Which three options are selectable in a CI policy for image scanning with Jenkins or twistcli? (Choose three.)

Which three options are selectable in a CI policy for image scanning with Jenkins or twistcli? (Choose three.)
A . Scope – Scans run on a particular host
B . Credential
C . Apply rule only when vendor fixes are available
D . Failure threshold
E . Grace Period

Answer: B,D,E