{"resources":{"huggingface":{"id":"huggingface","name":"huggingface","fields":{"accessToken":{"name":"accessToken","type":"\u001bhuggingface.accessToken","title":"Hugging Face access token","desc":"API access token presented for authentication against the Hugging Face Hub. The token's role and fine-grained permission scopes determine which repositories and organization resources it can reach, making it a central subject for least-privilege audits. The role field distinguishes a broad read or write token from a fineGrained token whose access is constrained to specific entities through scopedPermissions.","provider":"go.mondoo.com/mql/providers/huggingface","is_implicit_resource":true},"dataset":{"name":"dataset","type":"\u001bhuggingface.dataset","title":"Hugging Face dataset repository","desc":"Dataset hosted on the Hugging Face Hub, covering its visibility (public or private), owning author, descriptive tags, and community signals such as download and like counts. Query it to audit which datasets an organization exposes and whether any that should be restricted are marked public.","provider":"go.mondoo.com/mql/providers/huggingface","is_implicit_resource":true},"datasets":{"name":"datasets","type":"\u0019\u001bhuggingface.dataset","title":"Datasets accessible to the authenticated user and their organizations","provider":"go.mondoo.com/mql/providers/huggingface"},"inferenceEndpoint":{"name":"inferenceEndpoint","type":"\u001bhuggingface.inferenceEndpoint","title":"Hugging Face inference endpoint","desc":"Managed deployment that serves a Hugging Face model behind a dedicated URL. Reports the model it hosts, the ML framework it runs on, its operational status, and the reachable endpoint URL, so you can audit which models are exposed, whether a deployment is healthy or scaled to zero, and where inference traffic is served from.","provider":"go.mondoo.com/mql/providers/huggingface","is_implicit_resource":true},"inferenceEndpoints":{"name":"inferenceEndpoints","type":"\u0019\u001bhuggingface.inferenceEndpoint","title":"Inference endpoints for the authenticated user","provider":"go.mondoo.com/mql/providers/huggingface"},"model":{"name":"model","type":"\u001bhuggingface.model","title":"Hugging Face model repository","desc":"Model hosted on the Hugging Face Hub, covering its visibility, access gating, license, pipeline tag, library, and download/like counts. `cardData` and `config` expose the deep metadata needed for AI Bill of Materials (AIBOM) generation.","provider":"go.mondoo.com/mql/providers/huggingface","is_implicit_resource":true},"models":{"name":"models","type":"\u0019\u001bhuggingface.model","title":"Models accessible to the authenticated user and their organizations","provider":"go.mondoo.com/mql/providers/huggingface"},"organization":{"name":"organization","type":"\u001bhuggingface.organization","title":"Hugging Face organization","desc":"Team or company account on the Hugging Face Hub, exposing its enterprise status via isEnterprise, billing capability via canPay, and the authenticated user's role within it via roleInOrg. Useful for confirming that model and dataset repositories are owned by a governed enterprise organization rather than an unmanaged account.","provider":"go.mondoo.com/mql/providers/huggingface","is_implicit_resource":true},"organizations":{"name":"organizations","type":"\u0019\u001bhuggingface.organization","title":"Organizations the authenticated user belongs to","provider":"go.mondoo.com/mql/providers/huggingface"},"space":{"name":"space","type":"\u001bhuggingface.space","title":"Hugging Face Space application","desc":"Hosted app (a Space) published to the Hugging Face Hub, covering its visibility, description, tags, author, and popularity. Audit these to surface which apps an organization exposes and whether any that should stay internal are public. The `private` field reports whether the Space is restricted to its owner or openly accessible.","provider":"go.mondoo.com/mql/providers/huggingface","is_implicit_resource":true},"spaces":{"name":"spaces","type":"\u0019\u001bhuggingface.space","title":"Spaces accessible to the authenticated user and their organizations","provider":"go.mondoo.com/mql/providers/huggingface"},"user":{"name":"user","type":"\u001bhuggingface.user","title":"Authenticated user","provider":"go.mondoo.com/mql/providers/huggingface"},"webhook":{"name":"webhook","type":"\u001bhuggingface.webhook","title":"Hugging Face webhook","desc":"Configured webhook that delivers HTTP callbacks to an external endpoint when watched repositories or discussions change. Auditing webhooks surfaces where repository events are sent, whether a webhook is currently disabled, and which repositories or namespaces it monitors.","provider":"go.mondoo.com/mql/providers/huggingface","is_implicit_resource":true},"webhooks":{"name":"webhooks","type":"\u0019\u001bhuggingface.webhook","title":"Webhooks configured for the authenticated user","provider":"go.mondoo.com/mql/providers/huggingface"}},"title":"Hugging Face","desc":"Hugging Face account reachable through the configured API token, and the entry point for auditing everything that token can access: the authenticated user, organization memberships, models, datasets, Spaces, webhooks, and inference endpoints. Query it to inventory hosted AI assets and to understand the reach of the credential in use.","min_provider_version":"13.0.0","defaults":"user.name","provider":"go.mondoo.com/mql/providers/huggingface"},"huggingface.accessToken":{"id":"huggingface.accessToken","name":"huggingface.accessToken","fields":{"canReadGatedRepos":{"name":"canReadGatedRepos","type":"\u0004","is_mandatory":true,"title":"Whether the token can download from gated (access-restricted) repositories","provider":"go.mondoo.com/mql/providers/huggingface"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"globalPermissions":{"name":"globalPermissions","type":"\u0019\u0007","is_mandatory":true,"title":"Global permissions granted to the token","provider":"go.mondoo.com/mql/providers/huggingface"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"Token role","desc":"One of read, write, or fineGrained.","provider":"go.mondoo.com/mql/providers/huggingface"},"scope":{"name":"scope","type":"\u001bhuggingface.accessToken.scope","title":"Scoped permission grant on a Hugging Face access token","desc":"Single scoped permission entry that grants a fine-grained token specific capabilities on one entity (a user or organization). The `entityName` field identifies the target, and `permissions` lists the granted capabilities such as `repo.content.read` or `org.read`.","is_private":true,"provider":"go.mondoo.com/mql/providers/huggingface","is_implicit_resource":true},"scopedPermissions":{"name":"scopedPermissions","type":"\u0019\u001bhuggingface.accessToken.scope","is_mandatory":true,"title":"Scoped permissions granted to specific entities","provider":"go.mondoo.com/mql/providers/huggingface"}},"title":"Hugging Face access token","desc":"API access token presented for authentication against the Hugging Face Hub. The token's role and fine-grained permission scopes determine which repositories and organization resources it can reach, making it a central subject for least-privilege audits. The role field distinguishes a broad read or write token from a fineGrained token whose access is constrained to specific entities through scopedPermissions.","min_provider_version":"13.0.0","defaults":"displayName role","provider":"go.mondoo.com/mql/providers/huggingface"},"huggingface.accessToken.scope":{"id":"huggingface.accessToken.scope","name":"huggingface.accessToken.scope","fields":{"entityId":{"name":"entityId","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"entityName":{"name":"entityName","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"entityType":{"name":"entityType","type":"\u0007","is_mandatory":true,"title":"Type of the target entity, such as user or org","provider":"go.mondoo.com/mql/providers/huggingface"},"permissions":{"name":"permissions","type":"\u0019\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"}},"title":"Scoped permission grant on a Hugging Face access token","desc":"Single scoped permission entry that grants a fine-grained token specific capabilities on one entity (a user or organization). The `entityName` field identifies the target, and `permissions` lists the granted capabilities such as `repo.content.read` or `org.read`.","private":true,"min_provider_version":"13.0.0","defaults":"entityName","provider":"go.mondoo.com/mql/providers/huggingface"},"huggingface.dataset":{"id":"huggingface.dataset","name":"huggingface.dataset","fields":{"author":{"name":"author","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"downloads":{"name":"downloads","type":"\u0005","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"likes":{"name":"likes","type":"\u0005","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"private":{"name":"private","type":"\u0004","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"}},"title":"Hugging Face dataset repository","desc":"Dataset hosted on the Hugging Face Hub, covering its visibility (public or private), owning author, descriptive tags, and community signals such as download and like counts. Query it to audit which datasets an organization exposes and whether any that should be restricted are marked public.","min_provider_version":"13.0.0","defaults":"id","provider":"go.mondoo.com/mql/providers/huggingface"},"huggingface.inferenceEndpoint":{"id":"huggingface.inferenceEndpoint","name":"huggingface.inferenceEndpoint","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"endpointUrl":{"name":"endpointUrl","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"framework":{"name":"framework","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Model ID deployed on this endpoint","provider":"go.mondoo.com/mql/providers/huggingface"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Operational status","desc":"For example running, pending, failed, or scaledToZero.","provider":"go.mondoo.com/mql/providers/huggingface"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"}},"title":"Hugging Face inference endpoint","desc":"Managed deployment that serves a Hugging Face model behind a dedicated URL. Reports the model it hosts, the ML framework it runs on, its operational status, and the reachable endpoint URL, so you can audit which models are exposed, whether a deployment is healthy or scaled to zero, and where inference traffic is served from.","min_provider_version":"13.0.0","defaults":"name status","provider":"go.mondoo.com/mql/providers/huggingface"},"huggingface.model":{"id":"huggingface.model","name":"huggingface.model","fields":{"author":{"name":"author","type":"\u0007","provider":"go.mondoo.com/mql/providers/huggingface"},"cardData":{"name":"cardData","type":"\n","title":"Parsed YAML frontmatter from the model card (datasets, language, metrics, base_model, etc.)","provider":"go.mondoo.com/mql/providers/huggingface"},"config":{"name":"config","type":"\n","title":"Parsed config.json (architecture, model_type, hidden_size, vocab_size, etc.)","provider":"go.mondoo.com/mql/providers/huggingface"},"createdAt":{"name":"createdAt","type":"\t","provider":"go.mondoo.com/mql/providers/huggingface"},"disabled":{"name":"disabled","type":"\u0004","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"downloads":{"name":"downloads","type":"\u0005","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"gated":{"name":"gated","type":"\u0004","is_mandatory":true,"title":"Whether the model requires access approval","provider":"go.mondoo.com/mql/providers/huggingface"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Full model ID (e.g., \"meta-llama/Llama-3.1-8B\")","provider":"go.mondoo.com/mql/providers/huggingface"},"lastModified":{"name":"lastModified","type":"\t","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"libraryName":{"name":"libraryName","type":"\u0007","is_mandatory":true,"title":"ML framework library name","desc":"For example transformers, diffusers, or sentence-transformers.","provider":"go.mondoo.com/mql/providers/huggingface"},"license":{"name":"license","type":"\u0007","provider":"go.mondoo.com/mql/providers/huggingface"},"likes":{"name":"likes","type":"\u0005","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"modelCard":{"name":"modelCard","type":"\u0007","title":"Raw model card content (README.md)","provider":"go.mondoo.com/mql/providers/huggingface"},"modelId":{"name":"modelId","type":"\u0007","is_mandatory":true,"title":"Internal model identifier","provider":"go.mondoo.com/mql/providers/huggingface"},"pipelineTag":{"name":"pipelineTag","type":"\u0007","is_mandatory":true,"title":"ML pipeline tag","desc":"Identifies the model's primary task such as text-generation, text-to-image, or feature-extraction.","provider":"go.mondoo.com/mql/providers/huggingface"},"private":{"name":"private","type":"\u0004","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"sha":{"name":"sha","type":"\u0007","title":"Git SHA of the current revision","provider":"go.mondoo.com/mql/providers/huggingface"},"siblings":{"name":"siblings","type":"\u0019\n","title":"Repository file listing","desc":"Each entry describes one file in the model repository with a single `rfilename` key holding the file path relative to the repository root.","provider":"go.mondoo.com/mql/providers/huggingface"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"}},"title":"Hugging Face model repository","desc":"Model hosted on the Hugging Face Hub, covering its visibility, access gating, license, pipeline tag, library, and download/like counts. `cardData` and `config` expose the deep metadata needed for AI Bill of Materials (AIBOM) generation.","min_provider_version":"13.0.0","defaults":"id author","provider":"go.mondoo.com/mql/providers/huggingface"},"huggingface.organization":{"id":"huggingface.organization","name":"huggingface.organization","fields":{"avatarUrl":{"name":"avatarUrl","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"canPay":{"name":"canPay","type":"\u0004","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"email":{"name":"email","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"fullname":{"name":"fullname","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"isEnterprise":{"name":"isEnterprise","type":"\u0004","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"roleInOrg":{"name":"roleInOrg","type":"\u0007","is_mandatory":true,"title":"Authenticated user's role in this organization","provider":"go.mondoo.com/mql/providers/huggingface"}},"title":"Hugging Face organization","desc":"Team or company account on the Hugging Face Hub, exposing its enterprise status via isEnterprise, billing capability via canPay, and the authenticated user's role within it via roleInOrg. Useful for confirming that model and dataset repositories are owned by a governed enterprise organization rather than an unmanaged account.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/providers/huggingface"},"huggingface.space":{"id":"huggingface.space","name":"huggingface.space","fields":{"author":{"name":"author","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"likes":{"name":"likes","type":"\u0005","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"private":{"name":"private","type":"\u0004","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"}},"title":"Hugging Face Space application","desc":"Hosted app (a Space) published to the Hugging Face Hub, covering its visibility, description, tags, author, and popularity. Audit these to surface which apps an organization exposes and whether any that should stay internal are public. The `private` field reports whether the Space is restricted to its owner or openly accessible.","min_provider_version":"13.0.0","defaults":"id","provider":"go.mondoo.com/mql/providers/huggingface"},"huggingface.user":{"id":"huggingface.user","name":"huggingface.user","fields":{"accessToken":{"name":"accessToken","type":"\u001bhuggingface.accessToken","title":"Access token used for authentication","provider":"go.mondoo.com/mql/providers/huggingface"},"avatarUrl":{"name":"avatarUrl","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"fullname":{"name":"fullname","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"isPro":{"name":"isPro","type":"\u0004","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Account type reported by the whoami API (user)","provider":"go.mondoo.com/mql/providers/huggingface"}},"title":"Hugging Face user account","desc":"Account identity behind the configured API token: the login name, display name, and whether the account carries a Pro subscription. The accessToken field exposes the role and fine-grained permission scopes of the token used to authenticate, which govern what the account can read and write across models, datasets, and spaces.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/providers/huggingface"},"huggingface.webhook":{"id":"huggingface.webhook","name":"huggingface.webhook","fields":{"disabled":{"name":"disabled","type":"\u0004","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"domains":{"name":"domains","type":"\u0019\u0007","is_mandatory":true,"title":"Event domains this webhook subscribes to","desc":"Each entry is one of \"repo\" (repository lifecycle events such as new commits or config changes) or \"discussion\" (discussion and pull request activity).","provider":"go.mondoo.com/mql/providers/huggingface"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/mql/providers/huggingface"},"watched":{"name":"watched","type":"\u0019\n","is_mandatory":true,"title":"Repositories and namespaces this webhook watches","desc":"Each entry has a `type` (one of \"dataset\", \"model\", \"space\", \"org\", or \"user\") and a `name` (the repository ID or namespace, for example \"openai/whisper\").","provider":"go.mondoo.com/mql/providers/huggingface"},"webhookUrl":{"name":"webhookUrl","type":"\u0007","is_mandatory":true,"title":"Target URL that receives webhook events","provider":"go.mondoo.com/mql/providers/huggingface"}},"title":"Hugging Face webhook","desc":"Configured webhook that delivers HTTP callbacks to an external endpoint when watched repositories or discussions change. Auditing webhooks surfaces where repository events are sent, whether a webhook is currently disabled, and which repositories or namespaces it monitors.","min_provider_version":"13.0.0","defaults":"id webhookUrl","provider":"go.mondoo.com/mql/providers/huggingface"}}}