OS Manuals

/usr/bin/guaccollect

GUAC aggregates software security metadata into a high fidelity graph database.

From guac 1.1.0-r42 (os), captured 2026-11-07 by running guaccollect --help (exit 0). permalink

guaccollect is an collector cmdline for GUAC

Usage:
  guaccollect [command]

Available Commands:
  cd          runs the clearly defined certifier
  completion  Generate the autocompletion script for the specified shell
  deps_dev    takes purls and queries them against deps.dev to find additional metadata to add to GUAC graph utilizing Nats pubsub and blob store
  files       take a folder of files and create a GUAC graph utilizing Nats pubsub and blob store
  gcs         takes SBOMs and attestations from a Google Cloud Storage bucket and injects them to GUAC graph. This command talks directly to the graphQL endpoint
  github      takes github repos and tags to download metadata documents stored in Github releases to add to GUAC graph utilizing Nats pubsub and blob store
  help        Help about any command
  image       takes images to download sbom and attestation stored in OCI to add to GUAC graph utilizing Nats pubsub and blob store
  kubescape   Collects Kubescape SBOM objects from Kubernetes api server and injects them to GUAC graph
  osv         runs the osv certifier
  registry    takes an OCI registry with catalog capability and downloads sbom and attestation stored in OCI to add to GUAC graph
  s3          takes SBOMs and attestations from S3 compatible bucket and injects them to GUAC graph
  scorecard   runs the scorecard certifier

Flags:
      --blob-addr string       gocloud connection string for blob store configured via https://gocloud.dev/howto/blob/ (default: filesystem) (default "file:///tmp/blobstore?no_tmp_dir=true")
      --csub-addr string       address to connect to collect-sub service (default "localhost:2782")
      --csub-tls               enable tls connection to the server
      --csub-tls-skip-verify   skip verifying server certificate (for self-signed certificates for example)
      --enable-otel            enable otel metrics and tracing
      --enable-prometheus      enable prometheus metrics
      --gql-addr string        endpoint used to connect to graphQL server (default "http://localhost:8080/query")
  -h, --help                   help for guaccollect
      --publish-to-queue       enable/disable message publish to queue (default true)
      --pubsub-addr string     gocloud connection string for pubsub configured via https://gocloud.dev/howto/pubsub/ (default is nats://127.0.0.1:4222) (default "nats://127.0.0.1:4222")
      --service-poll           sets the collector or certifier to polling mode (default true)
      --use-csub               use collectsub server for datasource (default true)
  -v, --version                version for guaccollect

Use "guaccollect [command] --help" for more information about a command.
Options (13)
OptionDescriptionSource
--blob-addr stringgocloud connection string for blob store configured via https://gocloud.dev/howto/blob/ (default: filesystem) (default "file:///tmp/blobstore?no_tmp_dir=true")help
--csub-addr stringaddress to connect to collect-sub service (default "localhost:2782")help
--csub-tlsenable tls connection to the serverhelp
--csub-tls-skip-verifyskip verifying server certificate (for self-signed certificates for example)help
--enable-otelenable otel metrics and tracinghelp
--enable-prometheusenable prometheus metricshelp
--gql-addr stringendpoint used to connect to graphQL server (default "http://localhost:8080/query")help
-h, --helphelp for guaccollecthelp
--publish-to-queueenable/disable message publish to queue (default true)help
--pubsub-addr stringgocloud connection string for pubsub configured via https://gocloud.dev/howto/pubsub/ (default is nats://127.0.0.1:4222) (default "nats://127.0.0.1:4222")help
--service-pollsets the collector or certifier to polling mode (default true)help
--use-csubuse collectsub server for datasource (default true)help
-v, --versionversion for guaccollecthelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.