The safeguards map / 3.7 Admission and owner settings
OpenSSF Model Signing
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A Python library and command-line tool that signs machine learning model files and verifies those signatures, producing Sigstore bundles.
Where it sits
3.7 Admission and owner settings (primary): Verifies a model's signature and recomputes its file hashes against the signed ones, so a user can decide once whether a downloaded model is the one that was signed.
This project demonstrates how to protect the integrity of a model by signing it.
captured
Further the DSSE envelope contains an in-toto statment and the signature over that statement.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- AI model
- Used by
- those who make itthose who distribute itthose who run it
- Runs
- by handin CI
- Policy comes from
- owner-entered settings
Handoffs
produces Provenance and signatures: Sigstore bundle containing an in-toto statement
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.