Nexus repo manager support for vulnerability scan of AI models

Sonatype Nexus Repository
1

Does the nexus IQ or Nexus repo manager support vulnerability analysis in AI models. Support AI model repository.

Example repository: Models - Hugging Face.

Can you please share if there is any documentation for that.

2

Hi @mohammad.sadiq!

Thank you for your question. The feature doesn’t exist yet but AI/ML model analysis is coming soon. Will update you as soon as we have it rolled out.

Deepesh
PM at Sonatype

1 Like
3

Hi Deepesh

Could you give a rough timeline on when the AI model analysis will be released?

If you could provide at which level the scan will cover? i.e. Pickle MSA Scan? AI model Fairness scan etc…

much appreciated.