> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/cicd-instance-as-an-asset/investigate-and-manage-ci-cd-instance-assets.md).

# Investigate and manage CI/CD instance assets

The CI/CD instance inventory supports quick agentic queries and detailed side-panel investigation.

Select a CI/CD instance row to open its side panel. The side panel provides a consolidated workspace for reviewing platform security posture.

### Ask the AppSec agentic assistant

From the CI/CD Instances table, select the **Agentic Assistant** icon. Then select **Application Security** to query instance-specific insights.

You can also select **Ask AI** in the side panel.

### Explore the CI/CD instance context

Use these side-panel tabs to review platform context and prioritize remediation:

* **Overview tab:** Displays provider type, instance URL, platform version, and the severity breakdown of CI/CD configuration risks.
* **Pipelines tab:** Lists pipelines hosted by the instance. Select a pipeline to open its asset side panel.
* **Compliance tab:** Displays posture against applicable industry frameworks and security benchmarks.

## Investigate and remediate issues

From the **Overview** tab, select an issue or case associated with the instance. You can also investigate risks by category.

| Tab name                | Description                                                                                                                                                                 |
| ----------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **CI/CD Configuration** | Displays instance-level configuration risks detected by the CI/CD scanner. Each finding includes its rule, description, severity, OWASP CI/CD Top 10 mapping, and evidence. |

Selecting an issue opens an issue side card over the inventory. Review evidence and remediation guidance without leaving the asset inventory.

{% hint style="info" %}
Manage CI/CD risks at scale in **Application Security** → **Issues** → **CI/CD Risks**. Use bulk updates, assignments, and SLA tracking.
{% endhint %}

### Execute asset actions

After reviewing instance health, use the side-panel **Actions** menu:

* **Open in Provider:** Opens the CI/CD platform console at the instance URL.
* **View asset data:** Displays raw instance data in `JSON` or tree view for integrations, XQL queries, or API operations.

## Manage CI/CD instance assets

### Asset actions

* Right-click an inventory asset. From **Actions**, select an action:
  * **Open in new tab**: Opens the asset description tab for detailed analysis.
  * **View asset data**: Opens data from the latest scan in JSON or tree view.
  * **Copy text to clipboard**: Copies selected text.
  * **Copy entire row**: Copies the selected row data.
  * **Show/hide rows**: Filters the inventory using the selected attribute.
  * **Open in Cortex Assistant/Open in Cortex Agentic Assistant**: Opens the asset in the assistant.
* **Export asset data**: Select the download icon, labelled **Export to file**.
* **View Dashboard**: Opens the [Application Security dashboard](/application-security/application-security/cortex-cloud-application-security-dashboard.md).

## Limitations

| Limitation                     | Description                                                                                                    |
| ------------------------------ | -------------------------------------------------------------------------------------------------------------- |
| **CI/CD integration required** | Assets require an active CI/CD integration. Removed integrations no longer provide updated scan data.          |
| **Provider support scope**     | Discovery supports Jenkins, GitHub Actions, GitLab CI, Azure Pipelines, and CircleCI.                          |
| **No Code-to-Cloud lineage**   | Code-to-Cloud lineage is tracked at the CI/CD pipeline level.                                                  |
| **Instance URL availability**  | The URL appears only when the integration provides it.                                                         |
| **Version data availability**  | Version data appears only when the provider exposes it.                                                        |
| **Policy restrictions**        | CI/CD Configuration Scan policies support only the Periodic Scan trigger.                                      |
| **Security posture scope**     | Health profiles aggregate CI/CD configuration risks only. Other findings remain on repositories and pipelines. |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/cicd-instance-as-an-asset/investigate-and-manage-ci-cd-instance-assets.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.