agent-bom Scan
Version updated for https://github.com/msaad00/agent-bom to version v0.84.0.
- This action is used across all versions by 0 repositories.
Action Type
This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
The agent-bom GitHub Action is an open-source security scanner designed for analyzing the AI supply chain and infrastructure, including agents, MCP servers, packages, containers, cloud platforms, GPUs, and runtimes. It identifies vulnerabilities (e.g., CVEs) across interconnected components, tracing their “blast radius” from packages to credentials and tools, and provides actionable remediation steps to mitigate risks. By automating end-to-end security assessments, it helps prevent credential leaks and ensures the integrity of AI-related systems.
What’s Changed
What’s Changed
- docs: enforce bundled skill guardrail contract by @msaad00 in https://github.com/msaad00/agent-bom/pull/2138
- docs: clarify agent-bom owns skill contract by @msaad00 in https://github.com/msaad00/agent-bom/pull/2139
- docs: add Snowflake POV deployment path by @msaad00 in https://github.com/msaad00/agent-bom/pull/2140
- fix: render unified findings in human reports by @msaad00 in https://github.com/msaad00/agent-bom/pull/2141
- fix: reflect MCP intelligence in graph risk state by @msaad00 in https://github.com/msaad00/agent-bom/pull/2142
- fix: calibrate compact posture for policy findings by @msaad00 in https://github.com/msaad00/agent-bom/pull/2143
- fix: add graph exploitable via edges by @msaad00 in https://github.com/msaad00/agent-bom/pull/2146
- fix: align Snowflake EKS deployment profile by @msaad00 in https://github.com/msaad00/agent-bom/pull/2148
- feat: add cloud discovery and ingest skills by @msaad00 in https://github.com/msaad00/agent-bom/pull/2151
- feat: enrich MCP resources and tool capabilities by @msaad00 in https://github.com/msaad00/agent-bom/pull/2152
- docs: align MCP catalog docs with server card by @msaad00 in https://github.com/msaad00/agent-bom/pull/2153
- chore: prepare v0.84.0 release by @msaad00 in https://github.com/msaad00/agent-bom/pull/2156
Full Changelog: https://github.com/msaad00/agent-bom/compare/v0.83.4...v0.84.0