Document link:

No official document available

Section number and name:.

NA

Describe the issue:

A customer is looking for guidance on how to use VEX files with OpenSCAP in RHEL 10. Specifically, they want to know what command or workflow should replace

/usr/bin/oscap oval eval --report ...

 given the deprecation of OVAL v2.

Impact of this issue:

I did not find any mention in the RHEL 10 product documentation about OVAL v2 deprecation, nor are there steps explaining how to consume or use VEX files with OpenSCAP.

Suggestions for improvement:

Customers do not have documented steps to follow, which causes confusion when transitioning from OVAL to VEX in RHEL 10.