function main(assetName = 'full asset path to add marks to') {
  // [START securitycenter_add_delete_security_marks]
  // Imports the Google Cloud client library.
  const {SecurityCenterClient} = require('@google-cloud/security-center');

  // Creates a new client.
  const client = new SecurityCenterClient();

  async function addDeleteSecurityMarks() {
    // assetName is the full resource path for the asset to update.
    // Specify the value of 'assetName' in one of the following formats:
    //    `organizations/${org-id}/assets/${asset-id}`;
    //    `projects/${project-id}/assets/${asset-id}`;
    //    `folders/${folder-id}/assets/${asset-id}`;
    const [newMarks] = await client.updateSecurityMarks({
      securityMarks: {
        name: `${assetName}/securityMarks`,
        marks: {key_a: 'new_value_a'},
      },
      // Only update the enableAssetDiscovery field.
      updateMask: {paths: ['marks.key_a', 'marks.key_b']},
    });

    console.log('New marks: %j', newMarks);
  }
  addDeleteSecurityMarks();
  // [END securitycenter_add_delete_security_marks]
}
Demonstrates adding/updating at the same time as deleting security
marks from an asset.