Page Comparison

• No Scan - No scan will take place
• Before Push - The built image will be scanned prior to pushing it to a registry
• After Push - The built image will be scanned after pushing it to a registry. Note that if Push Image is false, then it will be scanned regardless.

An optional Groovy script to determine if the scan should fail. See the Anchore Plugin for a list of variables and sample scripts.

If the script should evaluate to true (I.E. a failure) then the image building process will halt and the workflow execution will fail. 

Anchore uses "policy bundles" to define analysis/scanning criteria. You can provide a custom bundle here defining your own scanning requirements. 

You can reference an absolute path on your docker build server or a relative location in your source control for the image.