sigstore/model-transparency

Static security scanner for ML model files — detects pickle bombs, Keras Lambda RCE and GGUF template injection, and generates CycloneDX / SPDX AI-BOMs (AIBOM) as EU AI Act, CRA and FDA §524B evidence.

Protection against Model Serialization Attacks

Security scanner for AI/ML model files. Detects malicious code, backdoors, and vulnerabilities before deployment

Machine Genome is an open identity and provenance protocol for models, agents, harnesses, datasets, and the artifacts that connect them.

Open-source AI security verification for model artifacts, live endpoints, MCP servers, and recorded agent traces. Reproducible evidence for release decisions.

A tool box for MindSpore users to enhance model security and trustworthiness.

Toolkit to assess and determine model provenance

Framework to prove inference of ML models blazingly fast