Container Registry
A container registry is like a digital warehouse for software packages. If a bad actor sneaks in and replaces a legitimate package with a fake one, anyone who comes to pick up that package will unknowingly take the tampered version, which could include a compromised AI model.
A container registry acts as a centralized repository for storing and distributing container images. An adversary can exploit this by pushing a malicious image that overwrites an existing tag, causing downstream CI/CD pipelines and users to pull the compromised image, thereby injecting malicious AI models into the supply chain.
A container registry is a service that hosts and manages container image repositories. An adversary may compromise the integrity of the AI supply chain by performing an unauthorized push to overwrite an existing image name or tag. This results in the distribution of manipulated container images—potentially containing compromised AI models—to automated CI/CD pipelines and end-users, facilitating the propagation of malicious artifacts across development and deployment environments.