Reports
Formats, what is in them and how to use them.
One scan can be written in nine formats. Choose with --format; xlsx and pdf need --output.
| Format | Use it for |
|---|---|
text | The terminal |
html | A self-contained report you can open or email: summary, severity breakdown and a filterable table of findings |
pdf | Auditors and archives |
xlsx | Managers and spreadsheets |
sarif | GitHub code scanning and the Security tab |
asff | AWS Security Hub |
json, jsonl | Pipelines, dashboards and plugins |
csv | Quick imports |
Examples
shell
tmaegis scan --auto-detect --format html --output report.html
tmaegis scan --target linux --format sarif --output tmaegis.sarif
tmaegis scan --format json > report.jsonLanguage
Reports follow the interface language (--lang). Rule titles and instructions stay in English so that they match the benchmark you cite.
Reading the results
- PASS: the control is met.
- FAIL: the control is not met; the report shows the severity and the fix.
- SKIP: not applicable here, or a manual-review item when
--include-manualis on.