In this article
vex-scan
| Field | Value |
|---|---|
| Kind | prompt |
| Source | .github/prompts/security/vex-scan.prompt.md |
| Invocation | Slash command /vex-scan |
| Interactive | Yes |
What it does
Run a full VEX pipeline that scans dependencies, enriches CVEs, analyzes exploitability, and drafts an OpenVEX document for review - Brought to you by microsoft/hve-core
When to use it
Describe the situations where this asset is the right choice, and when to reach for a different asset instead.
How to use it
Walk through invoking this asset step by step. Remove this section when the asset is not interactive.
Example usage
Provide a concrete example that shows the asset in action, including representative input and the resulting output.