Tag
safetensors
Safeguard articles tagged "safetensors" — guides, analysis, and best practices for software supply chain and application security.
3 articles
AI Security
Securing Hugging Face Models: A Practical Safety Guide
Hugging Face is the npm of machine learning, and it inherits npm's problems. Malicious weights, pickle payloads, and leaked Space secrets are all live risks — here is how to pull models safely.
Jul 4, 20265 min read
AI Security
Model Weights as Supply Chain Artifacts: Signing and Provenance
A 4 GB safetensors file deserves the same signing, hashing, and provenance discipline as a container image. How to actually do it with Sigstore, OCI registries, and AIBOMs.
Apr 26, 20266 min read
AI Security
PyTorch CVE-2025-32434: weights_only=True No Longer Safe
A critical PyTorch RCE bypassed the safety property of torch.load(weights_only=True). We analyze the bug and explain why safetensors should now be the default.
May 22, 20257 min read