ingot-scan — CLI for the Ingot model scanner

Scan Hugging Face models for the failure modes that cause business problems — serialization risk, license/template/tokenizer drift vs. the claimed parent, and (where the deep battery has run) behavioral findings like glitch-token data corruption. Gate CI on the verdict.

npx ingot-scan scan Qwen/Qwen3.8-27B --fail-on warn

Setup

1. Sign in at the Ingot dashboard and create an API key.
2. Export it: export INGOT_API_KEY=ingot_…

Commands

ingot scan <owner/model>     # run a scan; exits 1 if the verdict hits --fail-on
ingot report <owner/model>   # read the published analysis — no API key needed

Options: --fail-on fail|warn (default fail), --json, --timeout <min>, --key <ingot_…>, --api-url <url> (or INGOT_URL).

Exit codes: 0 clean, 1 verdict gate hit, 2 error — so ingot scan drops straight into any CI system:

ingot scan my-org/my-finetune --fail-on warn || exit 1

GitHub Actions users: prefer the ready-made action, Ember-Sovereignty/ingot/ci@main.

The public database

Scans of public Hugging Face models publish their analysis to the model's free page at ingot.up.railway.app/models/<owner>/<model> — every scan grows the shared database. ingot report reads it without an API key.