{"id":15039656,"url":"https://github.com/trusted-ai/adversarial-robustness-toolbox","last_synced_at":"2026-10-20T20:27:49.374Z","repository":{"id":37103006,"uuid":"125381318","full_name":"Trusted-AI/adversarial-robustness-toolbox","owner":"Trusted-AI","description":"Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams","archived":false,"fork":false,"pushed_at":"2026-10-08T15:38:37.000Z","size":694753,"stargazers_count":6279,"open_issues_count":22,"forks_count":1347,"subscribers_count":103,"default_branch":"main","last_synced_at":"2026-10-19T03:18:41.911Z","etag":null,"topics":["adversarial-attacks","adversarial-examples","adversarial-machine-learning","ai","artificial-intelligence","attack","blue-team","evasion","extraction","inference","machine-learning","poisoning","privacy","python","red-team","trusted-ai","trustworthy-ai"],"latest_commit_sha":null,"homepage":"https://adversarial-robustness-toolbox.readthedocs.io/en/latest/","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Trusted-AI.png","metadata":{"files":{"readme":"README-cn.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","accessibility":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2018-03-15T14:40:43.000Z","updated_at":"2026-10-18T23:22:56.000Z","dependencies_parsed_at":"2026-10-19T02:55:44.118Z","dependency_job_id":null,"html_url":"https://github.com/Trusted-AI/adversarial-robustness-toolbox","commit_stats":{"total_commits":9828,"total_committers":131,"mean_commits":75.02290076335878,"dds":0.6925111925111925,"last_synced_commit":"a62220fd28873f31bd6ad9c84ea8da10047c8d54"},"previous_names":["ibm/adversarial-robustness-toolbox"],"tags_count":67,"template":false,"template_full_name":null,"purl":"pkg:github/Trusted-AI/adversarial-robustness-toolbox","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Trusted-AI%2Fadversarial-robustness-toolbox","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Trusted-AI%2Fadversarial-robustness-toolbox/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Trusted-AI%2Fadversarial-robustness-toolbox/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Trusted-AI%2Fadversarial-robustness-toolbox/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Trusted-AI","download_url":"https://codeload.github.com/Trusted-AI/adversarial-robustness-toolbox/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Trusted-AI%2Fadversarial-robustness-toolbox/sbom","scorecard":{"id":144063,"data":{"date":"2025-08-11","repo":{"name":"github.com/Trusted-AI/adversarial-robustness-toolbox","commit":"273b90c24da90fa086d184dabb472a2bc2f4ecdf"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.2,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":-1,"reason":"Found no human activity in the last 13 changesets","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci-deepspeech-v3.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-espresso.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-goturn.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-huggingface.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-keras.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-legacy.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-pytorch-object-detectors.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-pytorch.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-scikit-learn.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-style-checks.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-tensorflow-v2.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-tfv2-faster-rcnn.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-yolo.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/dockerhub.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":10,"reason":"badge detected: Gold","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-deepspeech-v3.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-deepspeech-v3.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-deepspeech-v3.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-deepspeech-v3.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-deepspeech-v3.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-deepspeech-v3.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-deepspeech-v3.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-deepspeech-v3.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-espresso.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-espresso.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-espresso.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-espresso.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-espresso.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-espresso.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-espresso.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-espresso.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-goturn.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-goturn.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-goturn.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-goturn.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-goturn.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-goturn.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-goturn.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-goturn.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-huggingface.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-huggingface.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-huggingface.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-huggingface.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-huggingface.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-huggingface.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-huggingface.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-huggingface.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-huggingface.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-huggingface.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-keras.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-keras.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-keras.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-keras.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-keras.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-keras.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-keras.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-keras.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-keras.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-keras.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-legacy.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-legacy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-legacy.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-legacy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-legacy.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-legacy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-legacy.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-legacy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-legacy.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-legacy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-pytorch-object-detectors.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-pytorch-object-detectors.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-pytorch-object-detectors.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-pytorch-object-detectors.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-pytorch-object-detectors.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-pytorch-object-detectors.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-pytorch-object-detectors.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-pytorch-object-detectors.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-pytorch-object-detectors.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-pytorch-object-detectors.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-pytorch.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-pytorch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-pytorch.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-pytorch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-pytorch.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-pytorch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-pytorch.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-pytorch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-pytorch.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-pytorch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-scikit-learn.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-scikit-learn.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-scikit-learn.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-scikit-learn.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-scikit-learn.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-scikit-learn.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-scikit-learn.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-scikit-learn.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-scikit-learn.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-scikit-learn.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-style-checks.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-style-checks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-style-checks.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-style-checks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tensorflow-v2.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-tensorflow-v2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tensorflow-v2.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-tensorflow-v2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tensorflow-v2.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-tensorflow-v2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tensorflow-v2.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-tensorflow-v2.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-tensorflow-v2.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-tensorflow-v2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tfv2-faster-rcnn.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-tfv2-faster-rcnn.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tfv2-faster-rcnn.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-tfv2-faster-rcnn.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-tfv2-faster-rcnn.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-tfv2-faster-rcnn.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-tfv2-faster-rcnn.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-tfv2-faster-rcnn.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-yolo.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-yolo.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-yolo.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-yolo.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-yolo.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-yolo.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-yolo.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/ci-yolo.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dockerhub.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/Trusted-AI/adversarial-robustness-toolbox/dockerhub.yml/main?enable=pin","Warn: containerImage not pinned by hash: .github/actions/deepspeech-v3/Dockerfile:2: pin your Docker image by updating python:3.10.17-slim-bookworm to python:3.10.17-slim-bookworm@sha256:49454d2bf78a48f217eb25ecbcb4b5face313fea6a6e82706465a6990303ada2","Warn: containerImage not pinned by hash: .github/actions/espresso/Dockerfile:2: pin your Docker image by updating python:3.10.17-slim-bookworm to python:3.10.17-slim-bookworm@sha256:49454d2bf78a48f217eb25ecbcb4b5face313fea6a6e82706465a6990303ada2","Warn: containerImage not pinned by hash: .github/actions/goturn/Dockerfile:2: pin your Docker image by updating python:3.10.17-slim-bookworm to python:3.10.17-slim-bookworm@sha256:49454d2bf78a48f217eb25ecbcb4b5face313fea6a6e82706465a6990303ada2","Warn: containerImage not pinned by hash: .github/actions/tfv2-faster-rcnn/Dockerfile:2: pin your Docker image by updating python:3.8.20-slim-bookworm to python:3.8.20-slim-bookworm@sha256:1d52838af602b4b5a831beb13a0e4d073280665ea7be7f69ce2382f29c5a613f","Warn: containerImage not pinned by hash: .github/actions/yolo/Dockerfile:2: pin your Docker image by updating python:3.10.17-slim-bookworm to python:3.10.17-slim-bookworm@sha256:49454d2bf78a48f217eb25ecbcb4b5face313fea6a6e82706465a6990303ada2","Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating nvidia/cuda:11.3.1-cudnn8-runtime-ubuntu20.04 to nvidia/cuda:11.3.1-cudnn8-runtime-ubuntu20.04@sha256:a15728336adf56ca1516a0d7b4282b2225b0488ec3392aa01b6e176cc12923a6","Warn: containerImage not pinned by hash: utils/mlops/kubeflow/robustness_evaluation_fgsm_pytorch/Dockerfile:1: pin your Docker image by updating pytorch/pytorch:latest to pytorch/pytorch:latest@sha256:11691e035a3651d25a87116b4f6adc113a27a29d8f5a6a583f8569e0ee5ff897","Warn: pipCommand not pinned by hash: .github/actions/deepspeech-v3/Dockerfile:27","Warn: pipCommand not pinned by hash: .github/actions/deepspeech-v3/Dockerfile:28","Warn: pipCommand not pinned by hash: .github/actions/deepspeech-v3/Dockerfile:29","Warn: pipCommand not pinned by hash: .github/actions/deepspeech-v3/Dockerfile:30","Warn: pipCommand not pinned by hash: .github/actions/deepspeech-v3/Dockerfile:32","Warn: pipCommand not pinned by hash: .github/actions/deepspeech-v3/Dockerfile:32","Warn: pipCommand not pinned by hash: .github/actions/deepspeech-v3/Dockerfile:34","Warn: pipCommand not pinned by hash: .github/actions/espresso/Dockerfile:27","Warn: pipCommand not pinned by hash: .github/actions/espresso/Dockerfile:28","Warn: pipCommand not pinned by hash: .github/actions/espresso/Dockerfile:29","Warn: pipCommand not pinned by hash: .github/actions/espresso/Dockerfile:30","Warn: pipCommand not pinned by hash: .github/actions/espresso/Dockerfile:31","Warn: pipCommand not pinned by hash: .github/actions/espresso/Dockerfile:34","Warn: pipCommand not pinned by hash: .github/actions/espresso/Dockerfile:35","Warn: pipCommand not pinned by hash: .github/actions/goturn/Dockerfile:28","Warn: pipCommand not pinned by hash: .github/actions/goturn/Dockerfile:29","Warn: pipCommand not pinned by hash: .github/actions/goturn/Dockerfile:30","Warn: pipCommand not pinned by hash: .github/actions/goturn/Dockerfile:34","Warn: pipCommand not pinned by hash: .github/actions/goturn/Dockerfile:35","Warn: pipCommand not pinned by hash: .github/actions/tfv2-faster-rcnn/Dockerfile:24","Warn: pipCommand not pinned by hash: .github/actions/tfv2-faster-rcnn/Dockerfile:33","Warn: pipCommand not pinned by hash: .github/actions/tfv2-faster-rcnn/Dockerfile:35","Warn: pipCommand not pinned by hash: .github/actions/yolo/Dockerfile:22","Warn: pipCommand not pinned by hash: .github/actions/yolo/Dockerfile:23","Warn: pipCommand not pinned by hash: Dockerfile:7-12","Warn: pipCommand not pinned by hash: Dockerfile:19","Warn: pipCommand not pinned by hash: utils/mlops/kubeflow/robustness_evaluation_fgsm_pytorch/Dockerfile:3","Warn: pipCommand not pinned by hash: .github/workflows/ci-huggingface.yml:53","Warn: pipCommand not pinned by hash: .github/workflows/ci-huggingface.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/ci-huggingface.yml:55","Warn: pipCommand not pinned by hash: .github/workflows/ci-huggingface.yml:56","Warn: pipCommand not pinned by hash: .github/workflows/ci-huggingface.yml:57","Warn: pipCommand not pinned by hash: .github/workflows/ci-huggingface.yml:58","Warn: pipCommand not pinned by hash: .github/workflows/ci-huggingface.yml:59","Warn: pipCommand not pinned by hash: .github/workflows/ci-huggingface.yml:60","Warn: pipCommand not pinned by hash: .github/workflows/ci-huggingface.yml:61","Warn: pipCommand not pinned by hash: .github/workflows/ci-keras.yml:51","Warn: pipCommand not pinned by hash: .github/workflows/ci-keras.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/ci-keras.yml:53","Warn: pipCommand not pinned by hash: .github/workflows/ci-keras.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/ci-legacy.yml:56","Warn: pipCommand not pinned by hash: .github/workflows/ci-legacy.yml:57","Warn: pipCommand not pinned by hash: .github/workflows/ci-legacy.yml:58","Warn: pipCommand not pinned by hash: .github/workflows/ci-legacy.yml:59","Warn: pipCommand not pinned by hash: .github/workflows/ci-legacy.yml:60","Warn: pipCommand not pinned by hash: .github/workflows/ci-legacy.yml:61","Warn: pipCommand not pinned by hash: .github/workflows/ci-legacy.yml:62","Warn: pipCommand not pinned by hash: .github/workflows/ci-legacy.yml:63","Warn: pipCommand not pinned by hash: .github/workflows/ci-pytorch-object-detectors.yml:43","Warn: pipCommand not pinned by hash: .github/workflows/ci-pytorch-object-detectors.yml:44","Warn: pipCommand not pinned by hash: .github/workflows/ci-pytorch.yml:58","Warn: pipCommand not pinned by hash: .github/workflows/ci-pytorch.yml:59","Warn: pipCommand not pinned by hash: .github/workflows/ci-pytorch.yml:60","Warn: pipCommand not pinned by hash: .github/workflows/ci-pytorch.yml:61","Warn: pipCommand not pinned by hash: .github/workflows/ci-pytorch.yml:62","Warn: pipCommand not pinned by hash: .github/workflows/ci-scikit-learn.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/ci-scikit-learn.yml:55","Warn: pipCommand not pinned by hash: .github/workflows/ci-scikit-learn.yml:56","Warn: pipCommand not pinned by hash: .github/workflows/ci-style-checks.yml:44","Warn: pipCommand not pinned by hash: .github/workflows/ci-style-checks.yml:45","Warn: pipCommand not pinned by hash: .github/workflows/ci-style-checks.yml:46","Warn: pipCommand not pinned by hash: .github/workflows/ci-style-checks.yml:47","Warn: pipCommand not pinned by hash: .github/workflows/ci-tensorflow-v2.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/ci-tensorflow-v2.yml:53","Warn: pipCommand not pinned by hash: .github/workflows/ci-tensorflow-v2.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/ci-tensorflow-v2.yml:55","Info:   0 out of  50 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of  15 third-party GitHubAction dependencies pinned","Info:   0 out of   7 containerImage dependencies pinned","Info:   0 out of  66 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"33 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-pwq7-2gvj-vg9v","Warn: Project is vulnerable to: GHSA-267x-w5hx-8hjr","Warn: Project is vulnerable to: GHSA-33h2-69j3-r336","Warn: Project is vulnerable to: GHSA-3448-vrgh-85xr","Warn: Project is vulnerable to: GHSA-5rpc-gwh9-q9fg","Warn: Project is vulnerable to: GHSA-634c-v2xv-ffpg","Warn: Project is vulnerable to: GHSA-6v6p-p97v-g2p7","Warn: Project is vulnerable to: GHSA-83rh-hx5x-q9p5","Warn: Project is vulnerable to: GHSA-8849-5h85-98qw","Warn: Project is vulnerable to: GHSA-89rj-5ggj-3p9p","Warn: Project is vulnerable to: GHSA-8w3x-457r-wg53","Warn: Project is vulnerable to: GHSA-9g8h-pjm4-q92p","Warn: Project is vulnerable to: GHSA-c7gp-2pch-qh2v","Warn: Project is vulnerable to: GHSA-cvhw-2593-5j2q","Warn: Project is vulnerable to: GHSA-fffj-9qwg-qmh5","Warn: Project is vulnerable to: GHSA-fm39-cw8h-3p63","Warn: Project is vulnerable to: GHSA-fr58-2xhv-qp3w","Warn: Project is vulnerable to: GHSA-fvq6-392h-6mjj","Warn: Project is vulnerable to: GHSA-fw99-f933-rgh8","Warn: Project is vulnerable to: GHSA-hxfw-jm98-v4mq","Warn: Project is vulnerable to: GHSA-jcxv-2j3h-mg59","Warn: Project is vulnerable to: GHSA-jggw-2q6g-c3m6","Warn: Project is vulnerable to: GHSA-m43c-649m-pm48","Warn: Project is vulnerable to: GHSA-m6vm-8g8v-xfjh","Warn: Project is vulnerable to: GHSA-pqjj-6f5q-gqph","Warn: Project is vulnerable to: GHSA-q799-q27x-vp7w","Warn: Project is vulnerable to: GHSA-qr4w-53vh-m672","Warn: Project is vulnerable to: GHSA-rqxg-xvcq-3v2f","Warn: Project is vulnerable to: GHSA-vc29-rj92-gc7j","Warn: Project is vulnerable to: GHSA-w96g-3p64-63wr","Warn: Project is vulnerable to: GHSA-wq8f-wvqp-xvvm","Warn: Project is vulnerable to: GHSA-x3rm-644h-67m8","Warn: Project is vulnerable to: PYSEC-2023-183"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-16T08:58:26.905Z","repository_id":37103006,"created_at":"2025-08-16T08:58:26.905Z","updated_at":"2025-08-16T08:58:26.905Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38350665,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-19T02:00:06.414Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["adversarial-attacks","adversarial-examples","adversarial-machine-learning","ai","artificial-intelligence","attack","blue-team","evasion","extraction","inference","machine-learning","poisoning","privacy","python","red-team","trusted-ai","trustworthy-ai"],"created_at":"2024-09-24T20:43:33.096Z","updated_at":"2026-10-20T20:27:44.354Z","avatar_url":"https://github.com/Trusted-AI.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Adversarial Robustness Toolbox (ART) v1.18\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"docs/images/art_lfai.png?raw=true\" width=\"467\" title=\"ART logo\"\u003e\n\u003c/p\u003e\n\u003cbr /\u003e\n\n![CodeQL](https://github.com/Trusted-AI/adversarial-robustness-toolbox/workflows/CodeQL/badge.svg)\n[![Documentation Status](https://readthedocs.org/projects/adversarial-robustness-toolbox/badge/?version=latest)](http://adversarial-robustness-toolbox.readthedocs.io/en/latest/?badge=latest)\n[![PyPI](https://badge.fury.io/py/adversarial-robustness-toolbox.svg)](https://badge.fury.io/py/adversarial-robustness-toolbox)\n[![codecov](https://codecov.io/gh/Trusted-AI/adversarial-robustness-toolbox/branch/main/graph/badge.svg)](https://codecov.io/gh/Trusted-AI/adversarial-robustness-toolbox)\n[![Code style: black](https://img.shields.io/badge/code%20style-black-000000.svg)](https://github.com/psf/black)\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n[![PyPI - Python Version](https://img.shields.io/pypi/pyversions/adversarial-robustness-toolbox)](https://pypi.org/project/adversarial-robustness-toolbox/)\n[![slack-img](https://img.shields.io/badge/chat-on%20slack-yellow.svg)](https://ibm-art.slack.com/)\n[![Downloads](https://static.pepy.tech/badge/adversarial-robustness-toolbox)](https://pepy.tech/project/adversarial-robustness-toolbox)\n[![Downloads](https://static.pepy.tech/badge/adversarial-robustness-toolbox/month)](https://pepy.tech/project/adversarial-robustness-toolbox)\n[![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/5090/badge)](https://bestpractices.coreinfrastructure.org/projects/5090)\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://raw.githubusercontent.com/lfai/artwork/master/lfaidata-assets/lfaidata-project-badge/graduate/color/lfaidata-project-badge-graduate-color.png\" alt=\"LF AI \u0026 Data\" width=\"300\"/\u003e\n\u003c/p\u003e\n\n对抗性鲁棒性工具集（ART）是用于机器学习安全性的Python库。ART 由\n[Linux Foundation AI \u0026 Data Foundation](https://lfaidata.foundation) (LF AI \u0026 Data)。 ART提供的工具可\n帮助开发人员和研究人员针对以下方面捍卫和评估机器学习模型和应用程序：\n逃逸，数据污染，模型提取和推断的对抗性威胁。ART支持所有流行的机器学习框架\n（TensorFlow，Keras，PyTorch，MXNet，scikit-learn，XGBoost，LightGBM，CatBoost，GPy等），所有数据类型\n（图像，表格，音频，视频等）和机器学习任务（分类，物体检测，语音识别，\n生成模型，认证等）。\n\n## Adversarial Threats\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"docs/images/adversarial_threats_attacker.png?raw=true\" width=\"400\" title=\"ART logo\"\u003e\n  \u003cimg src=\"docs/images/adversarial_threats_art.png?raw=true\" width=\"400\" title=\"ART logo\"\u003e\n\u003c/p\u003e\n\u003cbr /\u003e\n\n## ART for Red and Blue Teams (selection)\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"docs/images/white_hat_blue_red.png?raw=true\" width=\"800\" title=\"ART Red and Blue Teams\"\u003e\n\u003c/p\u003e\n\u003cbr /\u003e\n\n## 学到更多\n\n| **[开始使用][get-started]**     | **[文献资料][documentation]**     | **[贡献][contributing]**           |\n|-------------------------------------|-------------------------------|-----------------------------------|\n| - [安装][installation]\u003cbr\u003e- [例子](examples/README.md)\u003cbr\u003e- [Notebooks](notebooks/README.md) | - [攻击][attacks]\u003cbr\u003e- [防御][defences]\u003cbr\u003e- [评估器][estimators]\u003cbr\u003e- [指标][metrics]\u003cbr\u003e- [技术文档](https://adversarial-robustness-toolbox.readthedocs.io) | - [Slack](https://ibm-art.slack.com), [邀请函](https://join.slack.com/t/ibm-art/shared_invite/enQtMzkyOTkyODE4NzM4LTA4NGQ1OTMxMzFmY2Q1MzE1NWI2MmEzN2FjNGNjOGVlODVkZDE0MjA1NTA4OGVkMjVkNmQ4MTY1NmMyOGM5YTg)\u003cbr\u003e- [贡献](CONTRIBUTING.md)\u003cbr\u003e- [路线图][roadmap]\u003cbr\u003e- [引用][citing] |\n\n[get-started]: https://github.com/Trusted-AI/adversarial-robustness-toolbox/wiki/Get-Started\n[attacks]: https://github.com/Trusted-AI/adversarial-robustness-toolbox/wiki/ART-Attacks\n[defences]: https://github.com/Trusted-AI/adversarial-robustness-toolbox/wiki/ART-Defences\n[estimators]: https://github.com/Trusted-AI/adversarial-robustness-toolbox/wiki/ART-Estimators\n[metrics]: https://github.com/Trusted-AI/adversarial-robustness-toolbox/wiki/ART-Metrics\n[contributing]: https://github.com/Trusted-AI/adversarial-robustness-toolbox/wiki/Contributing\n[documentation]: https://github.com/Trusted-AI/adversarial-robustness-toolbox/wiki/Documentation\n[installation]: https://github.com/Trusted-AI/adversarial-robustness-toolbox/wiki/Get-Started#setup\n[roadmap]: https://github.com/Trusted-AI/adversarial-robustness-toolbox/wiki/Roadmap\n[citing]: https://github.com/Trusted-AI/adversarial-robustness-toolbox/wiki/Contributing#citing-art\n\n该库正在不断开发中。欢迎反馈，错误报告和贡献！\n\n# 致谢\n\n本材料部分基于国防高级研究计划局（DARPA）支持的工作，合同编号HR001120C0013。\n本材料中表达的任何意见，发现和结论或建议均为作者的观点，并不一定反映国防高级研究计划局（DARPA）的观点。\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftrusted-ai%2Fadversarial-robustness-toolbox","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftrusted-ai%2Fadversarial-robustness-toolbox","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftrusted-ai%2Fadversarial-robustness-toolbox/lists"}