Skip to content

Create Model Ops and Supply Chain Security Cheat Sheet#2058

Open
Tryingtobeabetterprogrammer wants to merge 1 commit intoOWASP:masterfrom
Tryingtobeabetterprogrammer:feat-model-ops-cheat-sheet
Open

Create Model Ops and Supply Chain Security Cheat Sheet#2058
Tryingtobeabetterprogrammer wants to merge 1 commit intoOWASP:masterfrom
Tryingtobeabetterprogrammer:feat-model-ops-cheat-sheet

Conversation

@Tryingtobeabetterprogrammer

Initial draft covering unsafe deserialization risks, model scanning (modelscan), and migration to safetensors. Fixes #1781.

You're A Rockstar

Thank you for submitting a Pull Request (PR) to the Cheat Sheet Series.

🚩 If your PR is related to grammar/typo mistakes, please double-check the file for other mistakes in order to fix all the issues in the current cheat sheet.

Please make sure that for your contribution:

  • In case of a new Cheat Sheet, you have used the Cheat Sheet template.
  • All the markdown files do not raise any validation policy violation, see the policy.
  • All the markdown files follow these format rules.
  • All your assets are stored in the assets folder.
  • All the images used are in the PNG format.
  • Any references to websites have been formatted as [TEXT](URL)
  • You verified/tested the effectiveness of your contribution (e.g., the defensive code proposed is really an effective remediation? Please verify it works!).
  • The CI build of your PR pass, see the build status here.

If your PR is related to an issue, please finish your PR text with the following line:

This PR fixes issue #1781.

AI Tool Usage Disclosure (required for all PRs)

Please select one of the following options:

  • I have NOT used any AI tool to generate the contents of this PR.
  • I have used AI tools to generate the contents of this PR. I have verified
    the contents and I affirm the results. The LLM used is Gemini 3 Flash
    and the prompt used is Help me draft a new OWASP cheat sheet for Model Ops and Supply Chain Security, focusing on Pickle risks, Safetensors, and model scanning.

Thank you again for your contribution 😃

Initial draft covering unsafe deserialization risks, model scanning (modelscan), and migration to safetensors. Fixes OWASP#1781.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update: Secure AI/ML Model Ops Cheat Sheet

1 participant