EXPORT

Exporting Results

Web tool exports

Click ↓ Export ▾ in the scanner header after a scan completes.

JSON Report

Full structured data including all findings, CVE details, EPSS scores, CVSS vectors, and remediation status.

{
  "scanId": "uuid",
  "timestamp": "2026-05-12T...",
  "files": [...],
  "summary": {
    "critical": 1, "high": 2, "medium": 3,
    "cisaKev": 1, "totalFiles": 8
  }
}

SARIF (GitHub Security tab)

SARIF 2.1.0 format. Upload to GitHub to see findings in the Security tab of your repo.

# Upload via GitHub CLI
gh api repos/:owner/:repo/code-scanning/sarifs \
  --field commit_sha=$(git rev-parse HEAD) \
  --field ref=refs/heads/main \
  --field sarif=@codescan-report.sarif.json

GitHub Issues Markdown

Paste directly into a GitHub Issue or PR comment. Each finding becomes a formatted section with severity, description, and fix recommendation.

CLI exports

# Generate all formats
codescan scan ./src --enrich \
  --output json \
  --output sarif \
  --output github

# Output files:
# codescan-report.json
# codescan-report.sarif.json
# codescan-report-github.md