AIsbom

AIsbom is included in the Awesome MLSecOps AI Supply-Chain Security directory. The community-maintained README describes it as: “Disassembles Pickle bytecode and parses SafeTensors/GGUF binary headers to detect malware and license risks in ML model files before load. Generates CycloneDX/SPDX SBOMs.” Its MLSecOps relevance is the protection of model provenance, artifact integrity, dependencies, signing, bills of materials, registries, or delivery pipelines. The linked first-party source is the Lab700xOrg/aisbom repository on GitHub. A technical review should test the project's documented evidence across four criteria: Provenance and signing support, ML-BOM formats, Registry and CI integration, and Policy enforcement. Compare that evidence with the intended architecture and threat model. Catalog inclusion establishes relevance to this security category; it is not a certification, comparative ranking, or endorsement. Confirm current capabilities, maintenance, licensing, limitations, and deployment assumptions in the first-party documentation before adoption.

Disassembles Pickle bytecode and parses SafeTensors/GGUF binary headers to detect malware and license risks in ML model files before load. Generates CycloneDX/SPDX SBOMs.

Neutral catalog description synchronized from the Awesome MLSecOps README