accuknox/AccuKnox xBOM Scan
Generate an xBOM (SBOM / CBOM / AIBOM) using knoxctl, and upload to the AccuKnox Dashboard
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 22, 2026
- License
- Apache 2.0
Pinned Snippet
uses: accuknox/xbom-action@7af51e82d23b823c13c35738c78a1285b9dcd7c2 # 3.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| bom-type | sbom | cbom | aibom | no | sbom |
| path | Directory to scan. Ignored when image is set. | no | . |
| image | Container image reference (e.g. myapp:abc1234). Build with any tool (docker, podman, buildah, ko). The build step must run in the same job as this action. | no | "" |
| aibom-source | huggingface | bedrock. Source for AIBOM generation. | no | huggingface |
| aibom-model | HuggingFace model name (e.g. meta-llama/Llama-2-7b). Required when bom-type=aibom and aibom-source=huggingface. | no | "" |
| aws-region | AWS region for Bedrock scan (e.g. us-east-1). Required when aibom-source=bedrock. | no | "" |
| aws-access-key-id | AWS access key ID. Required when aibom-source=bedrock. | no | "" |
| aws-secret-access-key | AWS secret access key. Required when aibom-source=bedrock. | no | "" |
| token | AccuKnox artifact token. https://help.accuknox.com/how-to/how-to-create-tokens/ | yes | — |
| endpoint | AccuKnox SaaS hostname, e.g. cspm.accuknox.com | yes | — |
| label | AccuKnox label. https://help.accuknox.com/how-to/how-to-create-labels/ | yes | — |
| project-name | AccuKnox project name (Console → SBOM → Projects). | yes | — |
| project-classifier | project_classifier in the BOM (e.g. container, application, firmware). | yes | — |
| output-file | Local path to write the BOM file. Auto-derived when omitted: <repo>-<bom-type>.json | no | "" |
Outputs
| name | description |
|---|---|
| bom-file | Path to the generated BOM file on the runner. |
| upload-status | HTTP status code from the AccuKnox SaaS upload. |