gcloud alpha scc findings update-marks Stay organized with collections Save and categorize content based on your preferences.
- NAME
- gcloud alpha scc findings update-marks - update Security Command Center finding's security marks
- SYNOPSIS
gcloud alpha scc findings update-marksFINDING[--location=LOCATION; default="global"][--security-marks=[KEY=VALUE,…]][--source=SOURCE; default="-"][--start-time=START_TIME][--update-mask=UPDATE_MASK][--folder=FOLDER|--organization=ORGANIZATION|--project=PROJECT][GCLOUD_WIDE_FLAG …]
- DESCRIPTION
(ALPHA)Update Security Command Center finding's security marks.- EXAMPLES
- Selectively update security mark
Key1with valuev1ontestFinding. Note that other security marks ontestFindingareuntouched:gcloudalphasccfindingsupdate-marks`testFinding`--organization=123456--source=5678--security-marks="key1=v1"--update-mask="marks.markKey1"Update all security marks on
testFinding, under projectexample-projectand source5678:gcloudalphasccfindingsupdate-marksprojects/example-project/sources/5678/findings/testFinding--security-marks="key1=v1,key2=v2"Update all security marks on
testFinding, under folder456and source5678:gcloudalphasccfindingsupdate-marksfolders/456/sources/5678/findings/testFinding--security-marks="key1=v1,key2=v2"Update all security marks on
testFinding, under organization123456and source5678:gcloudalphasccfindingsupdate-marks`testFinding`--organization=123456--source=5678--security-marks="key1=v1,key2=v2"Delete all security marks on
testFinding:gcloudalphasccfindingsupdate-marks`testFinding`--organization=123456--source=5678--security-marks=""Update all security marks on
testFinding, under projectexample-project, source5678andlocation=eu:gcloudalphasccfindingsupdate-marksprojects/example-project/sources/5678/findings/testFinding--security-marks="key1=v1,key2=v2"--location=eu - POSITIONAL ARGUMENTS
FINDING- ID of the finding or fully qualified identifier for the finding.
- FLAGS
--location=LOCATION; default="global"- When data residency controls are enabled, this attribute specifies the locationin which the resource is located and applicable. The
locationattribute can be provided as part of the fully specified resource name or withthe--locationargument on the command line. The default locationisglobal.NOTE: If you override the endpoint to aregionalendpoint you must specify the correctdatalocation using this flag. The default location on this command is unrelatedto the default location that is specified when data residency controls areenabled for Security Command Center.
NOTE: If no location is specified, the default location is
globalAND the request will be routed to the SCC V1 API. To use the SCC V2 API - pleaseexplicitly specify the flag. --security-marks=[KEY=VALUE,…]- SecurityMarks resource to be passed as the request body. It's a key=value pairseparated by comma (,). For example: --security-marks="key1=val1,key2=val2".
--source=SOURCE; default="-"- Source id. Defaults to all sources.
--start-time=START_TIME- Time at which the updated SecurityMarks take effect. See
$gcloud topic datetimesforinformation on supported time formats. --update-mask=UPDATE_MASK- Use update-mask if you want to selectively update marks represented by--security-marks flag. For example: --update-mask="marks.key1,marks.key2". Ifyou want to override all the marks for the given finding either skip theupdate-mask flag or provide an empty value (--update-mask '') for it.
- At most one of these can be specified:
--folder=FOLDER- The folder ID (e.g., 456) that contains the finding.
--organization=ORGANIZATION- The organization ID (e.g., 123) that contains the finding.
--project=PROJECT- The project ID (e.g., example-project) that contains the finding.
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$gcloud helpfor details. - API REFERENCE
- This command uses the Security Command Center API. For more information, seeSecurityCommand Center API.
- NOTES
- This command is currently in alpha and might change without notice. If thiscommand fails with API permission errors despite specifying the correct project,you might be trying to access an API with an invitation-only early accessallowlist. These variants are also available:
gcloudsccfindingsupdate-marksgcloudbetasccfindingsupdate-marks
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-10-21 UTC.