This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryMinor fixes and improvements.
Full changelog
What's Changed
- docs: add uninstall instructions to README by @msaad00 in https://github.com/msaad00/agent-bom/pull/232
- fix: reproducible redaction test + connection string credential pattern by @msaad00 in https://github.com/msaad00/agent-bom/pull/233
- docs: engine internals + high-level workflow diagrams by @msaad00 in https://github.com/msaad00/agent-bom/pull/234
- docs: fix stale numbers, shorten tagline, add Glama link by @msaad00 in https://github.com/msaad00/agent-bom/pull/249
- feat: animated demo SVG + README simplification by @msaad00 in https://github.com/msaad00/agent-bom/pull/250
- feat: add Grafana dashboard template for Prometheus metrics by @msaad00 in https://github.com/msaad00/agent-bom/pull/251
- feat: add MkDocs Material docs site with GitHub Pages deployment by @msaad00 in https://github.com/msaad00/agent-bom/pull/252
- feat: dashboard charts + compliance matrix + fix dependency licenses by @msaad00 in https://github.com/msaad00/agent-bom/pull/255
- fix: correct stale counts and remove unreadable diagram from README by @msaad00 in https://github.com/msaad00/agent-bom/pull/256
- fix: redesign architecture diagram for readability and clarity by @msaad00 in https://github.com/msaad00/agent-bom/pull/257
- feat: redesign blast radius diagram as branching attack path graph by @msaad00 in https://github.com/msaad00/agent-bom/pull/263
- feat: add MCP agent topology diagram by @msaad00 in https://github.com/msaad00/agent-bom/pull/264
- fix: clean up blast radius diagram edges and text overlap by @msaad00 in https://github.com/msaad00/agent-bom/pull/265
- feat: add scan pipeline, architecture stack, and compliance diagrams by @msaad00 in https://github.com/msaad00/agent-bom/pull/266
- fix: correct CIS roadmap accuracy by @msaad00 in https://github.com/msaad00/agent-bom/pull/267
- feat: add GitHub issue and PR templates by @msaad00 in https://github.com/msaad00/agent-bom/pull/268
- chore: bump version to v0.59.2 by @msaad00 in https://github.com/msaad00/agent-bom/pull/269
Full Changelog: https://github.com/msaad00/agent-bom/compare/v0.59.1...v0.59.2
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About msaad00/agent-bom
AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.
Related context
Related tools
Beta — feedback welcome: [email protected]