I have the debsecan report to notify me via mail of changes to the
vulnerabilities present on my system but I would also like debsecan to
save the report to the filesystem so that I can use it as a list of
TODO items to work on when I have available time and motivation.

I would suggest creating /var/cache/debsecan/report for this.