Software Bill of Materials
A Software Bill of Materials (SBOM) is a structured inventory listing all components, dependencies and version information of software, used for supply chain security governance and compliance auditing.
Timeline (last 90 days)
Verifying the provenance and pinning versions of development toolchain components such as build scripts, package manager hooks, and IDE plugins can reduce the risk of a RAT being implanted through tampered dependencies.
Security teams typically audit an agent's code, dependencies and API permissions, but rarely audit the weight provenance of the underlying model; fine-tuned models from unofficial channels or 'unrestricted' variants shared by the community may carry abliteration processing, which is especially hard to detect in model registries and third-party model marketplaces.
All Facts (2)
Verifying the provenance and pinning versions of development toolchain components such as build scripts, package manager hooks, and IDE plugins can reduce the risk of a RAT being implanted through tampered dependencies.
50%UnverifiedSecurity teams typically audit an agent's code, dependencies and API permissions, but rarely audit the weight provenance of the underlying model; fine-tuned models from unofficial channels or 'unrestricted' variants shared by the community may carry abliteration processing, which is especially hard to detect in model registries and third-party model marketplaces.
50%