Skip to content

msaad00/agent-bom

v0.81.3 Feature

This release adds 8 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents ai-security ai-supply-chain aibom blast-radius cloud-security
+14 more
compliance container-security cyclonedx security kubernetes llm-security mcp mcp-server owasp sarif sbom security-scanner supply-chain-security vulnerability-scanning

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Minor fixes and improvements.

Full changelog

What's Changed

  • feat(runtime): harden optional monitor daemonset by @msaad00 in https://github.com/msaad00/agent-bom/pull/1720
  • docs(deploy): clarify recommended runtime and backend defaults by @msaad00 in https://github.com/msaad00/agent-bom/pull/1721
  • docs(deploy): simplify official entrypoints by @msaad00 in https://github.com/msaad00/agent-bom/pull/1722
  • docs(deploy): separate self-hosted and MSSP maturity by @msaad00 in https://github.com/msaad00/agent-bom/pull/1723
  • docs(deploy): sharpen Snowflake parity boundaries by @msaad00 in https://github.com/msaad00/agent-bom/pull/1724
  • fix(runtime): harden shield concurrency and rate limiting by @msaad00 in https://github.com/msaad00/agent-bom/pull/1725
  • fix(release): manage compose and runtime version surfaces by @msaad00 in https://github.com/msaad00/agent-bom/pull/1726
  • feat(auth): add UI session and capability contract by @msaad00 in https://github.com/msaad00/agent-bom/pull/1727
  • feat(ui): gate control-plane actions by auth capabilities by @msaad00 in https://github.com/msaad00/agent-bom/pull/1728
  • fix(platform): enforce tenant and time invariants by @msaad00 in https://github.com/msaad00/agent-bom/pull/1730
  • chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in https://github.com/msaad00/agent-bom/pull/1731
  • feat(graph): index graph search slices by @msaad00 in https://github.com/msaad00/agent-bom/pull/1732
  • feat(endpoint): add enrollment bundle contract by @msaad00 in https://github.com/msaad00/agent-bom/pull/1733
  • feat(snowflake): add schedule store parity by @msaad00 in https://github.com/msaad00/agent-bom/pull/1734
  • feat(graph): paginate overview from store by @msaad00 in https://github.com/msaad00/agent-bom/pull/1735
  • fix(auth): enforce key scopes and scrub gateway 404s by @msaad00 in https://github.com/msaad00/agent-bom/pull/1736
  • docs: add safe PR refresh helper by @msaad00 in https://github.com/msaad00/agent-bom/pull/1737
  • feat(snowflake): add exception store parity by @msaad00 in https://github.com/msaad00/agent-bom/pull/1738
  • feat(endpoint): persist enrolled fleet identity by @msaad00 in https://github.com/msaad00/agent-bom/pull/1739
  • refactor(mcp): extract shared scan pipeline by @msaad00 in https://github.com/msaad00/agent-bom/pull/1740
  • refactor(mcp): extract resource and prompt catalog by @msaad00 in https://github.com/msaad00/agent-bom/pull/1741
  • refactor(mcp): extract server bootstrap by @msaad00 in https://github.com/msaad00/agent-bom/pull/1742
  • fix(platform): harden audit and graph query paths by @msaad00 in https://github.com/msaad00/agent-bom/pull/1743
  • docs(release): align product description and changelog by @msaad00 in https://github.com/msaad00/agent-bom/pull/1744
  • fix(snowflake): scope store lookups by tenant by @msaad00 in https://github.com/msaad00/agent-bom/pull/1745
  • refactor(mcp): extract runtime catalog tools by @msaad00 in https://github.com/msaad00/agent-bom/pull/1746
  • docs(deploy): tighten graph and runtime guidance by @msaad00 in https://github.com/msaad00/agent-bom/pull/1753
  • test(graph): guard overview store-backed pagination path by @msaad00 in https://github.com/msaad00/agent-bom/pull/1754
  • chore(release): bump version to 0.81.2 by @msaad00 in https://github.com/msaad00/agent-bom/pull/1747
  • chore(release): bump version to 0.81.3 by @msaad00 in https://github.com/msaad00/agent-bom/pull/1755

Full Changelog: https://github.com/msaad00/agent-bom/compare/v0.81.1...v0.81.3

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track msaad00/agent-bom

Get notified when new releases ship.

Sign up free

About msaad00/agent-bom

AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.

All releases →

Related context

Beta — feedback welcome: [email protected]