Creating a VEX report for dependencies

info

VEX reports use the CycloneDX standard in JSON format.

To create a VEX report, follow these steps:

1. Go to Projects → Project name → Dependencies.

2. Select Create VEX report on the VEX reports tab.

3. In the form that opens, enter the following information to create the report:

   • SBOM files—one or more SBOM files from the list of previously uploaded files. The system uses these files to create the report;
   • Report metadata—a list of metadata for creating the report.
   info

   You must enter the Organization name and Organization URL metadata.

4. Select Create VEX report.

The report will then appear in the list on the VEX reports tab.

To download the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the additional actions button ().
3. Select Download.

To regenerate the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the additional actions button ().
3. Select Regenerate.

To delete the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the additional actions button ().
3. Select Delete.