brick-config.yml

metadata:
  name: "security-team/container-scan"
  type: "brick"
  golden-paths: 
    - “backend”
inputs:
  image:
    type: "string"
    default: "${{repository.name}}:${{repository.sha}}"
steps:
  - image: "anchore/engine-cli:v.0.9.4"
    command: "export ANCHORE_RESULT=$(anchore-cli evaluate check ${{params.image.id}})" 
  - image: "linux/alpine:3.15.0"
    command: "echo $ANCHORE_RESULT | grep -q \"Status:Success\" > ANALYSYS_RESULT"
outputs:
   image:
     type: "string"
     value: "${inputs.image}"
   status:
     type: "boolean"
     value: "${{ANALYSIS_RESULT}}"