...

• The most common use case lets the policy bundle unequivocally determine failure.

  Code Block
  language groovy
  STATUS == "fail"

• No warn or stop checks found

  Code Block
  language groovy
  (STOP_COUNT + WARN_COUNT) != 0

• A script that is more lenient on non-master stream builds (could be only master stream is pushed to the registry and other streams are for local testing).

  Code Block
  language groovy
  //master is not allowed any stop checks whereas every other stream can have 5 or less FDBLD_STREAM_NAME == "master" ? STOP_COUNT > 0 : STOP_COUNT > 5

...

Workflow Configuration

Anchore is FlexDeploy's preferred choice when it comes to container scanning. As such, you can configure your project to scan the specified image without any configuration other than setting the below properties:

...