> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/vcs-organization-assets/investigate-and-manage-vcs-organization-assets.md).

# Investigate and manage VCS organization assets

The VCS organization inventory provides multiple ways to investigate an asset. Use agentic queries from the table or open the side panel for detailed investigation.

Select a VCS organization row to open its side panel. The side panel provides a consolidated workspace for investigating organization security posture and remediating associated issues.

### Ask the AppSec agentic assistant

From the VCS Organizations table, click the **Agentic Assistant** icon. Select **Application Security** from the agents menu to query organization-specific insights.

You can also click **Ask AI** in the side panel to access the agentic assistant.

### Explore the VCS organization context

Use the following side-panel tabs to review the organization context and security posture. This helps prioritize remediation using aggregated risk, repository count, and business criticality.

* **Overview tab:** Displays the severity breakdown of security issues associated with the VCS organization. It aggregates issues from child repositories and CI/CD instances.
  * **Repository Count**: The total number of repositories within the organization. This provides scale context for the governance boundary.
  * **Coverage Percentage**: The ratio of scanned repositories to total repositories. This indicates how much of the organization is under active security monitoring.
  * **Internet Exposed**: Whether the organization contains repositories that power publicly reachable cloud endpoints. Prioritize these organizations for security review.
* **Identity tab:** Displays users within the VCS organization, their access levels, the repositories they collaborate on, and their latest commit time.

## Investigate and remediate issues

You can investigate security findings directly from the asset side panel. From the **Configurations** tab, select configuration issues or cases associated with the VCS organization.

Selecting an issue opens a dedicated issue side card over the inventory view. The side card displays severity and remediation guidance. You can review and apply guidance without leaving the inventory.

You can also access **Application Security** → **Issues** with filters pre-applied for the VCS organization. The full Issues page provides capabilities unavailable in the side panel.

### Execute asset actions

After reviewing organization health, use the **Actions** menu in the side panel:

* **Open in Provider:** Opens the VCS provider console, such as the GitHub organization page or GitLab group, at the organization URL.
* **View asset data:** Displays raw VCS organization asset data in `JSON` or tree view for custom integrations, XQL queries, or API operations.

## Manage VCS organization assets

Use the following actions for VCS organization assets.

### Asset actions

* Right-click an asset in the inventory table. From the **Actions** menu, select an action:
  * **Open in new tab**: Opens the asset description tab for detailed issue analysis.
  * **View asset data**: Opens the data retrieved during the latest scan in JSON or tree view.
  * **Copy text to clipboard**: Copies the selected text.
  * **Copy entire row**: Copies the selected row data.
  * **Show/hide rows**: Filters the inventory using the selected row attribute.
  * **Open in Cortex Assistant/Open in Cortex Agentic Assistant**: Opens the repository in Cortex Assistant or Cortex Agentic Assistant.
* **Export asset data**: Click the download icon, labelled **Export to file**, to export asset data.
* **View Dashboard**: Opens the [Application Security dashboard](/application-security/application-security/cortex-cloud-application-security-dashboard.md).


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/application-security/software-supply-chain-security/visibililty-and-inventory/supply-chain-assets/vcs-organization-assets/investigate-and-manage-vcs-organization-assets.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.