trusera/AI-BOM Scan
Discover and inventory AI/LLM agents, models, and API integrations in your codebase. Generates SBOM-style reports in CycloneDX, SARIF, SPDX, and more.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Directory to scan | no | . |
| format | Output format (cyclonedx, sarif, spdx, table, html, markdown, csv) | no | table |
| output | Output file path (optional — prints to stdout if not set) | no | "" |
| fail-on | Fail the pipeline if any component meets or exceeds this severity (critical, high, medium, low) | no | "" |
| scan-level | Scanning depth: quick (pattern-matching only), standard (all scanners), deep (standard + AST analysis) | no | standard |
| cedar-policy-file | Path to a Cedar policy file for policy evaluation (optional) | no | "" |
| cedar-entities-file | Path to a Cedar entities file for additional entity context (optional) | no | "" |
| policy-gate | Enable Cedar policy gate evaluation (requires cedar-policy-file) | no | false |
| fail-on-severity | Cedar gate: only fail on violations at or above this severity (critical, high, medium, low) | no | "" |
Outputs
no outputs