Creating a VEX report for dependencies

info

The system generates VEX reports in JSON format according to the CycloneDX standard.

To create a VEX report, follow these steps:

1. Go to Projects → Project name → Dependencies.

2. Select Create VEX report on the VEX reports tab.

3. In the form that opens, enter the following information to create the report:

   • SBOM files—one or more SBOM files from the list of previously uploaded files. The report uses these files as its basis;
   • Report metadata—a list of metadata for creating the report.
   info

   You must enter the Organization name and Organization URL metadata.

4. Select Create VEX report.

The report is now available in the list on the VEX reports tab.

To download the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the additional actions button ().
3. Select Download.

To regenerate the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the additional actions button ().
3. Select Regenerate.

To delete the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the additional actions button ().
3. Select Delete.