VEX and VDR reports

VEX report

After ingesting your SBOM, Helm will automatically match your components to known software in the NVD and package managers, which will bring forth potential vulnerabilities. Your VEX report contains all of your vulnerabilities that you have added a CycloneDX VEX status to, as well as any rescore information for your vulnerabilities.

Export your VEX report

1. Click the Reports item in the sidebar.

2. In the Export VEX report card, click Export VEX report. This will export your VEX in JSON format.

VDR report

Our VDR (Vulnerability Disclosure Reports) report offers comprehensive insights into identified vulnerabilities, these reports equip you with proactive mitigation strategies, bolstering your defense against emerging threats. Your VDR report contains all of your components, as well as all of your vulnerabilities, regardless of their remediation status.

Export your VDR report

1. Click the Reports item in the sidebar.

2. In the Export VDR report card, click Export VDR report. This will export your VDR in JSON format.