Create a VEX report for dependencies

info

VEX reports are generated in JSON format according to the CycloneDX standard.

To create a VEX report, follow these steps:

1. Go to Projects → Project name → Dependencies.

2. Select Create VEX report on the VEX reports tab.

3. In the form that opens, enter the following information to generate the report:

   • SBOM files—one or more SBOM files from the list of previously uploaded files. The report will be generated based on these files.
   • Report metadata—a list of metadata used to generate the report.
   info

   You must provide the Organization name and Organization URL metadata.

4. Select Create VEX report.

The report will then be available in the list on the VEX reports tab.

To download the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the more actions button ().
3. Select Download.

To regenerate the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the more actions button ().
3. Select Regenerate.

To delete the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the more actions button ().
3. Select Delete.