Harden download/deserialize integrity (weights_only, hash checks, path confinement) - #9088

Warning: Code scanning cannot determine the alerts introduced by this pull request, because 1 configuration present on refs/heads/dev was not found:

Actions workflow (codeql-analysis.yml)

• ❓  .github/workflows/codeql-analysis.yml:analyze/language:python

View all branch alerts.