sec1-sca-report.pdf
(SCA Security Assessment) and sec1-sast-report.pdf (SAST, comprehensive). Off by default.
Reports are generated on request, so this adds a few seconds per scan. If a download fails, the build log shows a
warning and the build result is not affected. Not used with asyncScan (fire-and-forget), since the
step does not wait for the scan to finish.