For the complete documentation index, see llms.txt. This page is also available as Markdown.

All Assets

The All Assets page shows the full list of assets for a given project or for a set of projects.

Given the wide variety of asset types, the top side bar categorizes related assets into several groups.

  • Repositories

  • Images

  • Components

  • APIs

  • CI/CD Assets

  • Delivery Assets

  • Systems and Tools

  • Collaborators

  • Endpoints

A project or group must be selected to access the All Assets tab

The All Assets page displays the following information:

  • Number of Assets

  • Number of Assets at Risk. (i.e. with security issues)

  • Number of systems and tools

  • Charts displaying total issues by severity, category and category & severity. (With links to specific assets types)

  • A table with all the assets with some basic information:

The information for each asset:

  • Risk level

  • Variation of the Risk Level from the project baseline

  • Name

  • System

  • Category

  • Asset type

  • Issues by severity

  • Tags

  • Links to details of the asset

Downloading a BOM

The Download BOM menu exports the inventory of the selected project or group as a bill of materials:

  • SBOM (CycloneDX) and SBOM (SPDX) — the software bill of materials.

  • CBOM — the cryptographic bill of materials, in CycloneDX 1.6.

  • AI-BOM — the inventory of AI assets.

Pivot Graph

The Pivot Graph shows the direct relationships with other assets.

Clicking on the icon will display the Pivot Graph for the selected asset.

Double-clicking on any asset in this graph will show the pivot graph for the selected asset.

Assets marked with a red circle and a number denote the associated security risk level, indicating potential security threats related to that asset.

Clicking on them displays the details of the asset alongside its issues.

Findings and Audit Trail

You can also select the Audit Trail tab to see a timeline of all the security issues.

Clicking on the icon of any asset will show the Findings and Audit Trail tabs as explained above.

AI assets (agents, models, MCP servers, skills, ...) open their own dedicated detail slide — see AI Assets.

Download BOM

With a single project (or a group) selected, the Download BOM menu exports the machine-readable bills of materials of the inventory:

  • SBOM — software components, in CycloneDX or SPDX format. See Generate a SBOM.

  • CBOM — cryptographic assets (CycloneDX).

  • AI-BOM — AI components (CycloneDX 1.6 ML-BOM), single-project only. See AI Assets › Download AI-BOM.

Last updated