---
description: The snyk aibom test command that tests an AI bill of materials
---

# AI-BOM test

## Prerequisites

- The `snyk aibom test` feature requires an internet connection.
- Snyk CLI v1.1304.0 (or later).
- Your Snyk Organization must have Evo policies configured (for example, in the Evo web interface).

## Usage

`$ snyk aibom test [<OPTION>]`

## Description

The `snyk aibom test` command generates an AI-BOM for your local project and evaluates it against your tenant's Evo policies. It reports all policy violations as issues, so you can see which AI models, tools, or other components are disallowed or non-compliant.

The command:

1. **Generates an AI-BOM** for the current project (same behavior as [`snyk aibom`](aibom.md)), detecting AI models, agents, tools, and MCP dependencies.
2. **Runs a policy test** against the policies configured for your Organization.
3. **Returns all resulting issues** from the policy test.

For each issue, the output includes:

- **Severity** (LOW, MEDIUM, HIGH, CRITICAL)
- **Description** of the policy violation (for example, a disallowed model or asset)
- **Policy link** to view or edit the policy in the Evo web interface
- **Remediation advice** when the policy provides it

A **Test summary** at the end shows the total count of issues by severity.

## Exit codes

Possible exit codes and their meaning:

**0**: success (scan completed), no policy issues.\
**1**: action_needed (scan completed), one or more policy issues found at or above the severity threshold (default: `low`).\
**2**: failure, try to re-run the command. Use `-d` to output the debug logs.\
**3**: failure, unable to find any supported files for the scan.

## Debug

Use the `-d` or `--debug` option to output the debug logs.

## Options

### `--org=<ORG_ID>`

Specify the `<ORG_ID>` to run the policy test against the policies of a specific Snyk Organization.

If you have multiple Organizations, you can set a default from the CLI using:

`$ snyk config set org=<ORG_ID>`

Set a default to ensure all newly tested Projects are tested under your default Organization. If you need to override the default, use the `--org=<ORG_ID>` option.

Default: `<ORG_ID>` that is the current preferred Organization in your [Account settings](https://app.snyk.io/account)

## Example

```bash
snyk aibom test
```

This generates an AI-BOM for the current directory, runs the policy test for the current preferred Organization, and prints the issues and test summary.

### `--json-file-output=<OUTPUT_FILE_PATH>`

**Optional**. Write the policy test results to a JSON file at the given path instead of printing the report. The JSON includes full issue details. When used with [`--severity-threshold`](aibom-test.md#severity-threshold-less-than-low-or-medium-or-high-or-critical-greater-than), the JSON file includes only issues at or above the specified severity.

Example: `$ snyk aibom test --json-file-output=results.json`

### `--enriched`

**Optional**. Runs extra enrichment on the AI-BOM to produce a more complete inventory before the policy test. This mode is slower than the default.

Example: `$ snyk aibom test --enriched`

### `--severity-threshold=<low|medium|high|critical>`

**Optional**. Report only issues at the specified level or higher. This applies to the on-screen report, the test summary, and JSON file output. Any issues reported will cause the command to exit with `1` (`action_needed`). Default: `low`.