diff --git a/ci/do-audit.sh b/ci/do-audit.sh
index d7c16187d71e2a..216480ed1eaa2c 100755
--- a/ci/do-audit.sh
+++ b/ci/do-audit.sh
@@ -30,3 +30,5 @@ cargo_audit_ignores=(
   --ignore RUSTSEC-2023-0001
 )
 scripts/cargo-for-all-lock-files.sh audit "${cargo_audit_ignores[@]}" | $dep_tree_filter
+# we want the `cargo audit` exit code, not `$dep_tree_filter`'s
+exit "${PIPESTATUS[0]}"
diff --git a/ci/docker-run.sh b/ci/docker-run.sh
index 0df66f2a881b05..b7a1c3a4d05efa 100755
--- a/ci/docker-run.sh
+++ b/ci/docker-run.sh
@@ -125,4 +125,4 @@ fi
 
 set -x
 # shellcheck disable=SC2086
-exec docker run "${ARGS[@]}" $CODECOV_ENVS "$IMAGE" "$@"
+exec docker run "${ARGS[@]}" $CODECOV_ENVS -t "$IMAGE" "$@"