gcloud alpha scc findings update-marks

NAME
gcloud alpha scc findings update-marks - update Security Command Center finding's security marks
SYNOPSIS
gcloud alpha scc findings update-marksFINDING[--location=LOCATION; default="global"][--security-marks=[KEY=VALUE,…]][--source=SOURCE; default="-"][--start-time=START_TIME][--update-mask=UPDATE_MASK][--folder=FOLDER    |--organization=ORGANIZATION    |--project=PROJECT][GCLOUD_WIDE_FLAG]
DESCRIPTION
(ALPHA) Update Security Command Center finding's security marks.
EXAMPLES
Selectively update security markKey1 with valuev1 ontestFinding. Note that other security marks ontestFinding areuntouched:
gcloudalphasccfindingsupdate-marks`testFinding`--organization=123456--source=5678--security-marks="key1=v1"--update-mask="marks.markKey1"

Update all security marks ontestFinding, under projectexample-project and source5678:

gcloudalphasccfindingsupdate-marksprojects/example-project/sources/5678/findings/testFinding--security-marks="key1=v1,key2=v2"

Update all security marks ontestFinding, under folder456 and source5678:

gcloudalphasccfindingsupdate-marksfolders/456/sources/5678/findings/testFinding--security-marks="key1=v1,key2=v2"

Update all security marks ontestFinding, under organization123456 and source5678:

gcloudalphasccfindingsupdate-marks`testFinding`--organization=123456--source=5678--security-marks="key1=v1,key2=v2"

Delete all security marks ontestFinding:

gcloudalphasccfindingsupdate-marks`testFinding`--organization=123456--source=5678--security-marks=""

Update all security marks ontestFinding, under projectexample-project, source5678 andlocation=eu:

gcloudalphasccfindingsupdate-marksprojects/example-project/sources/5678/findings/testFinding--security-marks="key1=v1,key2=v2"--location=eu
POSITIONAL ARGUMENTS
FINDING
ID of the finding or fully qualified identifier for the finding.
FLAGS
--location=LOCATION; default="global"
When data residency controls are enabled, this attribute specifies the locationin which the resource is located and applicable. Thelocationattribute can be provided as part of the fully specified resource name or withthe--location argument on the command line. The default locationisglobal.

NOTE: If you override the endpoint to aregionalendpoint you must specify the correctdatalocation using this flag. The default location on this command is unrelatedto the default location that is specified when data residency controls areenabled for Security Command Center.

NOTE: If no location is specified, the default location isglobalAND the request will be routed to the SCC V1 API. To use the SCC V2 API - pleaseexplicitly specify the flag.

--security-marks=[KEY=VALUE,…]
SecurityMarks resource to be passed as the request body. It's a key=value pairseparated by comma (,). For example: --security-marks="key1=val1,key2=val2".
--source=SOURCE; default="-"
Source id. Defaults to all sources.
--start-time=START_TIME
Time at which the updated SecurityMarks take effect. See$gcloud topic datetimes forinformation on supported time formats.
--update-mask=UPDATE_MASK
Use update-mask if you want to selectively update marks represented by--security-marks flag. For example: --update-mask="marks.key1,marks.key2". Ifyou want to override all the marks for the given finding either skip theupdate-mask flag or provide an empty value (--update-mask '') for it.
At most one of these can be specified:
--folder=FOLDER
The folder ID (e.g., 456) that contains the finding.
--organization=ORGANIZATION
The organization ID (e.g., 123) that contains the finding.
--project=PROJECT
The project ID (e.g., example-project) that contains the finding.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

API REFERENCE
This command uses the Security Command Center API. For more information, seeSecurityCommand Center API.
NOTES
This command is currently in alpha and might change without notice. If thiscommand fails with API permission errors despite specifying the correct project,you might be trying to access an API with an invitation-only early accessallowlist. These variants are also available:
gcloudsccfindingsupdate-marks
gcloudbetasccfindingsupdate-marks

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-10-21 UTC.