Hugging Face Hub deprecates password-based Git authentication; migrate to tokens or SSH by Oct 1, 2023
Action Required
Automations and pipelines using password authentication against Hugging Face Hub must be updated to use a personal access token or SSH keys; otherwise Git operations will fail after the deadline.
AI Impact Summary
Hugging Face Hub is removing password-based Git authentication in favor of token-based or SSH authentication to improve security. This directly impacts automation, CI/CD pipelines, and local tooling that fetch or push repos via Git using passwords against huggingface.co. Migration steps include generating a personal access token per the security-tokens docs and updating remotes to use https://<user>:<token>@huggingface.co/<repo_path> or switching to SSH with git remote set-url origin git@hf.co:<repo_path>. Tokens are revocable and scoped; SSH keys reduce password exposure; plan credential rotation and test in a staging environment before deadline.
Affected Systems
- Date
- Date not specified
- Change type
- deprecation
- Severity
- high