Search your KSOC image vulnerabilities in multiple accounts for a specific vulnerability name.

In each KSOC account you want to search, create an API token in Settings>API Tokens. Take note of the Access Key and Secret Access Key. You will also need the Account ID which can be found in the browser address bar.
https://app.ksoc.com/{TENANTID}/accounts/{ACCOUNTID}

Add one entry for each account in the file allaccounts.sh
./images {accessKeyId1} {secretKeyId1} {accountId1}
./images {accessKeyId2} {secretKeyId2} {accountId2}

Then run ./allaccounts.sh. For each account in allaccounts.sh, all the image vulnerability, workload, and cluster data will be downloaded in a files in the local folder.\

The file names are:
{ACCOUNT_ID}-{NAME}-{DIGEST}.image
{ACCOUNT_ID}-{NAME}-{DIGEST}.image.cluster.data
{ACCOUNT_ID}-{NAME}-{DIGEST}.sbom.resource.data
{ACCOUNT_ID}-{NAME}-{DIGEST}.sbom.vuln.data

Run search.sh and include one vulnerability name (e.g. CVE-2023-3817) name as a parameter.

Example:
search.sh CVE-2023-3817

All the images will be searched and results will be seen in STOUT.

You can output the data to a CSV by redirecting STOUT.

Example:
search.sh CVE-2023-3817 > search_CVE-2023-3817.csv

Output includes the following:

• imagename
• imagesource
• mageversion
• vulnName
• dataSource
• severity
• fixIn
• packageName
• packageVersion
• packageType
• workloadname
• workloadtype
• workloadnamespace
• workloadcluster

Example output below for CVE-2023-3817 :