oz0 tenant vulnerable-installs
Installing or updating to a plugin version whose packages have a known critical advisory warns, naming the package, the advisory and the fixed version.
For: Operators and developers looking up a command.
Installing or updating to a plugin version whose packages have a known critical advisory warns, naming the package, the advisory and the fixed version. --refuse critical refuses such installs instead, and --refuse high refuses high ones too; --refuse off goes back to warnings. A governance setting: refusing less takes --reason, and with four eyes on, another admin's approval. Without --refuse it shows the setting.
Usage
oz0 tenant vulnerable-installs <tenant> [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--decision-ref | string | the decision or case the change follows, such as a case number (at most 200 characters) | |
--reason | string | why, required for every governance change (at most 500 characters; default $OZ0_REASON); the audit log keeps it | |
--refuse | string | critical, high, or off |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.