Problem
On the Decayed list of findings, clicking on "Download .csv" button generates a csv containing only Open findings.
Cause
The behaviour is currently under investigation by our Engineering team.
Steps to Reproduce
1. Navigate to the Decayed Issues page of any scorecard.
2. Click Export.
3. Compare exported CSV with UI listing.
4. Observe mismatch in issue IDs and categories (export shows open issues).
Workaround
It is possible to retrieve the list of decayed findings using the API and the historical events endpoint
https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events