Audit vulnerabilities Not Populating

[kfoxton]

Not sure if we are doing something wrong, but after we upload a BoM, and it is processed, there are issues found in the components, but there is nothing added in the audit vulnerabilities section, and I don't see a way to select items to move there to audit? Is there something that needs to be run manually, or some process setup to enable that ability? My user has admin + all permissions.