Investigate and manage VCS organization assets

Investigate VCS organization security posture, remediate issues, and manage asset data.

The VCS organization inventory provides multiple ways to investigate an asset. Use agentic queries from the table or open the side panel for detailed investigation.

Select a VCS organization row to open its side panel. The side panel provides a consolidated workspace for investigating organization security posture and remediating associated issues.

Ask the AppSec agentic assistant

From the VCS Organizations table, click the Agentic Assistant icon. Select Application Security from the agents menu to query organization-specific insights.

You can also click Ask AI in the side panel to access the agentic assistant.

Explore the VCS organization context

Use the following side-panel tabs to review the organization context and security posture. This helps prioritize remediation using aggregated risk, repository count, and business criticality.

• Overview tab: Displays the severity breakdown of security issues associated with the VCS organization. It aggregates issues from child repositories and CI/CD instances.

  • Repository Count: The total number of repositories within the organization. This provides scale context for the governance boundary.
  • Coverage Percentage: The ratio of scanned repositories to total repositories. This indicates how much of the organization is under active security monitoring.
  • Internet Exposed: Whether the organization contains repositories that power publicly reachable cloud endpoints. Prioritize these organizations for security review.
• Identity tab: Displays users within the VCS organization, their access levels, the repositories they collaborate on, and their latest commit time.

Investigate and remediate issues

You can investigate security findings directly from the asset side panel. From the Configurations tab, select configuration issues or cases associated with the VCS organization.

Selecting an issue opens a dedicated issue side card over the inventory view. The side card displays severity and remediation guidance. You can review and apply guidance without leaving the inventory.

You can also access Application Security → Issues with filters pre-applied for the VCS organization. The full Issues page provides capabilities unavailable in the side panel.

Execute asset actions

After reviewing organization health, use the Actions menu in the side panel:

• Open in Provider: Opens the VCS provider console, such as the GitHub organization page or GitLab group, at the organization URL.
• View asset data: Displays raw VCS organization asset data in JSON or tree view for custom integrations, XQL queries, or API operations.

Manage VCS organization assets

Use the following actions for VCS organization assets.

Asset actions

• Right-click an asset in the inventory table. From the Actions menu, select an action:

  • Open in new tab: Opens the asset description tab for detailed issue analysis.
  • View asset data: Opens the data retrieved during the latest scan in JSON or tree view.
  • Copy text to clipboard: Copies the selected text.
  • Copy entire row: Copies the selected row data.
  • Show/hide rows: Filters the inventory using the selected row attribute.
  • Open in Cortex Assistant/Open in Cortex Agentic Assistant: Opens the repository in Cortex Assistant or Cortex Agentic Assistant.
• Export asset data: Click the download icon, labelled Export to file, to export asset data.
• View Dashboard: Opens the Application Security dashboard.