All pull requests

Pull requests

• Report scanner runs for each model file

  #394·pasmud opened Oct 21, 2026·

  ·
  1

• Add SARIF report format output

  #391·HaroonArshad-53 opened Oct 16, 2026·

  ·
  1

• Record modelscan version in generated settings files

  #390·HaroonArshad-53 opened Oct 16, 2026·

  ·
  1

• fix(pickle): fall back to pickle scanner on Keras/H5 wrong-extension parse failure

  #389·Varshith-Kali opened Oct 15, 2026·

  ·
  1

  2

• fix(pickle): fail closed when opcode extraction hits malformed tails

  #387·Varshith-Kali opened Oct 15, 2026·

  ·
  1

  2

• fix(pickle): fall back to pickle scanner on PyTorch magic mismatch (#338 item 12)

  #386·Varshith-Kali opened Oct 15, 2026·

  ·
  2

• fix(pickle): sniff magic bytes for extensionless entries

  #385·Varshith-Kali opened Oct 14, 2026·

  ·
  1

  2

• fix(pickle): include ops[0] in STACK_GLOBAL operand backward scan

  #383·Varshith-Kali opened Oct 14, 2026·

  ·
  1

  2

• fix(pickle): match unsafe globals by longest module prefix; flag missed code-execution primitives

  #381·Varshith-Kali opened Oct 13, 2026·

  ·
  3

  2

• Fix console report on Windows encodings

  #379·nightcityblade opened Oct 10, 2026·

  ·
  1

• Detect pandas read_pickle in pickle scans

  #378·nightcityblade opened Oct 10, 2026·

  ·
  1

• fix: detect timeit pickle payloads

  #377·nightcityblade opened Oct 10, 2026·

  ·
  1

• docs: update copyright year

  #376·nightcityblade opened Oct 10, 2026·

  ·
  1

  1

• Scan through joblib compression layers in pickle scanner

  #375·Varshith-Kali opened Oct 6, 2026·

  ·
  1

  2

• Support Python 3.13 and 3.14

  #373·ethansilvas opened Sep 28, 2026Collaborator·

  ·

• build: make NumPy an optional dependency

  #371·TrueFurina opened Aug 27, 2026·4 tasks done·

  ·

• Add metadata field to scan reports

  #370·ChrisJr404 opened Aug 18, 2026·

  ·
  1

• fix(reports): do not report success when every model was skipped

  #366·Eljees opened Jul 28, 2026·

  ·
  1

• fix(cli): stop leaking a file handle in create-settings-file

  #365·Eljees opened Jul 28, 2026·

  ·
  1

  2

• Add transformers.dynamic_module_utils to CRITICAL unsafe_globals blocklist

  #360·SSJCorpSec opened Jun 25, 2026·

  ·
  3

• fix: detect unsafe module references in H5 nested config objects

  #359·scruge1 opened Jun 24, 2026·3 tasks done·

  ·
  1

• Fix fail-closed handling for pickle parse errors in joblib files

  #356·phenggeler opened Jun 22, 2026·

  ·
  1

• Fix fail-open ZIP iteration in _iterate_models (BadZipFile bypass)

  #355·AAtomical opened Jun 21, 2026·

  ·
  1

  1

• Make NumPy an optional dependency

  #352·extrasmall0 opened Jun 7, 2026·

  ·
  1

  1

• Detect nested Keras Lambda layers

  #351·dfgvaetyj3456356-hash opened Jun 2, 2026·

  ·
  1