AI / ML (Module)¶
Note
Required role: reading follows the Crypto management access right of the module; adding, editing and exporting needs developer, compliance_manager or manager. See Settings Permission Matrix.
The AI / ML tab manages the AI artifacts of a module, the basis of its AIBOM (AI bill of materials). It has the same structure as Crypto management and sits next to it. It is not shown for infrastructure and COTS modules.
List of AI artifacts as detected¶
The upper panel lists the machine-learning models and AI artifacts that TrustSource found in the module's components, for example stable-diffusion-xl-base [1.0] · text-to-image. If there are none, it reads No machine-learning-model components or AI artifacts identified. Models arrive with a scan or a CycloneDX import.
List of AI artifacts as managed¶
The lower panel holds the artifacts you maintain by hand, added to what the scan found. Columns are Added, Name, Version, Details (provider, task, family, architecture) and Comment.
Click Add AI artifact (or the pencil on a row) and fill in:
| Field | Example |
|---|---|
| Name (required) | stable-diffusion-xl-base |
| Version | 1.0 |
| Provider | Stability AI |
| Task | text-to-image |
| Model family | diffusion |
| Architecture | Stable Diffusion with Refiner |
| PURL | pkg:huggingface/stabilityai/stable-diffusion-xl-base-1.0 |
| Comment | optional note |
The bin icon removes an artifact.
Export as CycloneDX¶
Export as CycloneDX offers AIBOM (only the AI artifacts) and Full BOM (components + crypto + AI). Both download a JSON file named after the module. The same documents are available through the API, see Modules.
AI models also appear in the AI / ML models section of the component side panel; see Component details.
📸 Screenshot: the AI / ML tab with the detected and managed lists.