oz0 plugin vulns

Usage and flags for oz0 plugin vulns.

For: Operators and developers looking up a command.

List the findings of the vulnerability scan: for each installed plugin version, the packages its SBOM names (its lockfiles and the closures the edge pinned) that an advisory affects, with the advisory's ID, its severity and the version that fixes it, or 'no fixed version yet'. Advisories come from trusted indexes' signed advisories, an operator's import (oz0 index advisories import) and the opt-in feed (server start --advisory-feed-file or OZ0_ADVISORY_FEED); nothing is fetched to make this list.

The edge scans when they change, when a version is installed, and daily. The tenant's readers may.

Usage

oz0 plugin vulns [name] [flags]

Flags

FlagTypeDefaultDescription
--jsonboolprint JSON instead of a table
--tenantstringthe default tenantthe tenant

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026