Skip to content

bomify security vex add

bomify security vex add

Add or replace a VEX document in the managed store

Synopsis

Add stores a copy of the VEX document (OpenVEX, CSAF, or CycloneDX VEX) under , for "bomify security policy create --vex ". The document is checked first. Later edits to have no effect until it's added again; adding an existing replaces it for every rule using it.

"bomify security scan --vex " reads a file directly instead.

bomify security vex add <name> <file> [flags]

Examples

  # Store the team's OpenVEX document as "team"
  bomify security vex add team vex/team.openvex.json

  # After editing it, add it again to update every rule using "team"
  bomify security vex add team vex/team.openvex.json

Options

  -h, --help   help for add

Options inherited from parent commands

      --data-dir string   directory to store bomify data (e.g., built packages). default is $HOME/.bomify or the value of the BOMIFY_DATA_DIR environment variable
      --docs-dir string   directory to write documentation to (if empty, no docs are generated)
      --verbose           enable verbose (debug) logging

SEE ALSO