Supported ML Formats | HiddenLayer Documentation

Model Format	File Extensions	Arbitrary Code Execution	Suspicious Functions	Network Requests	Denial of Service	Suspicious File Format	Decompression Vulnerabilities	Embedded Payloads	Directory Traversal	Arbitrary Read Access	Graph Payload
Cloudpickle	.pkl, .pickle	x	x	x	x	x
Dill	.dill	x	x	x	x	x
GGUF	.gguf	x
HDF5	.h5, .hdf5	x	x	x	x	x		x
JobLib	.joblib	x	x	x	x	x
Keras	.keras, .tf	x					x
NeMo	.nemo	x	x	x	x	x	x
Numpy	.npy, .npz	x	x	x	x	x
ONNX	.onnx								x	x	x
Pytorch	.pt, .bin, .zip	x	x	x	x	x
Pickle	.pkl	x	x	x	x	x
R	.rds (plain and compressed)	x
Safetensors	.safetensors						x	x
Skops	.skops	x
Tensorflow	.savedmodel, .tf, .pb						x
Zip	.zip						x

Recognized File Types

Supply Chain recognizes but does not scan the following common file types.

Category	File Types
Documentation	.md (READMEs, release notes)
Code Files	.py (scripts), .js (optional), .sh (shell scripts)
Config / Metadata	.json, .yaml, .yml, .ini, .cfg
Data Files	.txt, .csv, .tsv
Git Config Files	.gitignore, .gitattrib
TAR	.tar

Unsupported Types

If AI Supply Chain Security does not support, or is unable to recognize, the type of an input file, it will emit a scan result with empty detections and results.type key set to “unknown”.

[
    {
        "detections": [],
        "end_time": 1717543001759,
        "file_pointer": "/cmd/modelscan-cli/main.go",
        "results": {
            "md5": "33d1ed57c6a93d5cd910fd721c9d016e",
            "sha256": "1739c813f09d2c90ad676d318832134c22864bc1d4bf4f272b9d7971a4cea007",
            "tlsh": "3b360f42d1a3d84e8853d4c5b971a5ce2ae5cf8f87425fa1bd51bc1d4e78a18f20c8be",
            "type": "unknown"
        },
        "scan_id": "1739c813f09d2c90ad676d318832134c22864bc1d4bf4f272b9d7971a4cea007",
        "start_time": 1717543001552,
        "status": "done"
    }
]