Registry / ai-ml / rh-model-signing

rh-model-signing

library1.0.3pypypiunverified

A tool for signing and verifying machine learning models, currently a Red Hat Tech Preview. Version 1.0.1 supports Python >=3.10 and provides CLI and Python APIs for cryptographic signing of ML assets to ensure supply chain integrity.

ai-ml auth-security devops

pip install rh-model-signing

github ↗package ↗homepage ↗docs ↗changelog ↗

INSTALL

IMPORT

SIG · RH-MODEL-SIGNING

rh-model-signing

ai-mlpythonv1.0.3

Install

8.3s avg

Import

—

Disk

86MB

Pass rate

8/ 10

Env Coverage8 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v1.0.3 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

glibc

py 3.10

✓ —

✓ 10.3s

py 3.11

✓ —

✓ 8.5s

py 3.12

✓ —

✓ 7s

py 3.13

✓ —

✓ 7.3s

py 3.9

✕ build_error

86MB installed

● package 86MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

Signer

✓ from model_signing.signing import Signer

✗ from rh_model_signing import Signer

Verifier

✓ from model_signing.verifying import Verifier

Manifest

✓ from model_signing.manifest import Manifest

Generate a key pair, sign an ML model file, and verify the signature.

from rh_model_signing import Signer, Verifier, KeyPair import os # Generate a key pair key_pair = KeyPair.generate() # Sign a model file (e.g., model.onnx) signer = Signer(key_pair.private_key) signed_model_path = signer.sign("model.onnx", output_path="model.signed.onnx") print(f"Signed model saved to {signed_model_path}") # Verify the signed model verifier = Verifier(key_pair.public_key) result = verifier.verify("model.signed.onnx") print(f"Verification result: {result}")

rh-model-signing --version

Debug

Known issues

breakingIn version 1.0.0, the public API was restructured. The old submodule imports (e.g., `rh_model_signing.sign`) are no longer valid.

fix

Use `from rh_model_signing import Signer, Verifier, KeyPair` instead.

affects: <1.0.0

gotchaThe key pairs generated are not persisted automatically; you must save them manually. Loss of the private key means signed models cannot be re-verified.

fix

Call `key_pair.private_key.to_pem()` and save to a file. Load with `KeyPair.from_pem(...)`.

affects: all

deprecatedThe `rh_model_signing.utils` module is deprecated in 1.0.1 and will be removed in a future release.

fix

Migrate to the top-level API. If you used `from rh_model_signing.utils import ...`, switch to equivalent functions from `Signer` or `Verifier`.

affects: 1.0.1+

Upgrade

Version history

1.0.3latest on PyPI · released Jun 8, 2026

Audit

Dependencies

No dependency data recorded yet.

Agent activity

19 hits · last 30 days

node

OpenAI (training)

Resources

githubhttps://github.com/securesign/model-transparency ↗

packagehttps://pypi.org/project/rh-model-signing/ ↗

homepagehttps://pypi.org/project/rh-model-signing/ ↗

docshttps://github.com/securesign/model-transparency ↗

changeloghttps://github.com/securesign/model-transparency/blob/main/CHANGELOG.md ↗