Skip to main content
HiddenLayer Security Plugin for JFrog Artifactory scans machine learning models stored in the Artifactory repository.

​
Prerequisites

  • JFrog Artifactory Pro

​
Download Security Plugin

The HiddenLayer Security Plugin is available on GitHub.

​
Install Security Plugin

To install the HiddenLayer Security Plugin, add the plugin to the $ARTIFACTORY_HOME/etc/plugin directory.

​
Configure Security Plugin

The Artifactory administrator must set up a repository and provide an Artifactory Repository Key. You can configure the HiddenLayer plugin using the Repository Key.
Large Language ModelsWhile the HiddenLayer plugin can work with any Artifactory repository, proper scan results are provided for large language model scans only. It is recommended to use the plugin with a Hugging Face repository or your own repository with large language models. The HiddenLayer AI Supply Chain Security starts to scan when a file begins to download.
  1. Edit the hiddenlayer.properties file, located at $ARTIFACTORY_HOME/etc/plugin/.
  2. In the hiddenlayer.properties file, change the following.
    • Add your HiddenLayer client id to hiddenlayer.auth.client_id=.
    • Add your HiddenLayer client secret to hiddenlayer.auth.client_secret=.
    • Add your repository keys to hiddenlayer.scan.repo_ids=. For multiple keys, separate the keys with commas.
  3. Save the properties file.

​
Reload Plugin

If you add more repositories to the hiddenlayer.properties file, use the following command to reload the security plugin. Change localhost to the correct URL you are using.