The container references external model artifacts or requires model selection at runtime. NIM container scans (Supply Chain version 26.6.0 and later) emit advisory CONTAINER_0001_202606 with manifest evidence (default_model, model_manifest) and list external artifact URIs in summary.referenced_models.
Understanding which models a container references helps inventory supply chain dependencies and deployment configuration. Misconfigured or unexpected model references may indicate an incomplete deployment or an opportunity to scan referenced artifacts for security issues.
Referenced model weights are not scanned during the container scan itself. Deploying the container without scanning those artifacts leaves a gap in supply chain visibility.
This advisory is informational. Containers commonly reference external models by design, and runtime model selection is expected behavior for some deployment configurations.
- Review the referenced model URIs in
summary.referenced_modelsand thedefault_modelvalue in advisory evidence to confirm they match expected deployment intent. - Download referenced NGC artifacts and scan them for security issues before deploying the container to production. See Download with NGC CLI for download steps and NIM Container Scanning for the full follow-up workflow.
- Ensure runtime model selection requirements are documented for operators deploying the container.
- If referenced artifacts cannot be validated as legitimate or scan results raise concerns, remove the container from the deployment pipeline until the issue is resolved.
- If the container is already deployed, escalate according to established security and incident response procedures to assess impact and determine appropriate containment or remediation actions.