# Issue Details: Artifacts and Artifact Files

The **Artifacts** and **Artifact Files** tabs list the container images and files affected by the issue. They appear on issues where the underlying finding is tied to a built artifact (such as a container image) rather than — or in addition to — a cloud resource or repository.

Use the Artifacts tab to identify the impacted images and their runtime state, and use the Artifact Files tab to drill into the specific files within those artifacts that contain the issue.

### Artifacts

Lists the artifact images affected by the issue. The Aggregations counter at the top shows the total number of matched artifacts. A checkbox at the start of each row lets you select one or more artifacts for bulk actions.

| Column         | What it shows                                                                                                                                              | How to use                                                                 |
| -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------- |
| Image          | The full image path, including registry, repository, and image name (for example, 203043666164.dkr.ecr.eu-west-1.amazonaws.com/multi-currency-management). | Use this to identify the exact image affected.                             |
| Tag            | The image tag (for example, latest, v1.2.3).                                                                                                               | Use this to confirm which version of the image is impacted.                |
| Registry Name  | The registry that hosts the image (for example, Amazon ECR).                                                                                               | Use this to route remediation to the right registry owner.                 |
| SHA            | The image's content digest.                                                                                                                                | Use this to pin to an exact build — SHAs are immutable while tags are not. |
| Created At     | When the image was built or pushed.                                                                                                                        | Use this to assess freshness and identify stale or aging images.           |
| Runtime Status | Whether the image is currently running (for example, Running).                                                                                             | Treat running images as higher priority — they are actively exposed.       |
| Actions        | Per-row actions and an info icon for additional artifact details.                                                                                          | Click the info icon to see more about the artifact.                        |

### Artifact Files

Lists the specific files inside the affected artifact(s) that contain the issue. The Aggregations counter at the top shows the total number of matched files.

| Column    | What it shows                                                                                                   | How to use                                                                                                                                                                            |
| --------- | --------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| File Name | The full path of the file inside the artifact (for example, app/node\_modules/legacy-swc-helpers/package.json). | Use this to locate the file inside the image's filesystem and to scope remediation — for example, by upgrading the dependency, removing the file, or rebuilding the image without it. |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ox.security/scan-and-analyze-with-ox/analyzing-scan-results/active-issues-new/issue-details-artifacts-and-artifact-files.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.