Reporting and review
These nodes are how results leave a workflow: as a document, as an email, or as something a person has to sign off on.
Generate PDF Report
Generates a PDF of the SBOM's annotations — a summary plus detailed findings, filtered to the annotation types you care about.
Annotations are what earlier nodes leave behind: Normalize Data records what it rewrote, Verify Licenses records what did not check out, and Regulatory Compliance records what a regulation requires but the SBOM lacks. This node turns that trail into a document.
| Category | Reporting |
| Input | sbom |
| Output | file |
| Multiple inputs | Yes |
| Parameter | Type | Default | Description |
|---|---|---|---|
| Include errors | boolean | true | Include ERROR annotations. |
| Include warnings | boolean | true | Include WARNING annotations. |
| Include policy violations | boolean | true | Include POLICY_VIOLATION annotations. |
| Include user reviews | boolean | true | Include USER_REVIEW annotations — comments left by human reviewers. |
| Include reviews | boolean | false | Include REVIEW annotations. |
| Include notes and comments | boolean | false | Include NOTE and COMMENT annotations. |
| Include other | boolean | false | Include remaining annotation types. |
The defaults produce a report of things that need attention. Turning on notes and comments produces a fuller audit trail — including every change normalization made — which is more useful for evidence than for triage.
Send Email Report
Emails the workflow results to an address you specify.
Accepts any, which means it can be attached almost anywhere — including to a
failure path,
which is the most common use: tell someone when a run went wrong.
| Category | Reporting |
| Input | any |
| Output | — (ends a branch) |
| Multiple inputs | Yes |
| Parameter | Type | Default | Description |
|---|---|---|---|
| To | string — required | — | Address to send the report to. |
| Subject | string | a default subject line | Subject line for the email. |
Review
Emails the SBOM to a reviewer and pauses the workflow until they approve it using a secure one-time link.
| Category | Review |
| Input | sbom |
| Output | sbom |
| Multiple inputs | Yes |
| Parameter | Type | Default | Description |
|---|---|---|---|
| To | email — required | — | The reviewer. Receives the attachment and the approval link. |
| Subject | string | — | Optional email subject line. |
Approving continues the success path; rejecting takes the failure path. The mechanics, and how to design for rejection, are covered in Reviews.
Related
- Reviews — approval gates in depth.
- Reviewing and approving — the reviewer's experience.