A new framework called the Agent Bill of Materials (AgBOM) is emerging to inventory autonomous coding agents in software pipelines, formalized through OWASP's Agent Observability Standard (AOS) projec…
UBEL, a free software composition analysis tool and install-blocking firewall, enforces security policies at install-time to block supply-chain attacks across dependencies, Linux packages, Docker, and…
Google Cloud open-sourced k8s-aibom, a Kubernetes controller that surfaces a bill of materials exposing AI operations in a user's cloud estate, to help auditors tackle shadow AI. The tool, deployed as…
Google Cloud open-sourced k8s-aibom, an unprivileged Kubernetes controller that automatically detects running AI runtimes and generates CycloneDX Machine Learning Bill of Materials (ML-BOMs) from live…
Vens Labs has released vens-action, a GitHub Action that reranks Trivy and Grype CVE scan results by actual business risk rather than generic CVSS scores. The tool reads scan output alongside a YAML c…