Fix code logic in BitLocker check (issue #87)

info/CHANGELOG.md

@@ -5,6 +5,7 @@
 ### Fixed
 
 - Added TPM vendor IDs to fix improper TPM type resolution (issue #86).
+- Properly set "Vulnerable" flag in BitLocker check (issue #87).
 
 ## 2026-04-10
 

src/check/Hardening.ps1

@@ -521,6 +521,8 @@ function Invoke-BitLockerCheck {
                     $Config | Add-Member -MemberType "NoteProperty" -Name "Protectors" -Value ($Protectors -join ", ")
 
                     if ($TpmOnly) {
+
+                        $Vulnerable = $true
                         $DescriptionElements += "A TPM protector is configured without a second factor of authentication (TPM only)."
 
                         if ($null -ne $TpmDeviceInformation) {