Tag: safetensors
-
Hugging Face Security and Governance: Gated Models, Malicious Weights, and Scanning Before Anything Enters Your Registry (Hugging Face Series, Part 15)
A model download is an unvetted artifact, and a pickle checkpoint can run code the moment you load it. Here is how to gate the Hugging Face Hub the way you already gate a container registry: safetensors over pickle, no blind trust_remote_code, scan before promote, pin for provenance.
-
safetensors and Model File Formats: Why the Format Is a Security Decision (Hugging Face Series, Part 7)
A PyTorch .bin checkpoint is a pickle, and loading one can run code on your host. Here is why safetensors fixes that by design, how to convert and load safely, and where to scan models before they reach your GPU hosts.
Architect’s Toolkit
PJ’s Tools
VMware Cloud Foundation
- VCF Documentation
- VCF 9 Planning & Preparation Workbook
- VCF Bill of Materials (BoM)
- VMware Compatibility Guide
- VMware Interoperability Matrix
- VMware Configuration Maximums
- VMware Ports & Protocols
- VMware Hands-on Labs
- RVTools Download
Nutanix
AI & Cloud-Native Platform
- NVIDIA Build (Model Catalog)
- NVIDIA AI Enterprise Reference Architecture
- NVIDIA NIM Performance Benchmarking
- NVIDIA NGC Catalog
- NeMo Microservices Helm Chart
- Helm Charts Repository
- Hugging Face Models
Architecture & Design
About the Author
Dr Pranay Jha
Dr. Pranay Jha is a Cloud and AI Consultant with 18+ years of experience in hybrid cloud, virtualization, and enterprise infrastructure transformation. He specializes in VMware technologies, multi-cloud strategy, and Generative AI solutions. He holds a PhD in Computer Applications with research focused on Cloud and AI, has published multiple research papers, and has been a VMware vExpert since 2016 and a VMUG Community Leader.
You May Have Missed
DrJha