- Checkmarx Documentation
- Checkmarx One
- Checkmarx One User Guide
- Checkmarx One Reports
- SCA (Package) Reports
SCA (Package) Reports
You can export reports of the data identified by Checkmarx SCA scanner. This includes detailed info about the open source packages in your project and the risks associated with them. There are two types of reports:
SCA Scan Report - shows an overview of the security of your project as well as specific vulnerabilities, legal risks, and outdated versions identified by the scan.
Software Bill of Materials (SBOM) - shows detailed info about each of the open source packages used by your program and the associated risks. You can specify how the SBOM will be formatted, CycloneDX v1.4 or SPDX v2.2. Learn more about Checkmarx's SBOMs here.
In this section: