Version updated for https://github.com/Lab700xOrg/aisbom to version v1.3.3. This action is used across all versions by 0 repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary AIsbom is a security scanner for AI models that performs static analysis to detect malware, license risks, and code execution vulnerabilities within ML model files. It scans various formats like PyTorch Pickle bytecode, Keras configurations, GGUF chat templates, ONNX graphs, and SafeTensors. The action can be used as a GitHub Action to post an idempotent PR comment on every commit, helping developers identify potential security issues before model deployment.

Version updated for https://github.com/Lab700xOrg/aisbom to version v1.3.1. This action is used across all versions by 0 repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary AIsbom is a tool designed to detect malware and license risks in machine learning model files, primarily through static analysis. It inspects Python Pickle bytecode, Keras configurations, GGUF chat templates, ONNX graphs, and SafeTensors binaries to identify RCE-capable payloads and restrictive licenses that are not detected by generic SBOM tools. The tool does not load or execute the models, ensuring compliance and security during scans.

Version updated for https://github.com/Lab700xOrg/aisbom to version v1.3.0. This action is used across all versions by 0 repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary AIsbom is a static analysis tool that detects malware and license risks in AI model files, including Python Pickle bytecode, Keras configurations, GGUF chat templates, ONNX graphs, and SafeTensors / GGUF binary headers. It performs these checks without loading or executing models, ensuring compliance with security standards. The tool can be used as a GitHub Action to scan repositories on every commit and post an idempotent PR comment.