---
title: "Export project Risk report asynchronously (Dependencies - SCA)"
method: POST
path: "/api/v3.0/projects/{projectUuid}/dependencies/reports/risk"
tags: ["Reports"]
---

# Export project Risk report asynchronously (Dependencies - SCA)

`POST /api/v3.0/projects/{projectUuid}/dependencies/reports/risk`

Generates a Dependencies Risk report for the specified project asynchronously. Default export mode is Split (PDF summary + Excel CVE detail delivered as a ZIP). Full PDF mode is also available, subject to a project-count threshold.

## Path parameters

- `projectUuid` string, required

## Request body

- RiskReportExportProjectDTOV3
  - `name` string
  - `format` 'pdf' — Output file format. The Risk report only supports pdf.
  - `sendEmailNotification` boolean
  - `exportMode` 'split' | 'fullPdf' — Export mode. "split" (default) produces a ZIP (PDF summary + Excel CVE detail). "fullPdf" produces a single PDF, subject to a project-count threshold.

## Response `200`

OK

- DWRResponseV3ReportExportProcessDTO
  - `supportToken` string
  - `response` ReportExportProcessDTO
    - `uuid` string
    - `name` string
    - `scopeUuid` string
    - `scopeName` string
    - `subScopes` EntityTreeDTO[]
      - `uuid` string
      - `name` string
      - `scopeUuid` string
      - `scopeName` string
    - `title` string
    - `reportType` 'attribution' | 'inventory' | 'vulnerabilities' | 'securityAlerts' | 'sbom' | 'Cbom' | 'securityAlertsLibrary' | 'Compliance' | 'Findings' | 'Suppressions' | 'Resolved' | 'spdx' | 'spdx_2_3' | 'cycloneDX' | 'cycloneDX_1_5' | 'cycloneDX_1_6' | 'dueDiligence' | 'unknown' | 'imgAttribution' | 'imgDueDiligence' | 'imgSpdx' | 'imgSpdx_2_3' | 'imgCycloneDX' | 'imgCycloneDX_1_5' | 'aiInventory' | 'aiFindings' | 'aiBom' | 'imgCycloneDX_1_6' | 'risk' | 'users' | 'zeroDayCatalog' | 'activityLog' | 'unifiedFindings'
    - `format` 'json' | 'html' | 'unknown' | 'xml' | 'excel' | 'yaml' | 'pdf' | 'tv' | 'rdf' | 'csv' | 'sarif' | 'text'
    - `scopeType` 'organization' | 'product' | 'project' | 'unsupported' | 'account'
    - `scopeUuidList` string[]
    - `projectUuids` string[]
    - `status` 'PENDING' | 'IN_PROGRESS' | 'FAILED' | 'FAILURE' | 'SUCCESS'
    - `createdBy` string
    - `createdAt` string, date-time
    - `sendEmailNotification` boolean
    - `labelsUuidList` string[]
    - `includeVulnerabilities` boolean
    - `excludeInactiveProjects` boolean

## Other responses

- `400` — Bad Request
- `403` — Forbidden

## Changes

- **2026-08-26** `3cb30ea6174e` — 2 warning
  - added the new `aiBom` enum value to the `response/reportType` response property for the response status `200`
  - added the new `unifiedFindings` enum value to the `response/reportType` response property for the response status `200`

[Change history](https://skmtc.dev/mend/apis/mend-api/changes/api/v3.0/projects/:projectUuid/dependencies/reports/risk/post.md)

---

[API](https://skmtc.dev/mend/apis/mend-api.md) · [All operations](https://skmtc.dev/mend/apis/mend-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/mend/mend-api/revisions/b2302e1b6c4c/schema)