Add reporting/compliance export features

[imDarshanGK]

Summary: Organizations need compliance reports and audit trails for regulatory purposes.

• Context: Export features support compliance workflows and audits.
• Expected: Generate reports in various formats (PDF, CSV, JSON) with audit metadata.
• Suggested fix: Add report generation and export handlers.
• Notes: Support filtering and date range selection.

[shagunpandeydev26-alt]

Hi! @imDarshanGK I'd like to work on this issue.

My plan is to implement this as a reusable reporting pipeline rather than separate export handlers for each format.

Proposed approach:

• Create a centralized report-generation layer that builds a structured report model from analysis and audit data

• Add support for:

  • date-range selection
  • filtering (project/repository/severity/status, where applicable)
  • audit metadata generation

• Include compliance-oriented metadata such as:

  • report ID
  • generation timestamp
  • applied filters
  • analysis version/source information

• Implement separate exporters for:

  • PDF (human-readable compliance reports)
  • CSV (spreadsheet/audit workflows)
  • JSON (integrations and archival)

• Add a UI workflow for selecting filters, date ranges, and export formats

• Ensure proper authorization checks and audit logging around report generation

• Add tests covering:

  • report generation logic
  • filtering behavior
  • metadata correctness
  • PDF/CSV/JSON export outputs

I'll also keep the report builder format-agnostic so future export formats can be added without duplicating reporting logic.

Please assign this issue to me if this approach aligns with the project's direction.

[Pcmhacker-piro]

Hi @imDarshanGK

I’m interested in contributing to this project and would love to work on this issue. I have experience working on open-source contributions and would be happy to implement the required changes.

Could you please assign this issue to me? Thanks!

[sakshiwankhade026-coder]

Hi 👋

I would like to work on this issue under GSSoC'26.

I have previously contributed to open-source projects and have 2 PRs successfully merged. I have gone through the issue requirements and would be happy to work on the implementation while following the project's guidelines and maintaining code quality.

Please assign this issue to me if it is available.

Thank you!

[ramlal-01]

Hello @imDarshanGK ,
will you please assign this issue to me under GSSoc26 .

[aayushprsingh]

Hi, I am a GSSoC 2026 contributor and would like to work on this. Please assign it to me!

Here's how I'm thinking of approaching this:
I will create a reporting service that generates compliance summaries matching standards (like OWASP Top 10 or SOC2). The service will format the report as an HTML/PDF download with structured tables listing critical violations and remediation steps, and I'll add tests verifying PDF compilation templates.

[shagunpandeydev26-alt]

Hi @imDarshanGK,

I have implemented the reporting and compliance pipeline features as requested. The complete changes can be reviewed in Pull Request #975.

Please let me know if you have any feedback or if any adjustments are needed!