When a valid CycloneDX report is uploaded by a CI/CD job, and the
`:dependency_scanning_for_pipelines_with_cyclonedx_reports` feature flag
is enabled, the software components will be scanned for vulnerabilities.
The security tab in the pipeline page will also display the findings as
being found by Dependency Scanning.