scan_fail_build defaults to false