aibom 话题在 GitHub 上没有填写简介，这里按 Star 数汇总最相关的热门仓库。
Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.
Static security scanner for ML model files — detects pickle bombs, Keras Lambda RCE and GGUF template injection, and generates CycloneDX / SPDX AI-BOMs (AIBOM) as EU AI Act, CRA and FDA §524B evidence.
Know what AI is actually running in your clusters. An unprivileged Kubernetes controller that inventories models, runtimes, agents, and RAG components at runtime - emitting CycloneDX 1.6 ML-BOMs with evidence, confidence tiers, and Sigstore-verified model signatures
A community wiki for all things AI/ML bill of materials (MLBOM, AIBOM) and transparency into AI/ML models.
Git-native AI code provenance: records which AI agent wrote which line, signs each attribution with ed25519, stores it in your git history. Cross-agent (Claude Code, Cursor, Copilot, Codex, Windsurf, OpenCode, Gemini).
Generate xBOMs enriched with AI, SaaS, Crypto and more using Static Code Analysis
AI supply-chain BOM: every agent, MCP server and AI package, and what each one can reach. Open-source scanner and self-hosted control plane for code, containers, cloud and AI. Self-host free; local scans need no account.
Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services
Open-source EU AI Act compliance scanner. 51 checks across Articles 9-12, 14-15. Drop-in trust layers for LangChain, CrewAI, AutoGen, OpenAI. Local-first, no data leaves your machine.
Scan a codebase for AI SDKs, MCP servers and agent tools; map risks to NIST AI RMF, ISO 42001, EU AI Act and the OWASP LLM and Agentic Top 10
The industry-standard Agentic Identity & Inventory Scanner. Automatically inventory autonomous agents (LangChain, AutoGen, CrewAI, PydanticAI) using static analysis, network heuristics, and eBPF. Foundational tool for AIBOM compliance and AgentOps governance.
Go CLI tool that scans a repository for Hugging Face model usage and emits a CycloneDX AI/ML Bill of Materials.
An AI-BOM visual viewer
Policy-as-Code guardrails for ML and LLM systems: OPA/Kyverno policies, compliance mappings, signed bundles, evidence trails, and plugin index.
SBOM generation for Python & AI projects. Extract metadata from GGUF, ONNX, and Safetensors models. Build SBOM from Git and Hugging Face URL. Use from CLI, GitHub Action, Hatchling build hook, API.
AI system discovery and risk mapping for agentic architectures. Generates CycloneDX AIBOMs with topology and risk classification.
AI Agent Scanner - A standalone AI Agent scanner that can discover agent repos, configuration, system prompts, classify risk and produce compliance-ready reports
Agentic AI workflow for Supply Chain Analysis using GitHub Actions
A feature-level security controls framework for AI capabilities. 7 checks, 30 minutes, one AI feature at a time. Includes review template, AIBOM trigger model, and PoC scanner.
Trusted AIBOM generation