docker scout cves myapp:latest --exit-code --only-severity critical
Category: Docker
docker scout cves myapp:latest --exit-code --only-severity critical
Exit with code 2 if critical CVEs found (useful in CI)
Exits with a non-zero code if critical CVEs are found — useful in CI to fail builds with critical vulnerabilities.