Creating a VEX report for dependencies

info

VEX reports are generated in JSON format according to the CycloneDX standard.

To create a VEX report, follow these steps:

1. Go to Projects → Project name → Dependencies.

2. Select Create VEX report on the VEX reports tab.

3. In the form that opens, enter the following information to generate the report:

   • SBOM files—one or more previously uploaded SBOM files to use to generate the report;
   • Report metadata—the metadata to use to generate the report.
   info

   You must enter the Organization name and Organization URL metadata.

4. Select Create VEX report.

The report will then be available in the list on the VEX reports tab.

To Download the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the additional actions button ().
3. Select Download.

To regenerate the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the additional actions button ().
3. Select Regenerate.

To delete the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the additional actions button ().
3. Select Delete.