vexctl | Create, apply, and attest VEX data!
Description
Join us in this demo as we review VEXctl, an open source tool that can create and merge Vulnerability Exploitability eXchange
(VEX) documents, filter VEX data from SARIF reports, and attest VEX data.
Chapters
0:00 Intro
0:29 Installation
00:41 Help message
00:56 Input File
1:18 Vexy Configuration File
2:00 Generate Vex Document
2:34 Format Flag
3:18 Output Flag
3:56 Quiet & Debug Flag
4:11 Final Thoughts
4:50 Thanks for watching!
Resources
🎯 GitHub: https://github.com/openvex/vexctl
🎯 OpenVEX Spec: https://github.com/openvex/spec/blob/...
🎯 Learn More About VEX: https://www.cisa.gov/sites/default/fi...
More Great SBOM Resources!
🌐 https://learnsbom.com
Contact Us!
📨 [email protected]
Royalty Free Music: Bensound.com
License code: B7OEUOBC7PRBFPOY
#sbom #vex #cisa