Dell Enterprise Hub supply chain security

In order to enable users to easily run popular models from the Hugging Face Hub on a variety of devices on the Dell Enterprise Hub, we provide custom docker images. Security being a top concern of our customers, these docker images are not only tested for functionality and performance, but also for security. When it comes to these artifacts, there are two major components of security testing.

Docker image security

Security is a top priority for Dell Enterprise Hub, especially when it comes to deploying models in enterprise environments. This section refers to the security within the container image itself, i.e., how we ensure that the docker images provided do not contain known vulnerabilities, and how users can verify the integrity and authenticity of the images they pull from the Dell Enterprise Hub registry. To achieve this, we implement the following measures: image scanning, image signing, and providing SHA384 hashes for each image.

Image Scanning

While docker images are static artifacts, the open source community finds and publishes new package vulnerabilities regularly via the National Vulnerability Database. For docker image security, we currently use Amazon Inspector to scan for vulnerabilities in our model containers. We follow the CVSS v3 ratings associated with a particular vulnerability. Images are scanned daily, and we are notified immediately when a critical vulnerability emerges.

Image Signing

All Dell Enterprise Hub docker images are built and signed with Cosign under an official Hugging Face repository. This allows users to verify the authenticity and integrity of the images they pull from the Dell Enterprise Hub registry. All model images can be verified using Cosign, ensuring that the images have not been tampered with and come from a trusted source.

cosign verify \
  --certificate-identity-regexp '^https://github.com/huggingface/.*/.github/workflows/.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  registry.dell.huggingface.co/enterprise-dell-inference-<model>:<tag>

Image SHA384 Hashes

For each Dell Enterprise Hub docker image, we provide the SHA384 hash of the image manifest. This allows users to verify that the image they have pulled matches the expected hash, ensuring its integrity. The SHA384 hashes are computed and saved to a .sha384 file, which can be found in this public dataset hosted on the Hugging Face Hub. This way, users can download the corresponding .sha384 file and cross-check the hash of the image they pull against the official hash provided by Hugging Face by running the following commands:

docker pull registry.dell.huggingface.co/enterprise-dell-inference-<model>:<tag>
docker save enterprise-dell-inference-<model>:<tag> -o enterprise-dell-inference-<model>__<tag>.tar
sha384sum -c enterprise-dell-inference-<model>__<tag>.tar.sha384

If you don't have access to a web browser in your work environment or want to automate the verification process, you still can check the hash by using curl or wget to download the corresponding .sha384 file:

# Using curl
curl -O https://huggingface.co/datasets/hf-dell-internal/image-checksums/resolve/main/enterprise-dell-inference-<model>__<tag>.tar.sha384

# Or using wget
wget https://huggingface.co/datasets/hf-dell-internal/image-checksums/resolve/main/enterprise-dell-inference-<model>__<tag>.tar.sha384

Additionally, you can verify the SHA384 hash directly in one command (note that you must have the image .tar file already saved):

# Using curl
curl -sL https://huggingface.co/datasets/hf-dell-internal/image-checksums/resolve/main/enterprise-dell-inference-<model>__<tag>.tar.sha384 | sha384sum -c -

# Or using wget
wget -qO- https://huggingface.co/datasets/hf-dell-internal/image-checksums/resolve/main/enterprise-dell-inference-<model>__<tag>.tar.sha384 | sha384sum -c -

Model security

This refers to the safety of the model itself, including its files and potential malicious functional behavior. Hugging Face performs malware and pickle scans on all model repositories with in-house scanners and third-party scanners, to assess model security. Reports can be found by navigating to the Files and versions tab on every model page. These scans protect enterprises against the risk of malicious content being introduced via models. For more information on the scanners used, please visit the Hugging Face Hub documentation.

DEH containers provide a complete, self-contained environment enabling on-premises model deployment. Once a container and model files are downloaded, no external internet connection is required. This ensures secure execution fully within your infrastructure, without needing to transmit data externally.

The security scan results provided are for informational purposes only. No representation or warranty, express or implied, is made regarding the accuracy, completeness, or reliability of the security scan results provided. The scan results are not a substitute for comprehensive security assessments or ongoing monitoring. You remain solely responsible for implementing appropriate security measures and for any decisions made based on the scan results. The providers of the scan results disclaim all liability and responsibility for any loss, damage, or harm arising from reliance on the scan results, including but not limited to direct, indirect, incidental, or consequential damages.