# AnchoreCTL Policies Report

AnchoreCTLs JSON policies report format. Both legacy list-based format and new evaluation-based format are supported.

## Usage

To generate a policy report that can be imported into DefectDojo:

```bash
# Evaluate policies and output to JSON format
anchorectl policy evaluate -o json > policy_report.json
```

### Sample Scan Data

Sample AnchoreCTL Policies Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/anchorectl_policies).

### Default Deduplication Hashcode Fields

By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/):

- title
- severity
- component name
- file path