diff --git a/.gitea/workflows/test-hello.yml b/.gitea/workflows/test-hello.yml
index a7a2ce5..f8753c2 100644
--- a/.gitea/workflows/test-hello.yml
+++ b/.gitea/workflows/test-hello.yml
@@ -43,10 +43,12 @@ jobs:
 
           echo ""
           echo "Controllo pattern password in chiaro..."
-          if grep -r "password\s*=\s*['\"][^'\"]\+['\"]" \
+          MATCHES=$(grep -r "password\s*=\s*['\"][^'\"]\+['\"]" \
                --include="*.rb" --include="*.php" \
-               --exclude-dir=".git" . 2>/dev/null | grep -v "test\|spec\|example\|placeholder\|CHANGE" | head -5; then
-            echo "ATTENZIONE: possibili password hardcoded trovate (verificare manualmente)"
+               --exclude-dir=".git" . 2>/dev/null | grep -v "test\|spec\|example\|placeholder\|CHANGE" || true)
+          if [ -n "$MATCHES" ]; then
+            echo "ATTENZIONE: possibili password hardcoded trovate (verificare manualmente):"
+            echo "$MATCHES" | head -5
           else
             echo "OK: nessun pattern password pericoloso rilevato"
           fi