From 4879e58bd4a9aba1e46c344ed9d6ad6859106c23 Mon Sep 17 00:00:00 2001 From: Glen Messenger <57537684+glenmessenger@users.noreply.github.com> Date: Thu, 5 Nov 2026 19:59:43 -0800 Subject: [PATCH 1/3] Add k8s-aibom (runtime CycloneDX ML-BOMs for Kubernetes) Signed-off-by: Glen Messenger --- tools/k8s-aibom.json | 49 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 tools/k8s-aibom.json diff --git a/tools/k8s-aibom.json b/tools/k8s-aibom.json new file mode 100644 index 0000000..d0c4f74 --- /dev/null +++ b/tools/k8s-aibom.json @@ -0,0 +1,49 @@ +{ + "$schema": "https://cyclonedx.org/schema/tool-center-v2.tool.schema.json", + "specVersion": "2.0", + "tool": { + "name": "k8s-aibom", + "publisher": "Google Cloud", + "description": "Unprivileged Kubernetes controller that inventories the AI workloads in a cluster and emits one CycloneDX 1.6 ML-BOM per workload, with an evidence locator and confidence tier on every attribute and Sigstore verification of model signature claims.", + "repository_url": "https://github.com/GoogleCloudPlatform/k8s-aibom", + "website_url": "https://googlecloudplatform.github.io/k8s-aibom/", + "capabilities": [ + "AI/ML-BOM", + "SBOM" + ], + "availability": [ + "OPEN_SOURCE", + "OSI_APPROVED" + ], + "functions": [ + "AUTHOR", + "ANALYSIS", + "DISTRIBUTE" + ], + "analysis": [ + "RESOURCE_REPORTING" + ], + "packaging": [ + "APPLICATION", + "CONTAINER_IMAGE", + "COMMAND_LINE_UTILITY" + ], + "library": [ + "GO" + ], + "platform": [ + "LINUX" + ], + "lifecycle": [ + "OPERATIONS" + ], + "supportedStandards": [ + "CYCLONEDX", + "PACKAGE_URL", + "SLSA" + ], + "cycloneDxVersion": [ + "CYCLONEDX_V1.6" + ] + } +} From 5697849d85fcfce1544d30380759a42b3e414940 Mon Sep 17 00:00:00 2001 From: Glen Messenger Date: Tue, 10 Nov 2026 07:47:19 -0800 Subject: [PATCH 2/3] k8s-aibom: drop AUTHOR; the controller manufactures BOMs, humans do not author in it Signed-off-by: Glen Messenger --- tools/k8s-aibom.json | 1 - 1 file changed, 1 deletion(-) diff --git a/tools/k8s-aibom.json b/tools/k8s-aibom.json index d0c4f74..37e4b20 100644 --- a/tools/k8s-aibom.json +++ b/tools/k8s-aibom.json @@ -16,7 +16,6 @@ "OSI_APPROVED" ], "functions": [ - "AUTHOR", "ANALYSIS", "DISTRIBUTE" ], From 454ae4f4c3f388bb048842b1812aac285b1ebd29 Mon Sep 17 00:00:00 2001 From: Glen Messenger Date: Thu, 12 Nov 2026 07:13:07 -0800 Subject: [PATCH 3/3] chore: empty commit to refresh mergeability Signed-off-by: Glen Messenger