actions-marketplace-validations/Model Scanner Self Hosted
Scans models for vulnerabilities using the HiddenLayer Model Scanner Self Hosted CLI
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Nov 20, 2025
- License
- None
Pinned Snippet
uses: actions-marketplace-validations/hiddenlayerai_hiddenlayer-local-model-scan-github-action@a9e3b6c9829b4daf0494ad5fd80c816b2c09cb6b # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| model_path | Path to the model, either a file or a folder | yes | — |
| fail_on_detection | Fails pipeline if a malicious models is detected. | no | true |
| output_file | Writes detection output to a json file. | no | — |
| sarif_file | Writes detection output in the SARIF format to a file. | no | — |
| run_id | Run ID | no | — |
| upload_to_hiddenlayer | Uploads the report to Hiddenlayer cloud | no | true |
| upload_to_github_security | Uploads the SARIF file to GitHub Security | no | false |
| local_scanner_image | Perform scans using a local scanner container image | no | quay.io/hiddenlayer/distro-cli-modelscanner |
| local_scanner_version | Version of the local scanner container image | no | latest |
| model_name | Name of the model | no | — |
| model_version | Version of the model | no | — |
Outputs
| name | description |
|---|---|
| detection_results | Markdown table of detection results. |