Fix tpp pins and add labels

[ma-pineda]

Description

1. Fix tpp pins: Pin all pip and conda dependencies
2. Add labels: Add labels to docker-compose files for support matrix

Changes Made

• [ ] The code follows the project's coding standards.
• [ ] No Intel Internal IP is present within the changes.
• [ ] The documentation has been updated to reflect any changes in functionality.

Validation

Changes were made based on current version packages installed on dockerhub containers.

• [ ] I have tested any changes in container groups locally with test_runner.py with all existing tests passing, and I have added new tests where applicable.

[github-actions[bot]]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 11 package(s) with unknown licenses.

See the Details below.

License Issues

preset/data-analytics/requirements.txt

Package	Version	License	Issue Type
cloud-data-connector	1.0.3	Null	Unknown License

preset/deep-learning/requirements.txt

Package	Version	License	Issue Type
cloud-data-connector	>= 1.0.3	Null	Unknown License
dataset-librarian	>= 1.0.4	Null	Unknown License
tensorflow-hub	>= 0.16.1	Null	Unknown License
cryptography	>= 42.0.7	Null	Unknown License
tqdm	>= 4.66.2	Null	Unknown License

preset/inference-optimization/requirements.txt

Package	Version	License	Issue Type
cloud-data-connector	>= 1.0.3	Null	Unknown License
dataset-librarian	>= 1.0.4	Null	Unknown License
tensorflow-hub	>= 0.16.1	Null	Unknown License
cryptography	>= 42.0.7	Null	Unknown License
tqdm	>= 4.66.2	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package	Version	Score	Details
pip/cloud-data-connector	1.0.3	Unknown	Unknown
pip/accelerate	>= 0.30.0	:green_circle: 6.2	Details Check Score Reason Code-Review :green_circle: 9 Found 28/30 approved changesets -- score normalized to 9 Maintained :green_circle: 10 30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing :warning: 0 project is not fuzzed Signed-Releases :warning: -1 no releases found Security-Policy :warning: 0 security policy file not detected Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Packaging :green_circle: 10 packaging workflow detected SAST :green_circle: 3 SAST tool is not run on all commits -- score normalized to 3
pip/cloud-data-connector	>= 1.0.3	Unknown	Unknown
pip/cryptography	>= 42.0.7	:green_circle: 8.5	Details Check Score Reason Code-Review :green_circle: 10 all changesets reviewed Maintained :green_circle: 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 9 license file detected Signed-Releases :warning: -1 no releases found Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Packaging :warning: -1 packaging workflow not detected Security-Policy :green_circle: 10 security policy file detected Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Token-Permissions :green_circle: 10 GitHub workflow tokens follow principle of least privilege Fuzzing :green_circle: 10 project is fuzzed SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0 Binary-Artifacts :green_circle: 10 no binaries found in the repo Pinned-Dependencies :green_circle: 4 dependency not pinned by hash detected -- score normalized to 4 Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected
pip/dataset-librarian	>= 1.0.4	Unknown	Unknown
pip/datasets	>= 2.19.1	:green_circle: 6	Details Check Score Reason Maintained :green_circle: 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 Code-Review :green_circle: 5 Found 16/30 approved changesets -- score normalized to 5 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases :warning: -1 no releases found Security-Policy :green_circle: 10 security policy file detected Packaging :warning: -1 packaging workflow not detected Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts :green_circle: 10 no binaries found in the repo Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Fuzzing :warning: 0 project is not fuzzed SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0
pip/evaluate	>= 0.4.2	:green_circle: 5.4	Details Check Score Reason Code-Review :green_circle: 9 Found 29/30 approved changesets -- score normalized to 9 Maintained :green_circle: 5 6 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Signed-Releases :warning: -1 no releases found Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Packaging :warning: -1 packaging workflow not detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Fuzzing :warning: 0 project is not fuzzed Security-Policy :warning: 0 security policy file not detected Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected SAST :green_circle: 3 SAST tool is not run on all commits -- score normalized to 3
pip/ninja	>= 1.11.1.1	Unknown	Unknown
pip/py-cpuinfo	>= 9.0.0	:green_circle: 3.8	Details Check Score Reason Code-Review :green_circle: 4 Found 7/17 approved changesets -- score normalized to 4 Maintained :warning: 0 0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Signed-Releases :warning: -1 no releases found Branch-Protection :warning: 0 branch protection not enabled on development/release branches Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Packaging :warning: -1 packaging workflow not detected Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts :green_circle: 10 no binaries found in the repo Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Fuzzing :warning: 0 project is not fuzzed Security-Policy :warning: 0 security policy file not detected SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0
pip/python-dotenv	>= 1.0.1	:green_circle: 5.1	Details Check Score Reason Code-Review :green_circle: 5 Found 16/29 approved changesets -- score normalized to 5 Maintained :green_circle: 7 4 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 7 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Security-Policy :green_circle: 10 security policy file detected Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Packaging :warning: -1 packaging workflow not detected Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 Signed-Releases :warning: -1 no releases found Branch-Protection :warning: 0 branch protection not enabled on development/release branches Fuzzing :warning: 0 project is not fuzzed Vulnerabilities :green_circle: 9 1 existing vulnerabilities detected SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0
pip/requests	>= 2.31.0	:green_circle: 8.8	Details Check Score Reason Code-Review :green_circle: 10 all changesets reviewed Maintained :green_circle: 10 26 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases :warning: 0 Project has not signed or included provenance with any releases. Security-Policy :green_circle: 10 security policy file detected Packaging :warning: -1 packaging workflow not detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Fuzzing :green_circle: 10 project is fuzzed Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Token-Permissions :green_circle: 10 GitHub workflow tokens follow principle of least privilege SAST :green_circle: 10 SAST tool is run on all commits Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Pinned-Dependencies :green_circle: 10 all dependencies are pinned
pip/tensorflow-hub	>= 0.16.1	:green_circle: 5.8	Details Check Score Reason Code-Review :green_circle: 9 Found 29/30 approved changesets -- score normalized to 9 Maintained :green_circle: 10 6 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Pinned-Dependencies :warning: -1 no dependencies found Dangerous-Workflow :warning: -1 no workflows found Packaging :warning: -1 packaging workflow not detected SAST :warning: 0 no SAST tool detected License :warning: 0 license file not detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Token-Permissions :warning: -1 No tokens found Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Signed-Releases :warning: -1 no releases found Fuzzing :warning: 0 project is not fuzzed Security-Policy :warning: 0 security policy file not detected
pip/tqdm	>= 4.66.2	:green_circle: 5.9	Details Check Score Reason Code-Review :warning: 1 Found 1/8 approved changesets -- score normalized to 1 Maintained :green_circle: 5 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 License :green_circle: 9 license file detected CII-Best-Practices :green_circle: 5 badge detected: Passing Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Packaging :warning: -1 packaging workflow not detected Token-Permissions :warning: -1 No tokens found Dangerous-Workflow :warning: -1 no workflows found Binary-Artifacts :green_circle: 10 no binaries found in the repo Pinned-Dependencies :warning: -1 no dependencies found Signed-Releases :green_circle: 8 5 out of the last 5 releases have a total of 5 signed artifacts. Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Fuzzing :green_circle: 10 project is fuzzed Security-Policy :warning: 0 security policy file not detected SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0
pip/transformers	>= 4.40.2	:green_circle: 4.4	Details Check Score Reason Code-Review :green_circle: 9 Found 29/30 approved changesets -- score normalized to 9 Maintained :green_circle: 10 30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases :warning: -1 no releases found Security-Policy :green_circle: 10 security policy file detected Dangerous-Workflow :warning: 0 dangerous workflow patterns detected Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts :green_circle: 10 no binaries found in the repo SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0 Fuzzing :warning: 0 project is not fuzzed Packaging :green_circle: 10 packaging workflow detected Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities :warning: 0 464 existing vulnerabilities detected
pip/accelerate	>= 0.30.0	:green_circle: 6.2	Details Check Score Reason Code-Review :green_circle: 9 Found 28/30 approved changesets -- score normalized to 9 Maintained :green_circle: 10 30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing :warning: 0 project is not fuzzed Signed-Releases :warning: -1 no releases found Security-Policy :warning: 0 security policy file not detected Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Packaging :green_circle: 10 packaging workflow detected SAST :green_circle: 3 SAST tool is not run on all commits -- score normalized to 3
pip/cloud-data-connector	>= 1.0.3	Unknown	Unknown
pip/cryptography	>= 42.0.7	:green_circle: 8.5	Details Check Score Reason Code-Review :green_circle: 10 all changesets reviewed Maintained :green_circle: 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 9 license file detected Signed-Releases :warning: -1 no releases found Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Packaging :warning: -1 packaging workflow not detected Security-Policy :green_circle: 10 security policy file detected Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Token-Permissions :green_circle: 10 GitHub workflow tokens follow principle of least privilege Fuzzing :green_circle: 10 project is fuzzed SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0 Binary-Artifacts :green_circle: 10 no binaries found in the repo Pinned-Dependencies :green_circle: 4 dependency not pinned by hash detected -- score normalized to 4 Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected
pip/dataset-librarian	>= 1.0.4	Unknown	Unknown
pip/datasets	>= 2.19.1	:green_circle: 6	Details Check Score Reason Maintained :green_circle: 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 Code-Review :green_circle: 5 Found 16/30 approved changesets -- score normalized to 5 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases :warning: -1 no releases found Security-Policy :green_circle: 10 security policy file detected Packaging :warning: -1 packaging workflow not detected Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts :green_circle: 10 no binaries found in the repo Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Fuzzing :warning: 0 project is not fuzzed SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0
pip/evaluate	>= 0.4.2	:green_circle: 5.4	Details Check Score Reason Code-Review :green_circle: 9 Found 29/30 approved changesets -- score normalized to 9 Maintained :green_circle: 5 6 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Signed-Releases :warning: -1 no releases found Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Packaging :warning: -1 packaging workflow not detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Fuzzing :warning: 0 project is not fuzzed Security-Policy :warning: 0 security policy file not detected Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected SAST :green_circle: 3 SAST tool is not run on all commits -- score normalized to 3
pip/ninja	>= 1.11.1.1	Unknown	Unknown
pip/onnxruntime	>= 1.17.3	:green_circle: 6.8	Details Check Score Reason Code-Review :green_circle: 10 all last 30 commits are reviewed through GitHub Maintained :green_circle: 10 30 commit(s) out of 30 and 8 issue activity out of 30 found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no badge detected Vulnerabilities :green_circle: 10 no vulnerabilities detected Signed-Releases :warning: 0 0 out of 5 artifacts are signed or have provenance Branch-Protection :green_circle: 8 branch protection is not maximal on development and all release branches Security-Policy :green_circle: 10 security policy file detected Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Packaging :warning: -1 no published package detected License :green_circle: 10 license file detected Token-Permissions :warning: 0 non read-only tokens detected in GitHub workflows Dependency-Update-Tool :green_circle: 10 update tool detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Fuzzing :warning: 0 project is not fuzzed Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0
pip/py-cpuinfo	>= 9.0.0	:green_circle: 3.8	Details Check Score Reason Code-Review :green_circle: 4 Found 7/17 approved changesets -- score normalized to 4 Maintained :warning: 0 0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Signed-Releases :warning: -1 no releases found Branch-Protection :warning: 0 branch protection not enabled on development/release branches Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Packaging :warning: -1 packaging workflow not detected Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts :green_circle: 10 no binaries found in the repo Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Fuzzing :warning: 0 project is not fuzzed Security-Policy :warning: 0 security policy file not detected SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0
pip/python-dotenv	>= 1.0.1	:green_circle: 5.1	Details Check Score Reason Code-Review :green_circle: 5 Found 16/29 approved changesets -- score normalized to 5 Maintained :green_circle: 7 4 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 7 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Security-Policy :green_circle: 10 security policy file detected Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Packaging :warning: -1 packaging workflow not detected Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 Signed-Releases :warning: -1 no releases found Branch-Protection :warning: 0 branch protection not enabled on development/release branches Fuzzing :warning: 0 project is not fuzzed Vulnerabilities :green_circle: 9 1 existing vulnerabilities detected SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0
pip/requests	>= 2.31.0	:green_circle: 8.8	Details Check Score Reason Code-Review :green_circle: 10 all changesets reviewed Maintained :green_circle: 10 26 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases :warning: 0 Project has not signed or included provenance with any releases. Security-Policy :green_circle: 10 security policy file detected Packaging :warning: -1 packaging workflow not detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Fuzzing :green_circle: 10 project is fuzzed Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Token-Permissions :green_circle: 10 GitHub workflow tokens follow principle of least privilege SAST :green_circle: 10 SAST tool is run on all commits Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Pinned-Dependencies :green_circle: 10 all dependencies are pinned
pip/tensorflow-hub	>= 0.16.1	:green_circle: 5.8	Details Check Score Reason Code-Review :green_circle: 9 Found 29/30 approved changesets -- score normalized to 9 Maintained :green_circle: 10 6 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Pinned-Dependencies :warning: -1 no dependencies found Dangerous-Workflow :warning: -1 no workflows found Packaging :warning: -1 packaging workflow not detected SAST :warning: 0 no SAST tool detected License :warning: 0 license file not detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Token-Permissions :warning: -1 No tokens found Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Signed-Releases :warning: -1 no releases found Fuzzing :warning: 0 project is not fuzzed Security-Policy :warning: 0 security policy file not detected
pip/tf2onnx	>= 1.16.1	:green_circle: 5.8	Details Check Score Reason Maintained :green_circle: 10 30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10 Code-Review :green_circle: 10 all changesets reviewed CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases :warning: -1 no releases found Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Packaging :warning: -1 packaging workflow not detected Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0 Binary-Artifacts :green_circle: 9 binaries present in source code Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Security-Policy :warning: 0 security policy file not detected Fuzzing :warning: 0 project is not fuzzed Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0
pip/tqdm	>= 4.66.2	:green_circle: 5.9	Details Check Score Reason Code-Review :warning: 1 Found 1/8 approved changesets -- score normalized to 1 Maintained :green_circle: 5 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 License :green_circle: 9 license file detected CII-Best-Practices :green_circle: 5 badge detected: Passing Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Packaging :warning: -1 packaging workflow not detected Token-Permissions :warning: -1 No tokens found Dangerous-Workflow :warning: -1 no workflows found Binary-Artifacts :green_circle: 10 no binaries found in the repo Pinned-Dependencies :warning: -1 no dependencies found Signed-Releases :green_circle: 8 5 out of the last 5 releases have a total of 5 signed artifacts. Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected Fuzzing :green_circle: 10 project is fuzzed Security-Policy :warning: 0 security policy file not detected SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0
pip/transformers	>= 4.40.2	:green_circle: 4.4	Details Check Score Reason Code-Review :green_circle: 9 Found 29/30 approved changesets -- score normalized to 9 Maintained :green_circle: 10 30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases :warning: -1 no releases found Security-Policy :green_circle: 10 security policy file detected Dangerous-Workflow :warning: 0 dangerous workflow patterns detected Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts :green_circle: 10 no binaries found in the repo SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0 Fuzzing :warning: 0 project is not fuzzed Packaging :green_circle: 10 packaging workflow detected Pinned-Dependencies :warning: 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities :warning: 0 464 existing vulnerabilities detected

Scanned Manifest Files

preset/data-analytics/requirements.txt

• cloud-data-connector@1.0.3

preset/deep-learning/requirements.txt

• accelerate@>= 0.30.0
• cloud-data-connector@>= 1.0.3
• cryptography@>= 42.0.7
• dataset-librarian@>= 1.0.4
• datasets@>= 2.19.1
• evaluate@>= 0.4.2
• ninja@>= 1.11.1.1
• py-cpuinfo@>= 9.0.0
• python-dotenv@>= 1.0.1
• requests@>= 2.31.0
• tensorflow-hub@>= 0.16.1
• tqdm@>= 4.66.2
• transformers@>= 4.40.2

preset/inference-optimization/requirements.txt

• accelerate@>= 0.30.0
• cloud-data-connector@>= 1.0.3
• cryptography@>= 42.0.7
• dataset-librarian@>= 1.0.4
• datasets@>= 2.19.1
• evaluate@>= 0.4.2
• ninja@>= 1.11.1.1
• onnxruntime@>= 1.17.3
• py-cpuinfo@>= 9.0.0
• python-dotenv@>= 1.0.1
• requests@>= 2.31.0
• tensorflow-hub@>= 0.16.1
• tf2onnx@>= 1.16.1
• tqdm@>= 4.66.2
• transformers@>= 4.40.2

[github-advanced-security[bot]]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.