Which three Options are selectable in a CI policy for image scanning with Jenkins or twistcli? (Choose three.)