> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hiddenlayer.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Model Reference

## Advisory Summary

The container references external model artifacts or requires model selection at runtime. NIM container scans (Supply Chain version 26.6.0 and later) emit advisory **`CONTAINER_0001_202606`** with manifest evidence (`default_model`, `model_manifest`) and list external artifact URIs in `summary.referenced_models`.

## Security Impact

Understanding which models a container references helps inventory supply chain dependencies and deployment configuration. Misconfigured or unexpected model references may indicate an incomplete deployment or an opportunity to scan referenced artifacts for security issues.

Referenced model weights are not scanned during the container scan itself. Deploying the container without scanning those artifacts leaves a gap in supply chain visibility.

## False Positive Considerations

This advisory is informational. Containers commonly reference external models by design, and runtime model selection is expected behavior for some deployment configurations.

## Recommended Remediation

* Review the referenced model URIs in `summary.referenced_models` and the `default_model` value in advisory evidence to confirm they match expected deployment intent.
* Download referenced NGC artifacts and scan them for security issues before deploying the container to production. See [Download with NGC CLI](/docs/products/supply-chain/cli/ngc_cli_download) for download steps and [NIM Container Scanning](/docs/products/supply-chain/cli/nim_container) for the full follow-up workflow.
* Ensure runtime model selection requirements are documented for operators deploying the container.
* If referenced artifacts cannot be validated as legitimate or scan results raise concerns, remove the container from the deployment pipeline until the issue is resolved.
* If the container is already deployed, escalate according to established security and incident response procedures to assess impact and determine appropriate containment or remediation actions.