diff --git a/scripts/g14-gitops-render.mjs b/scripts/g14-gitops-render.mjs
index 86d52993..afc42d5b 100644
--- a/scripts/g14-gitops-render.mjs
+++ b/scripts/g14-gitops-render.mjs
@@ -621,7 +621,10 @@ function ciJsonScript(ci) {
   ];
   for (const command of commands) {
     lines.push(`echo ${shellSingleQuote(`CI.json command: ${command.name}`)}`);
+    lines.push("(");
+    lines.push("set -eu");
     lines.push(command.run);
+    lines.push(")");
   }
   return `${lines.join("\n")}\n`;
 }