ml-bom

Know what AI is actually running in your clusters. An unprivileged Kubernetes controller that inventories models, runtimes, agents, and RAG components at runtime - emitting CycloneDX 1.6 ML-BOMs with evidence, confidence tiers, and Sigstore-verified model signatures

A CLI tool and GitHub Action to generate an AI Bill of Materials (AI-BOM) from a model project directory.

Local static analysis and evidence generation for deployed AI model artifacts

Vouchsafe — deterministic, signed AI/LLM/agent/MCP inventory scanner. Install: see README. Source: kgovind-coder/vouchsafe-source (private).

AIBOM 기반 소프트웨어 공급망 보안 자동화 시스템