A tool for working with VEX data vexctl is a tool to work with VEX (Vulnerability Exploitability eXchange) data and to use it to interpret security scanner results. It enables users to attach vex information to container images and to filter result sets using the VEX information to get a clear view of which vulnerabilities apply to their project. For more information see the --attest and --filter subcomands Usage: vexctl [command] Available Commands: add vexctl add: adds a new statement to an OpenVEX document attest vexctl attest: generate a VEX attestation completion Generate the autocompletion script for the specified shell create vexctl create: creates a new VEX document filter vexctl filter: apply a vex document to a results set generate vexctl generate: generates VEX data help Help about any command list vexctl list: lists valid status or justification options merge vexctl merge: merges two or more VEX documents into one version Prints the version Flags: -h, --help help for vexctl --log-level string the logging verbosity, either 'panic', 'fatal', 'error', 'warning', 'info', 'debug', 'trace' (default "info") Use "vexctl [command] --help" for more information about a command.