.TH "GCLOUD_ARTIFACTS_VULNERABILITIES_LOAD\-VEX" 1



.SH "NAME"
.HP
gcloud artifacts vulnerabilities load\-vex \- load VEX data from a CSAF file into Artifact Analysis



.SH "SYNOPSIS"
.HP
\f5gcloud artifacts vulnerabilities load\-vex\fR \fB\-\-source\fR=\fISOURCE\fR \fB\-\-uri\fR=\fIURI\fR [\fB\-\-location\fR=\fILOCATION\fR] [\fB\-\-project\fR=\fIPROJECT\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

Command loads VEX data from a Common Security Advisory Framework (CSAF) file
into Artifact Analysis as VulnerabilityAssessment Notes. VEX data tells Artifact
Analysis whether vulnerabilities are relevant and how.



.SH "EXAMPLES"

To load a CSAF security advisory file given an artifact in Artifact Registry and
the file on disk, run:

.RS 2m
$ gcloud artifacts vulnerabilities load\-vex \e
\-\-uri=us\-east1\-docker.pkg.dev/project123/repository123/\e
someimage@sha256:49765698074d6d7baa82f \-\-source=/path/to/vex/file
.RE

To load a CSAF security advisory file given an artifact with a tag and a file on
disk, run:

.RS 2m
$ gcloud artifacts vulnerabilities load\-vex \e
\-\-uri=us\-east1\-docker.pkg.dev/project123/repository123/\e
someimage:latest \-\-source=/path/to/vex/file
.RE



.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m
\fB\-\-source\fR=\fISOURCE\fR

The path of the VEX file.

.TP 2m
\fB\-\-uri\fR=\fIURI\fR

The path of the artifact in Artifact Registry. A 'gcr.io' image can also be used
if redirection is enabled in Artifact Registry. Make sure
\'artifactregistry.projectsettings.get' permission is granted to the current
gcloud user to verify the redirection status.


.RE
.sp

.SH "OPTIONAL FLAGS"

.RS 2m
.TP 2m
\fB\-\-location\fR=\fILOCATION\fR

If specified, all requests to Artifact Analysis for occurrences will go to
location specified

.TP 2m
\fB\-\-project\fR=\fIPROJECT\fR

The parent project to load security advisory into.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.