{"repo":"Trusera/ai-bom","free":true,"listed":false,"github":"https://github.com/Trusera/ai-bom","clone":"git clone https://github.com/Trusera/ai-bom.git","description":"AI Bill of Materials — discover every AI agent, model, and API in your infrastructure","language":"Python","stars":303,"topics":["ai","ai-security","bill-of-materials","cyclonedx","github-actions","llm","sarif","sbom","security"],"license":"Apache-2.0","category":"ai-agents","readme_excerpt":"AI-BOM Discover every AI agent, model, and API hiding in your infrastructure         Quick Start  ·  What It Finds  ·  SDKs  ·  n8n Node  ·  CI/CD  ·  Compare  ·  Docs --- Why AI-BOM? EU AI Act (Article 53, Aug 2025) requires a complete AI component inventory — no existing SBOM tool covers AI. 60%+ of AI usage is undocumented. Developers ship LLM integrations, agent frameworks, and MCP servers without security review. Shadow AI is the new shadow IT. One command. 13 scanners. 9 output formats. Standards-compliant AI Bill of Materials. Quick Start That's it. Scans your project and prints a risk-scored inventory of every AI component found. bash python3 -m venv .venv && source .venv/bin/activate pip install ai-bom ai-bom scan . bash sudo apt install pipx # Debian/Ubuntu brew install pipx # macOS pipx install ai-bom bash docker run --rm -v $(pwd):/scan ghcr.io/trusera/ai-bom scan /scan CycloneDX output docker run --rm -v $(pwd):/scan ghcr.io/trusera/ai-bom scan /scan -f cyclonedx -o /scan/ai-bom.cdx.json JSON output piped to jq docker run --rm -v $(pwd):/scan ghcr.io/trusera/ai-bom scan /scan --json jq '.components[] select(.properties[]? select(.name == \"trusera:risk score\" and (.value tonumber) 7))' python from trusera sdk import TruseraClient client = TruseraClient(api key=\"tsk ...\", agent id=\"my-agent\") client.track event(\"llm call\", {\"model\": \"gpt-4o\", \"t","default_branch":null,"files":null,"tree":[],"storefront":"/r/Trusera","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/Trusera/ai-bom/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}