agent-bom good first issues (Python)

fix(skills): exit non-zero when skills scan finds malicious files by default about 6 hours ago

bug good first issue area/scanning

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(mcp): let the MCP scan tool scan a project directory about 6 hours ago

enhancement help wanted

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(runtime): offer enforce-by-default for poisoned tool descriptions and injected responses about 6 hours ago

enhancement help wanted security area/runtime

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(scan): recognise OpenAI Agents SDK and LlamaIndex agent imports about 6 hours ago

enhancement good first issue area/scanning

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

test(fixtures): add small LangGraph and CrewAI multi-agent example repos about 6 hours ago

good first issue area/dx

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(api,mcp): expose the agent architecture graph over the API and MCP about 6 hours ago

enhancement help wanted

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(findings): flag agents with risky capabilities and no safety evals about 6 hours ago

enhancement help wanted area/scanning

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(scan): detect eval harnesses and link them to the agents and models they test about 6 hours ago

enhancement help wanted area/scanning

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(runtime): compare declared pipeline paths with observed trace paths about 6 hours ago

enhancement help wanted area/runtime

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(scan): link each agent to the model(s) it uses about 6 hours ago

enhancement help wanted area/scanning

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(scan): AutoGen group chats and OpenAI Agents SDK handoffs about 6 hours ago

enhancement help wanted area/scanning

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(scan): CrewAI crews, tasks and manager hierarchy about 6 hours ago

enhancement help wanted area/scanning

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(scan): LangGraph topology — nodes, edges, conditional routes, subgraphs and handoffs about 6 hours ago

enhancement help wanted area/scanning

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

fix(runtime): stream and cap the incident feedback file when loading it about 16 hours ago

bug good first issue area/runtime

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

docs(dx): add docstrings to the project_has_* predicates in repo_auto_detect.py about 16 hours ago

documentation good first issue area/dx

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

docs: fix two references to files that no longer exist in site-docs/architecture about 16 hours ago

documentation good first issue area/docs

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

docs: fix six references to files that no longer exist in docs/ about 16 hours ago

documentation good first issue area/docs

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(cloud): Databricks identity and permission (CIEM) collection about 16 hours ago

enhancement help wanted area/cloud

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

refactor(cloud): replace broad excepts so denied, throttled and empty results are distinguishable about 16 hours ago

help wanted area/cloud accuracy

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

perf(traces): time-bounded keyset paging for the trace window loader about 16 hours ago

enhancement help wanted area/runtime

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

docs(ocsf): update OCSF_BOUNDARY.md for the inbound ingest that already ships about 16 hours ago

documentation good first issue area/docs

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(traces): incremental LangSmith collection with durable checkpoints about 16 hours ago

enhancement help wanted area/runtime

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(ingest): OTLP protobuf (HTTP) and gRPC trace receiver about 16 hours ago

enhancement help wanted area/runtime

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

fix(observability): OCSF ingest drops actor, session, cloud and device fields about 16 hours ago

bug help wanted area/runtime accuracy

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(gateway): CLI and env flags for upstream pool, timeout and circuit breaker about 16 hours ago

enhancement good first issue area/runtime

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(proxy): use Streamable HTTP for `agent-bom proxy --url` about 16 hours ago

enhancement help wanted area/runtime

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(gateway): run sequence and exfiltration-chain detection inline in the HTTP gateway about 16 hours ago

enhancement help wanted security area/runtime

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(runtime): wire the per-agent never-seen-tool baseline (currently unused) about 16 hours ago

enhancement help wanted area/runtime

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

feat(runtime): detect tool description and input-schema changes during a session about 16 hours ago

enhancement help wanted security area/runtime

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

fix(runtime): key the tool-drift baseline per MCP server instead of one global file about 16 hours ago

bug good first issue area/runtime

koda-ai-studio/agent-bom

35

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python

#ai-security#ai-supply-chain#aibom#blast-radius#cloud-security#mcp#sbom#security-scanner#supply-chain-security#vulnerability-scanning

koda-ai-studio/agent-bom

Open Issues Need Help