The vexctl add help provides the following sample:
vexctl add --file=newfile.openvex.json file.openvex.json "pkg:apk/wolfi/git@2.39.0-r1?arch=x86_64" CVE-2023-12345 fixed
but if running the same you get "product can only be specified once".
I guess this is due to the fact you have !=1 instead of >1 here... am I missing anything?
Furthermore, is there any reason why you give the capability to provide inputs via both arguments and flags? Is not that confusing to the user? Also because I can't see much documented in cli help. i.e. you mention arguments in the examples but you also provide flags (e.g. --vuln, --product)