Exporting a report

An exported report should make the investigation reproducible for the person receiving it.

#Include the context

Record the project, engine version, target preset, scan scope, and any ignore rules that shaped the result.

#Separate estimates from measurements

Label scan costs as estimates. If a PIE benchmark was run, keep its before-and-after measurement next to the estimate rather than replacing one with the other.

#Include applied changes

When a fix was applied, include the manifest or its relevant entries so the reviewer can see exactly what changed and how it can be reverted.