sandhipveera/aibom — AI-BOM scan
Scan the repository for AI agents, models, tools, and MCP servers; produce an AI-BOM with OWASP-LLM-mapped findings; optionally upload to the ScopeSafe platform and gate the build on new critical/high findings.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| api-token | ScopeSafe workspace API token (aibom_...). If unset, the scan runs locally without upload. | no | "" |
| api-url | ScopeSafe platform API base URL. | no | "" |
| project | Platform project name. | no | ${{ github.repository }} |
| path | Directory to scan. | no | . |
| comment | Post a sticky AI-BOM summary comment on the pull request. Requires the workflow to grant `permissions: pull-requests: write`. No-op off a PR. | no | true |
Outputs
no outputs