Reports in the Mend Platform

Overview

Mend’s reporting capability allows you to generate detailed insights across your projects, covering open-source dependencies, code vulnerabilities, and container images. With various report types tailored to specific needs, you can easily assess security, compliance, and risk, while managing and downloading reports directly from the Reports page. This article will walk you through creating and managing reports in the Mend Platform.

Use case for each Report Type

When creating a report, you can choose from three Scan Engines, each offering a range of specific report types designed to meet various analysis needs:

Mend Dependencies (SCA)

• Dependencies SBOM: Details the libraries, code packages, and third-party components in your application.

• Dependencies Risk: Highlights critical security and maintenance insights for your project’s open-source libraries.

• Dependencies Due Diligence: Provides a comprehensive view of open-source libraries across selected projects, including risk scores and licenses.

• Dependencies Inventory: Offers a detailed breakdown of library functions, assigned licenses, and usage within the project scope.

• Dependencies Attribution: Delivers compliance information on third-party components managed in your application or project.

• Dependencies Findings: Summarize the vulnerabilities found in the open-source libraries used in your project.

Mend Code (SAST)

• Code Findings: Provides detailed insights into your application's or project's code findings.

• Code Compliance: Ensures your code aligns with top industry standards.

• Code Suppressions: Provides a clear overview of suppressed vulnerabilities in your Project/Application.

Mend Container

• Container Image Attribution: Details the open-source packages used in your container images.

• Container Image Due Diligence: Assesses the security and compliance status of software components within your container images.

• Container Image SBOM: Provides a clear view of the components within your container images.

Getting it done

Click the Reports button at the top menu bar to access the Reports dashboard:

The Reports table lists the reports that have been generated within your organization:

Table Columns

Adjust the Reports Table

Adding/Removing and Reordering Columns

Columns can be added or removed from the reports table by clicking the ‘Columns’ button at the right edge of the UI and checking/unchecking the boxes next to the desired column names.

Here you can also reorder the columns in the table by dragging the 12-dot icon next to the desired column name to its desired new location.

• Note that the Actions column cannot be removed and is therefore greyed out.

Similarly, you can also reorder the columns in the table itself by dragging the column header sideways:

Searching & Filtering Reports

All the columns bar the Actions column contain a filter option (). The columns that don’t have a predefined list of values in the filter are searchable by text. Searching through reports by text is done by entering the search query into the relevant column’s search box.

Example:

Entering the string ‘dep’ in the Report Name search box will return all previously generated reports with the string ‘dep’ in their name. This can be used, for instance, to list the Dependencies reports.

Filtering by Scan Engine (SCA/SAST/Container)

If you wish to only display reports of specific scan engines (SCA/SAST/Container), you can easily achieve this, by making sure only the relevant scan engines are selected:

Note:

Dependencies = Mend SCA

Code = Mend SAST

Containers = Mend Container

Paging

The maximum number of reports per page is 50. When you exceed that number, you will be able to navigate back and forth between the pages, to view additional reports using the navigation panel at the bottom-right corner of the UI.

• You can navigate to the next/previous page using the interior buttons of the navigation panel

• You can also navigate to the first/last page using the exterior buttons of the navigation panel

Create your Reports

1. Click the ‘Create’ button to spawn the Create Report pane on the right side of the screen.

   

For more information on creating each report type, please refer to the linked reports in the Use Case for Each Report Type section of this article.

Download your Reports

The most recently generated report will be displayed at the top of the reports table.

1. Select the desired report by checking the box next to it. This will highlight the entire line.

2. Click the Actions button () at the right edge of the highlighted line.

3. Click ‘Download’.