---
id: 1748
title: "Secure your machine learning with Semgrep"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2022/10/03/semgrep-maching-learning-static-analysis/"
published_at: "2022-10-03T13:00:53Z"
tags: ["ai-security", "supply-chain", "machine-learning", "static-analysis", "semgrep", "pytorch", "pickle-deserialization"]
phying_url: "https://phying.com/item/1748"
lang: en
---

# Secure your machine learning with Semgrep

## Summary

Trail of Bits added 11 Semgrep rules for machine learning library misuse, flagging unsafe pickle deserialization in PyTorch Distributed and other insecure patterns in ML pipelines.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2022-10-03T13:00:53Z
- **Original:** https://blog.trailofbits.com/2022/10/03/semgrep-maching-learning-static-analysis/
- **Phying News:** https://phying.com/item/1748