agent-bom Scan

Version updated for https://github.com/msaad00/agent-bom to version v0.34.0.

  • This action is used across all versions by 0 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

Agent-bom is an AI supply chain security scanner designed to detect vulnerabilities (CVEs) in packages and images while assessing security risks such as credential exposure, tool access, and privilege escalation. It automates the mapping of blast radius from vulnerabilities to compromised AI agents, credentials, and tools, offering comprehensive risk assessments and compliance with frameworks like OWASP, MITRE, and NIST. Its advanced capabilities include malicious package detection, enterprise-level remediation insights, and enriched security metrics, addressing critical gaps in traditional vulnerability scanners.

Release notes

What’s Changed

Full Changelog: https://github.com/msaad00/agent-bom/compare/v0.33.0...v0.34.0