Skip to main content
Reporting brings together scan activity and security outcomes so you can track trends, progress, and ownership. Reports show an As of time and may reuse recent results: up to 15 minutes on Code Vulnerabilities and up to five minutes on other tabs. Click Refresh to request updated results for the active tab. On Code Vulnerabilities, Computing… means results will appear automatically when ready, and Updating… means the previous results stay visible while new ones are calculated. If the report is too large for the current filters, narrow them by project or team.
Code Vulnerabilities report with the Refresh button and the As of time
If a tab fails to load or takes too long, click Retry in that tab. You can also reopen the tab to try again. After changing filters, reopening a tab loads results for the current filters. Where to find reporting
  • In the app sidebar, open Reporting to access:
  • General for security and developer insights
  • Scans for scan operations and PR policy status
  • Aging for vulnerability aging and overdue trend analysis (available when policies are enabled)
General reporting tabs
  • Code Vulnerabilities shows unique vulnerability counts, category coverage, false positives, remediation progress, MTTR, and burn-down trends.
In Code Vulnerabilities, Fixed Issues Over Time tracks unique findings by their first fix date, and Open Findings by Classification breaks down open findings by classification and severity. Reporting counts each finding once across repeated scans, using its latest detection in the selected scope. Use the status checkboxes in Vulnerability Status Flow to show or hide statuses; false positives are hidden by default.
Code Vulnerabilities Reporting
  • Code Quality highlights open vs fixed issues, severity distribution, categories, languages, and top projects.
Code Quality Reporting
  • SCA summarizes dependency vulnerabilities by severity, ecosystem, package, and direct vs transitive impact.
SCA Reporting
  • IaC breaks down infrastructure findings by severity, provider, service, rule, and IaC type.
IaC Reporting
  • Developer Insights combines developer feedback and Corgea Agent usage trends, decisions, and active users.
Developer Insights
Filters and time controls
  • In General, use the searchable project, team, tag, and branch dropdowns to select multiple values. Click Apply in each dropdown to update the charts, or Clear to reset all filters. Select projects first to choose their scanned branches.
  • Values within one filter match any selected value; different filters apply together. Results include only projects you can access. Team membership includes directly linked projects and projects matching the team’s tags or repository URL patterns.
  • For time-series charts, choose a date range and group by day, week, or month.
  • Severity filters on supported charts let you focus on critical, high, medium, or low issues.
Scans reporting
  • Scans focuses on operational visibility, including PR policy status, repositories covered, full scans, PR scans, and scan performance over time.
Scans Reporting
Aging report
  • The aging report highlights overdue code and dependency issues, average age, and where risk is accumulating by project and assignee.
  • Assign issues from the issue details pages so overdue breakdowns and SLA emails reach the right owner.
  • Configure SLAs in SLA Management.