hiddenlayerai/Model Scanner Self Hosted

Scans models for vulnerabilities using the HiddenLayer Model Scanner Self Hosted CLI

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Maintainedlast commit Apr 25, 2025
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: hiddenlayerai/hiddenlayer-local-model-scan-github-action@e9a02c266698ae2e3623b4def37034130f776668 # v0.1.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
model_pathPath to the model, either a file or a folderyes
fail_on_detectionFails pipeline if a malicious models is detected.notrue
output_fileWrites detection output to a json file.no
sarif_fileWrites detection output in the SARIF format to a file.no
run_idRun IDno
upload_to_hiddenlayerUploads the report to Hiddenlayer cloudnotrue
upload_to_github_securityUploads the SARIF file to GitHub Securitynofalse
local_scanner_imagePerform scans using a local scanner container imagenoquay.io/hiddenlayer/distro-cli-modelscanner
local_scanner_versionVersion of the local scanner container imagenolatest
model_nameName of the modelno
model_versionVersion of the modelno
namedescription
detection_resultsMarkdown table of detection results.