Similar to #583, we need to be more careful when we react to a non-zero exit code. The Aqua scanner seems to use a variety of exit codes to communicate various error states. Unfortunately, I did not find documentation on this so far. From experimenting, I know that:
0 is returned when the scan runs through and there is no compliance error
4 is returned when the scan runs through but there is a compliance error (e.g. vulnerabilities of severity high or critical were found and there is an image assurance policy preventing that)
Similar to #583, we need to be more careful when we react to a non-zero exit code. The Aqua scanner seems to use a variety of exit codes to communicate various error states. Unfortunately, I did not find documentation on this so far. From experimenting, I know that: