Creating a VEX dependency report

info

VEX reports are generated according to the CycloneDX standard in JSON format.

To create a VEX report, follow these steps:

1. Go to Projects → Project name → Dependencies.

2. Select Create VEX report on the VEX reports tab.

3. In the form that opens, enter the following information to generate the report:

   • SBOM files—one or more SBOM files from the list of previously uploaded files that the report will use;
   • Report metadata—a list of metadata for generating the report.
   info

   You must enter the Organization name and Organization URL metadata.

4. Select Create VEX report.

The report is then available in the list on the VEX reports tab.

To download the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the additional actions button ().
3. Select Download.

To regenerate the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the additional actions button ().
3. Select Regenerate.

To delete the report, follow these steps:

1. Go to Projects → Project name → Dependencies.
2. Select the additional actions button ().
3. Select Delete.