What happened
AWS announced (July 30, 2026) a plugin system for inspector-sbomgen allowing Lua-based, no-compile custom package collectors; the 1.13 release ships 30+ new/migrated ecosystems as plugins, including dedicated collectors for AI-agent tooling (Amazon Q Developer, Kiro CLI, Claude Code, GitHub Copilot, Ollama).
Why it matters
Extends SBOM/vulnerability visibility explicitly into the AI coding-agent toolchain itself, letting security teams inventory and scan agent-installed dependencies and agent binaries as first-class assets.
Applicability
AWS customers using Amazon Inspector for vulnerability management should evaluate the plugin system to gain SBOM coverage of AI coding agents and custom/internal package ecosystems.