> For the complete documentation index, see [llms.txt](https://docs.xygeni.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.xygeni.io/xygeni-products/application-security-posture-management-aspm/inventory/all-assets.md).
# All Assets
The ***All Assets*** page shows the full list of assets for a given project or for a set of projects.
Given the wide variety of asset types, the top side bar categorizes related assets into several groups.
* [AI](/xygeni-products/application-security-posture-management-aspm/inventory/ai-assets.md)
* Repositories
* Images
* Components
* [Cryptography](/xygeni-products/application-security-posture-management-aspm/inventory/cryptography.md)
* APIs
* CI/CD Assets
* Delivery Assets
* Systems and Tools
* Collaborators
* Endpoints
{% hint style="info" %}
A project or group must be selected to access the ***All Assets*** tab
{% endhint %}
The ***All Assets*** page displays the following information:
* Number of Assets
* Number of Assets at Risk. (i.e. with security issues)
* Number of systems and tools
* Charts displaying total issues by severity, category and category & severity. (With links to specific assets types)
* A table with all the assets with some basic information:
The information for each asset:
* Risk level
* Variation of the Risk Level from the project baseline
* Name
* System
* Category
* Asset type
* Issues by severity
* Tags
* Links to details of the asset
### Downloading a BOM
The **Download BOM** menu exports the inventory of the selected project or group as a bill of materials:
* **SBOM (CycloneDX)** and **SBOM (SPDX)** — the software bill of materials.
* **CBOM** — the [cryptographic bill of materials](/xygeni-products/application-security-posture-management-aspm/inventory/cryptography.md#download-the-cbom), in CycloneDX 1.6.
* **AI-BOM** — the inventory of AI assets.
### Pivot Graph
The Pivot Graph shows the direct relationships with other assets.
Clicking on the icon will display the **Pivot Graph** for the selected asset.
{% hint style="info" %}
Double-clicking on any asset in this graph will show the pivot graph for the selected asset.
{% endhint %}
Assets marked with a red circle and a number denote the associated security risk level, indicating potential security threats related to that asset.
Clicking on them displays the **details** of the **asset** alongside its issues.
### Findings and Audit Trail
You can also select the **Audit Trail tab** to see a timeline of all the security issues.
Clicking on the  icon of any asset will show the **Findings and Audit Trail tabs** as explained above.
{% hint style="info" %}
AI assets (agents, models, MCP servers, skills, ...) open their own dedicated detail slide — see [AI Assets](/xygeni-products/application-security-posture-management-aspm/inventory/ai-assets.md#ai-asset-details).
{% endhint %}
### Download BOM
With a single project (or a group) selected, the **Download BOM** menu exports the machine-readable bills of materials of the inventory:
* **SBOM** — software components, in CycloneDX or SPDX format. See [Generate a SBOM](/introduction-to-xygeni/generate-a-sbom.md).
* **CBOM** — cryptographic assets (CycloneDX).
* **AI-BOM** — AI components (CycloneDX 1.6 ML-BOM), single-project only. See [AI Assets › Download AI-BOM](/xygeni-products/application-security-posture-management-aspm/inventory/ai-assets.md#download-ai-bom).
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://docs.xygeni.io/xygeni-products/application-security-posture-management-aspm/inventory/all-assets.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
icon will display the **Pivot Graph** for the selected asset.
