@@ -149,7 +149,7 @@ jobs:
       if: success()
       run: |
         response=$(curl -s -o response.json -w "%{http_code}" \
-          -X POST "https://epplussoftware.com/api/security/vulnerability/scan/complete?scanId=${SCAN_ID}" \
+          -X POST "https://epplussoftware.com/api/security/vulnerability/scan/complete?scanId=${SCAN_ID}&status=completed" \
           -H "X-Api-Key: ${{ secrets.EPPLUS_VULNERABILITY_API_KEY }}")
 
         if [ "$response" != "200" ]; then
@@ -160,3 +160,22 @@ jobs:
 
         echo "Scan $SCAN_ID completed successfully"
         cat response.json
+
+    - name: Fail scan
+      shell: bash
+      if: failure()
+      run: |
+        if [ -n "$SCAN_ID" ]; then
+          response=$(curl -s -o response.json -w "%{http_code}" \
+            -X POST "https://epplussoftware.com/api/security/vulnerability/scan/complete?scanId=${SCAN_ID}&status=failed" \
+            -H "X-Api-Key: ${{ secrets.EPPLUS_VULNERABILITY_API_KEY }}")
+
+          if [ "$response" != "200" ]; then
+            echo "WARNING: Failed to mark scan as failed with HTTP $response"
+            cat response.json
+          else
+            echo "Scan $SCAN_ID marked as failed"
+          fi
+        else
+          echo "No SCAN_ID available, skipping fail notification"
+        fi