see the report.
-nix-shell -p vulnix --run 'vulnix ./scan-target/ || true' | tee "$OUTPUT"
+# vulnix exits with an error status if there are vulnerabilities.  We told
+# GitLab to allow this by setting `allow_failure` to true in the GitLab CI
+# config.
+nix-shell -p vulnix --run 'vulnix ./scan-target/' | tee "$OUTPUT"