E2E test: AIsbom should flag mock_malware.pt

[lab700xdev]

Smoke test for v1.0.0 of the AIsbom Action. Expecting a CRITICAL finding.

[github-actions]

🛡️ AIsbom Security Scan

Summary: 1 CRITICAL, 1 MEDIUM, 2 LOW across 4 model artifact(s).

Findings

Risk	Artifact	Format	License	Issue
🔴 CRITICAL	mock_malware.pt	PyTorch	Unknown	RCE Detected: posix.system
🟡 MEDIUM	mock_broken.pt	PyTorch	Unknown	Pickle Present
🟢 LOW	mock_restricted.gguf	GGUF	cc-by-nc-sa-4.0	LEGAL RISK (cc-by-nc-sa-4.0)
🟢 LOW	mock_restricted.safetensors	SafeTensors	cc-by-nc-4.0 (Non-Commercial)	LEGAL RISK (cc-by-nc-4.0 (Non-Commercial))

View full SBOM in viewer →

_{📦 Generated by AIsbom · scanned models/ · 4 artifact(s) total}