Require coverage

Choose the strictness you need

Configured analysis

--fail-on-coverage-gapExit 2 when an analyzer configured to run is unavailable or fails.

Named requirement

--require-analyzersExit 2 unless every named analyzer is delivered as ok or not_applicable; disabling one is a contradiction.

Require SCA explicitly

Analyzer names come from the stable registry exposed by the installed engine. Validate the exact names with fendix scan --help; unknown names fail before scanning.

fendix scan \
  --code ./src \
  --require-analyzers pip,npm,govulncheck \
  --fail-on-coverage-gap \
  --format json \
  --output findings.json

Interpret exit 2 correctly

Exit 2 means the requested analysis contract was not fulfilled. It is operationally different from exit 1, which means a finding reached BLOCK. Preserve the report so the coverage reason remains reviewable.

Why does this work this way?

Read Coverage for the model and Findings and release decisions for outcome boundaries. Exact analyzer names and options are in the scan decisions and coverage reference.