msaad00/agent-bom

<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/msaad00/agent-bom/main/docs/images/logo-dark.svg"> <img src="https://raw.githubusercontent.com/msaad00/agent-bom/main/docs/images/logo-light.svg" alt="agent-bom" width="360" /> </picture> </p> <p align="center"> <a href="https://github.com/msaad00/agent-bom/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/msaad00/agent-bom/ci.yml?branch=main&style=flat&label=Build" alt="Build"></a> <a href="https://pypi.org/project/agent-bom/"><img src="https://img.shields.io/pypi/v/agent-bom?style=flat&label=Latest%20version&cacheSeconds=300" alt="PyPI"></a> <a href="https://hub.docker.com/r/agentbom/agent-bom"><img src="https://img.shields.io/docker/pulls/agentbom/agent-bom?style=flat&label=Docker%20pulls" alt="Docker"></a> <a href="https://github.com/msaad00/agent-bom/blob/main/LICENSE"><img src="https://img.shields.io/badge/License-Apache%202.0-blue?style=flat" alt="License"></a> <a href="https://securityscorecards.dev/viewer/?uri=github.com/msaad00/agent-bom"><img src="https://img.shields.io/ossf-scorecard/github.com/msaad00/agent-bom?style=flat&label=OpenSSF%20scorecard" alt="OpenSSF Scorecard"></a> </p> <!-- mcp-name: io.github.msaad00/agent-bom --> <p align="center"><b>Open security scanner and self-hosted control plane for AI/MCP infrastructure.</b></p> <p align="center">Headless agent primitives and human cockpit surfaces over the same evidence model.</p> <p align="center"> <a href="https://msaad00.github.io/agent-bom/">Docs</a> · <a href="docs/FIRST_RUN.md">First Run</a> · <a href="site-docs/deployment/overview.md">Self-host</a> · <a href="https://github.com/marketplace/actions/agent-bom">GitHub Action</a> · <a href="https://hub.docker.com/r/agentbom/agent-bom">Docker</a> · <a href="https://github.com/msaad00/agent-bom/releases">Changelog</a> </p>

agent-bom scans local and fleet