From ccebd059e8ca31e7a97bd07bec76dc436bb3d63a Mon Sep 17 00:00:00 2001
From: Jesper Noordsij <45041769+jnoordsij@users.noreply.github.com>
Date: Thu, 10 Apr 2025 10:54:18 +0200
Subject: [PATCH 1/2] Fix GitLab CI example in README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 6cc5751..968c4fc 100644
--- a/README.md
+++ b/README.md
@@ -384,7 +384,7 @@ pipelines:
               docker scout cves "$CI_REGISTRY_IMAGE${tag}" --exit-code --only-severity critical,high    
             else
               # Compare image from branch with latest image from the default branch and fail if new critical or high CVEs are detected            
-              docker scout compare "$CI_REGISTRY_IMAGE${tag}" --to "$CI_REGISTRY_IMAGE:latest" --exit-code --only-severity critical,high --ignore-unchanged
+              docker scout compare "$CI_REGISTRY_IMAGE${tag}" --to "$CI_REGISTRY_IMAGE:latest" --exit-on vulnerability,policy --only-severity critical,high --ignore-unchanged
             fi
           - docker push "$CI_REGISTRY_IMAGE${tag}"
 

From 468b470db5b3384a8162f7b809ba96bdf8fca3f2 Mon Sep 17 00:00:00 2001
From: Jesper Noordsij <45041769+jnoordsij@users.noreply.github.com>
Date: Thu, 10 Apr 2025 10:57:14 +0200
Subject: [PATCH 2/2] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 968c4fc..2bd0ee7 100644
--- a/README.md
+++ b/README.md
@@ -214,7 +214,7 @@ docker-build:
         docker scout cves "$CI_REGISTRY_IMAGE${tag}" --exit-code --only-severity critical,high    
       else
         # Compare image from branch with latest image from the default branch and fail if new critical or high CVEs are detected
-        docker scout compare "$CI_REGISTRY_IMAGE${tag}" --to "$CI_REGISTRY_IMAGE:latest" --exit-code --only-severity critical,high --ignore-unchanged
+        docker scout compare "$CI_REGISTRY_IMAGE${tag}" --to "$CI_REGISTRY_IMAGE:latest" --exit-on vulnerability,policy --only-severity critical,high --ignore-unchanged
       fi
     
     - docker push "$CI_REGISTRY_IMAGE${tag}"