Over the past year, in collaboration with openssf, nvidia and hiddenlayer, we have worked on bringing sigstore signatures to the world of machine learning, making ml models tamper resistant via transparent signatures. In partnership with nvidia and hiddenlayer, as part of the open source security foundation, we are now launching the first stable version of our model signing library. Model signing this project demonstrates how to protect the integrity of a model by signing it
We support generating signatures via sigstore, a tool for making code signatures transparent without requiring management of cryptographic key material. Today the oss community is releasing the v1.0 stable version of our model signing library as a python package supporting sigstore and traditional signing methods. The open source security foundation (openssf) ai/ml working group has introduced model signing v1.0, a project designed to secure the machine learning supply chain by providing tools for signing and verifying ml models.
