/usr/bin/vexctl

A tool for working with VEX data

vexctl is a tool to work with VEX (Vulnerability Exploitability eXchange)
data and to use it to interpret security scanner results.

It enables users to attach vex information to container images and to
filter result sets using the VEX information to get a clear view of which
vulnerabilities apply to their project.

For more information see the --attest and --filter subcomands

Usage:
  vexctl [command]

Available Commands:
  add         vexctl add: adds a new statement to an OpenVEX document
  attest      vexctl attest: generate a VEX  attestation
  completion  Generate the autocompletion script for the specified shell
  create      vexctl create: creates a new VEX document
  filter      vexctl filter: apply a vex document to a results set
  generate    vexctl generate: generates VEX data
  help        Help about any command
  list        vexctl list: lists valid status or justification options
  merge       vexctl merge: merges two or more VEX documents into one
  version     Prints the version

Flags:
  -h, --help               help for vexctl
      --log-level string   the logging verbosity, either 'panic', 'fatal', 'error', 'warning', 'info', 'debug', 'trace' (default "info")

Use "vexctl [command] --help" for more information about a command.