The OWASP AIBOM Generator is an open-source tool designed to enhance AI supply chain transparency and security by generating AI Bills of Materials (AIBOMs) — also known as AI Software Bills of Materials (AI SBOMs), ML-BOMs, or SBOMs for AI. The tool supports AI models hosted on Hugging Face and produces output in CycloneDX format, aligned with SPDX standards.
Key features include:
- Automatic AIBOM generation and JSON download for Hugging Face models
- Human-friendly visualization of model metadata and dependencies
- Field checklist and completeness scoring for evaluating AIBOM quality and coverage
The AIBOM Generator empowers organizations to gain visibility into their AI model components, supporting compliance, risk management, and incident response activities.
