k8s-aibom

k8s-aibom is included in the Awesome MLSecOps Model Scanning and Validation directory. The community-maintained README describes it as: “Unprivileged Kubernetes controller that generates CycloneDX 1.6 ML-BOMs for AI workloads at runtime, with evidence-based confidence tiers and Sigstore model-signature verification.” Its MLSecOps relevance is the inspection or validation of model artifacts, notebooks, code, dependencies, or model behavior before release and deployment. The linked first-party source is the GoogleCloudPlatform/k8s-aibom repository on GitHub. A technical review should test the project's documented evidence across four criteria: Supported artifact formats, Detection evidence, False-positive handling, and CI and SARIF output. Compare that evidence with the intended architecture and threat model. Catalog inclusion establishes relevance to this security category; it is not a certification, comparative ranking, or endorsement. Confirm current capabilities, maintenance, licensing, limitations, and deployment assumptions in the first-party documentation before adoption.

Unprivileged Kubernetes controller that generates CycloneDX 1.6 ML-BOMs for AI workloads at runtime, with evidence-based confidence tiers and Sigstore model-signature verification

Neutral catalog description synchronized from the Awesome MLSecOps README