Skip to content

Add AI SBOM object definitions for model, dataset, compute, governance, and top-level SBOM#520

Merged
adulau merged 2 commits into
mainfrom
codex/create-misp-object-templates-for-ai-sbom
May 12, 2026
Merged

Add AI SBOM object definitions for model, dataset, compute, governance, and top-level SBOM#520
adulau merged 2 commits into
mainfrom
codex/create-misp-object-templates-for-ai-sbom

Conversation

@adulau
Copy link
Copy Markdown
Member

@adulau adulau commented May 12, 2026

Motivation

  • Introduce structured metadata objects to represent AI SBOM elements following the BSI "SBOM for AI — minimum elements" reference.
  • Provide first-class object definitions for model, dataset, compute/runtime, governance artifacts, and top-level SBOM metadata to support AI supply-chain reporting and analysis.

Description

  • Added objects/ai-sbom/definition.json containing top-level SBOM attributes such as sbom-id, ai-system-name, timestamp, author, supplier, and standard with required fields and UUID.
  • Added objects/ai-model-component/definition.json for model metadata including model-name, model-version, model-identifier, artifact-hash, model-type, provider, and training-framework with required fields and UUID.
  • Added objects/ai-dataset-component/definition.json for dataset metadata including dataset-name, dataset-version, dataset-identifier, dataset-license, dataset-origin, data-sensitivity, and integrity-hash with required fields and UUID.
  • Added objects/ai-compute-component/definition.json and objects/ai-governance-component/definition.json for compute/runtime and governance artifacts respectively, each declaring relevant attributes (e.g., component-name, component-type, document-name, document-type, document-link) and UUIDs.

Testing

  • No automated tests were run for this change.

Codex Task

@adulau adulau merged commit f2f201a into main May 12, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant