#sigstore

Securing the ML Model Supply Chain: Provenance, Signing, and Verification

Model weights are unauthenticated binaries that execute code on load. This is a practical guide to securing the ML supply chain with model signing