Skip to content

msaad00/agent-bom

v0.81.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents ai-security ai-supply-chain aibom blast-radius cloud-security
+14 more
compliance container-security cyclonedx security kubernetes llm-security mcp mcp-server owasp sarif sbom security-scanner supply-chain-security vulnerability-scanning

Summary

AI summary

Minor fixes and improvements.

Full changelog

What's Changed

  • [codex] add hosted product spec and split deployment diagrams by @msaad00 in https://github.com/msaad00/agent-bom/pull/1601
  • Add source registry and wire the Sources page by @msaad00 in https://github.com/msaad00/agent-bom/pull/1602
  • Fix release coherence and tenant isolation by @msaad00 in https://github.com/msaad00/agent-bom/pull/1603
  • [docs] simplify self-hosted deployment and runtime flow diagrams by @msaad00 in https://github.com/msaad00/agent-bom/pull/1604
  • [platform] sharpen scoring, lookup, and tracing by @msaad00 in https://github.com/msaad00/agent-bom/pull/1605
  • [platform] wire sources schedules to the control plane by @msaad00 in https://github.com/msaad00/agent-bom/pull/1606
  • [docs] simplify self-hosted deployment and runtime diagrams by @msaad00 in https://github.com/msaad00/agent-bom/pull/1607
  • [release] prepare 0.81.0 by @msaad00 in https://github.com/msaad00/agent-bom/pull/1608

Full Changelog: https://github.com/msaad00/agent-bom/compare/v0...v0.81.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track msaad00/agent-bom

Get notified when new releases ship.

Sign up free

About msaad00/agent-bom

AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.

All releases →

Related context

Beta — feedback welcome: [email protected]