oz0 index advisories

Usage and flags for oz0 index advisories.

For: Operators and developers looking up a command.

The vulnerability scan of installed plugins compares their packages with advisories from three sources: trusted indexes' signed advisories (read when the index is refreshed), an operator's import (this command; the air-gapped path), and the opt-in feed (server start --advisory-feed-file or OZ0_ADVISORY_FEED). For the same advisory the import wins over the feed, and the feed over the indexes; the indexes count side by side, and none hides another's.

Usage

oz0 index advisories [command]

Subcommands

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

Copyright © 2026