Scan results can be exported at two levels: all scans at once, from the Reports page, or a single report, from its details page.
Exporting all results
On the Reports page, open the Export menu in the upper-right corner:
Export as PDF - All Scans: a summary document of all your scans:
Export as CSV - All CVEs: a spreadsheet with every CVE found across your repositories:
Export as CSV - All Packages: available while the Packages tab is selected - a spreadsheet with every discovered package.
Exporting a single report
Open a report from the Reports page and use the Export as menu in the upper-right corner. The following formats are available:
PDF - Overview: a human-readable summary of the scan:
PDF - SBOM: the Software Bill of Materials as a document:
CycloneDX: the SBOM in the standard CycloneDX format, for use in other tools:
SPDX 3.0: the SBOM in the standard SPDX 3.0 format:
CSV - SBOM: the SBOM as a spreadsheet:
