Close Open Privacy Scan

link https://github.com/streamlit/streamlit
bolt Snapshot: commit 6372ddc
science engine v3
schedule 2026-07-08T17:07:38.497417+00:00

verified_user Application data leak confirmed

High-confidence data exfiltration identified in application code.

App Privacy Score

22 /100
High privacy risk — application leak confirmed

High risk · 933 finding(s)

Dependency score: 37 (High risk)

bar_chart Score Breakdown

pii_flow −60
egress −15
env_fs −3

list Scan Summary

6 high 0 medium 927 low
First-party packages: 2
Dependency packages: 22
Ecosystem: python

swap_horiz Confirmed data exfiltration in application code

External domains: data.streamlit.iodocs.streamlit.io

high pyarrow User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:60 → pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:62
high pyarrow User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:74 → pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:76
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/create_release.py:29 → repo/scripts/create_release.py:38
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/create_release.py:28 → repo/scripts/create_release.py:47
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/create_release.py:28 → repo/scripts/create_release.py:56
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/slack_notifications.py:64 → repo/scripts/slack_notifications.py:252

</> First-Party Code

first-party (python)

python first-party
high pii_flow production #6cca02fe8138157c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/create_release.py:38 · flow /tmp/closeopen-ortqh_mo/repo/scripts/create_release.py:29 → /tmp/closeopen-ortqh_mo/repo/scripts/create_release.py:38 
    response = requests.get(f"{url}/latest", headers=header)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8c158f4bc76e4360 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/create_release.py:47 · flow /tmp/closeopen-ortqh_mo/repo/scripts/create_release.py:28 → /tmp/closeopen-ortqh_mo/repo/scripts/create_release.py:47 
    response = requests.post(f"{url}/generate-notes", json=payload, headers=header)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #cd037721bf978652 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/create_release.py:56 · flow /tmp/closeopen-ortqh_mo/repo/scripts/create_release.py:28 → /tmp/closeopen-ortqh_mo/repo/scripts/create_release.py:56 
    response = requests.post(url, json=payload, headers=header)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #37ad16db6e1b05ed — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/slack_notifications.py:252 · flow /tmp/closeopen-ortqh_mo/repo/scripts/slack_notifications.py:64 → /tmp/closeopen-ortqh_mo/repo/scripts/slack_notifications.py:252 
        response = requests.post(webhook, json=payload)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 595 low-confidence finding(s)
low env_fs production #1d61e56b26360b7b — Environment-variable access.
repo/e2e_playwright/config_arrow_truncation_test.py:25 
    os.environ["STREAMLIT_SERVER_ENABLE_ARROW_TRUNCATION"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51d86a1d02b32d40 — Environment-variable access.
repo/e2e_playwright/config_arrow_truncation_test.py:26 
    os.environ["STREAMLIT_SERVER_MAX_MESSAGE_SIZE"] = "3"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63fb624ffb10050e — Environment-variable access.
repo/e2e_playwright/config_arrow_truncation_test.py:28 
    del os.environ["STREAMLIT_SERVER_ENABLE_ARROW_TRUNCATION"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8196fc8a4155be1a — Environment-variable access.
repo/e2e_playwright/config_arrow_truncation_test.py:29 
    del os.environ["STREAMLIT_SERVER_MAX_MESSAGE_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa3000d740cced08 — Environment-variable access.
repo/e2e_playwright/conftest.py:229 
    env_raw_value = os.getenv(env_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7eee534eb9227d0e — Environment-variable access.
repo/e2e_playwright/conftest.py:354 
            env={**os.environ.copy(), **self.env},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #122d5564898c8b85 — Environment-variable access.
repo/e2e_playwright/conftest.py:1311 
        pytestconfig.getoption("workerinput", None) or os.getenv("PYTEST_XDIST_WORKER"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1db1e9a91d1a34a — Environment-variable access.
repo/e2e_playwright/conftest.py:1779 
    env = {**os.environ.copy(), **(extra_env or {})}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37807a9f137c5f04 — Filesystem access.
repo/e2e_playwright/hostframe_app_test.py:39 
HOSTFRAME_TEST_HTML: Final[str] = (STATIC_DIR / "hostframe.html").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cd54862c86d7095 — Filesystem access.
repo/e2e_playwright/iframe_resizer_test.py:36 
IFRAME_RESIZER_SCRIPT: Final[str] = (STATIC_DIR / "iframerResizer.min.js").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47b83d9f18173a5b — Environment-variable access.
repo/e2e_playwright/load_testing/conftest.py:94 
                "runner": os.environ.get("GITHUB_RUNNER", "local"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4b644852efeb092 — Filesystem access.
repo/e2e_playwright/load_testing/conftest.py:102 
        with open(filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b47c92fca5bfd03d — Environment-variable access.
repo/e2e_playwright/load_testing/conftest.py:202 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3588a7e10ca9a4a0 — Filesystem access.
repo/e2e_playwright/load_testing/generate_report.py:46 
        with open(combined_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7eeb9dbf39d930c7 — Filesystem access.
repo/e2e_playwright/load_testing/generate_report.py:55 
        with open(filepath, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98e176d240c728f5 — Filesystem access.
repo/e2e_playwright/load_testing/generate_report.py:76 
            with open(first_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36c831c79a31e1a2 — Filesystem access.
repo/e2e_playwright/load_testing/generate_report.py:248 
    with open(args.output, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e51efd6d7bba0065 — Environment-variable access.
repo/e2e_playwright/multipage_apps/mpa_configure_sidebar_test.py:30 
    os.environ["STREAMLIT_CLIENT_SHOW_SIDEBAR_NAVIGATION"] = "False"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b5ba5881c3b1bc4 — Environment-variable access.
repo/e2e_playwright/multipage_apps/mpa_configure_sidebar_test.py:32 
    del os.environ["STREAMLIT_CLIENT_SHOW_SIDEBAR_NAVIGATION"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6fb60cb14769ef0 — Environment-variable access.
repo/e2e_playwright/multipage_apps/mpa_v2_custom_theme_test.py:29 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "#BB1010"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1d739bd2120d7f8 — Environment-variable access.
repo/e2e_playwright/multipage_apps/mpa_v2_custom_theme_test.py:30 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#0E0E0E"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0df92bc6fda6c383 — Environment-variable access.
repo/e2e_playwright/multipage_apps/mpa_v2_custom_theme_test.py:32 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3a2ebb4ede6ab1b — Environment-variable access.
repo/e2e_playwright/multipage_apps/mpa_v2_custom_theme_test.py:33 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8a3e59adefcb405 — Filesystem access.
repo/e2e_playwright/shared/performance.py:254 
        with open(
            os.path.join(performance_results_dir, f"{timestamp}_{test_name}.json"),
            "w",
            encoding="utf-8",
        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5d23e7795a1e651 — Environment-variable access.
repo/e2e_playwright/shared/stats_reporter.py:128 
    return os.getenv("PYTEST_XDIST_WORKER", "primary")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e456c9aeb458269 — Environment-variable access.
repo/e2e_playwright/shared/stats_reporter.py:416 
            "ci": os.getenv("CI", "false").lower() == "true",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44feaf05b1e58de9 — Environment-variable access.
repo/e2e_playwright/shared/stats_reporter.py:417 
            "github_run_id": os.getenv("GITHUB_RUN_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db621389d4fa6958 — Environment-variable access.
repo/e2e_playwright/shared/stats_reporter.py:418 
            "github_sha": os.getenv("GITHUB_SHA"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b1d7bfd237aea7a — Environment-variable access.
repo/e2e_playwright/shared/stats_reporter.py:419 
            "github_ref": os.getenv("GITHUB_REF"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4842213b91458a4 — Filesystem access.
repo/e2e_playwright/shared/stats_reporter.py:569 
            with open(self.output_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63e973e4d5b7e976 — Filesystem access.
repo/e2e_playwright/skills_nudge_test.py:65 
    (streamlit_dir / "credentials.toml").write_text('[general]\nemail = ""\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e63c75bd54c46f9c — Environment-variable access.
repo/e2e_playwright/st_app_advanced_script.py:90 
st.write(f"API Key from environ: {os.environ.get('api_key', 'NOT SET')}")  # noqa: SIM112

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #ef84fa3089394768 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/e2e_playwright/st_audio.py:28 
file = requests.get(url1).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #522ca2a71c5ca60e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/e2e_playwright/st_cache_data.py:71 
    file = requests.get(url).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #820f3e45faeb49fe — Hardcoded external endpoint. Review what data is sent to this destination.
repo/e2e_playwright/st_cache_data.py:78 
    file = requests.get(url).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d0d83b25098efb59 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:39 
    os.environ["STREAMLIT_THEME_BASE"] = "dark"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a2da4615a8f4116 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:40 
    os.environ["STREAMLIT_THEME_RED_COLOR"] = "#ffb3b3"  # Pale pink-red

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f14fe8e2e1f4c566 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:41 
    os.environ["STREAMLIT_THEME_ORANGE_COLOR"] = "#ffd9b3"  # Pale peach

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aba844b23193cd1f — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:42 
    os.environ["STREAMLIT_THEME_YELLOW_COLOR"] = "#ffffb3"  # Pale cream

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cfc6449337096dd — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:43 
    os.environ["STREAMLIT_THEME_GREEN_COLOR"] = "#b3ffb3"  # Pale mint

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06dacf73e0e576f2 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:44 
    os.environ["STREAMLIT_THEME_BLUE_COLOR"] = "#b3d9ff"  # Pale sky blue

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4e2462d96549046 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:45 
    os.environ["STREAMLIT_THEME_VIOLET_COLOR"] = "#d9b3ff"  # Pale lavender

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f72b420bd05d920 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:46 
    os.environ["STREAMLIT_THEME_GRAY_COLOR"] = "#d9d9d9"  # Light silver

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #960c571ba4269d9c — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:47 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#ffb3d9"  # Pale pink

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0579fdc8c65cd4a7 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:49 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd2c4cad5285fdb4 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:50 
    del os.environ["STREAMLIT_THEME_RED_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6318b8598589e3cd — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:51 
    del os.environ["STREAMLIT_THEME_ORANGE_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2502091327ad333e — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:52 
    del os.environ["STREAMLIT_THEME_YELLOW_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1875beaaa081482a — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:53 
    del os.environ["STREAMLIT_THEME_GREEN_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #204e4f8a92f7ccc5 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:54 
    del os.environ["STREAMLIT_THEME_BLUE_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fbdebde8579665b — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:55 
    del os.environ["STREAMLIT_THEME_VIOLET_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9fbf4b51d6febb0 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:56 
    del os.environ["STREAMLIT_THEME_GRAY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8433ef79db6f6b3 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:57 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #696492ee2b9ec779 — Filesystem access.
repo/e2e_playwright/st_dataframe_config.py:38 
    data = file_path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92b12a239e9a5aec — Filesystem access.
repo/e2e_playwright/st_dataframe_interactions_test.py:428 
    with open(download_path, encoding="UTF-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #053fbc33a8bca1db — Filesystem access.
repo/e2e_playwright/st_download_button.py:48 
with open(CAT_IMAGE, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cdeb91d12080686f — Filesystem access.
repo/e2e_playwright/st_download_button_deferred_test.py:33 
    content = download.path().read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #437b5b135e487e14 — Filesystem access.
repo/e2e_playwright/st_download_button_deferred_test.py:53 
    content = download.path().read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55ff5969e6dc1512 — Filesystem access.
repo/e2e_playwright/st_download_button_deferred_test.py:72 
    content = download.path().read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #feeb94913708f124 — Filesystem access.
repo/e2e_playwright/st_download_button_deferred_test.py:103 
    assert download.path().read_text() == "No rerun content"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cf171c679bae970 — Filesystem access.
repo/e2e_playwright/st_download_button_deferred_test.py:122 
    assert download.path().read_text() == "This is regular string data"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2968942cc04c9eb8 — Filesystem access.
repo/e2e_playwright/st_download_button_test.py:152 
    file_text = download.path().read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #992449b9e4b0f77c — Filesystem access.
repo/e2e_playwright/st_download_button_test.py:237 
    file_text = download.path().read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39ffffe00f787478 — Filesystem access.
repo/e2e_playwright/st_download_button_test.py:324 
    assert download.path().read_text() == "Updated data"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #937e288fca150cee — Environment-variable access.
repo/e2e_playwright/st_main_layout.py:20 
test_mode = os.environ.get("STREAMLIT_SIDEBAR_TEST_MODE", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d1f0ea010da7b4e — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:31 
    os.environ["STREAMLIT_THEME_RED_COLOR"] = "#750000"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33b5f5377690f89c — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:32 
    os.environ["STREAMLIT_THEME_GREEN_COLOR"] = "#008000"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d24f63add68d0df — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:33 
    os.environ["STREAMLIT_THEME_GRAY_COLOR"] = "#525252"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc9396dc43ddb490 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:36 
    os.environ["STREAMLIT_THEME_RED_BACKGROUND_COLOR"] = "#ffc7c7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fd6d8c05caa6c39 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:37 
    os.environ["STREAMLIT_THEME_ORANGE_BACKGROUND_COLOR"] = "#fdae44"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05d02208f2762e61 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:38 
    os.environ["STREAMLIT_THEME_YELLOW_BACKGROUND_COLOR"] = "#fde992"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c87c2c6eb198fe7 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:39 
    os.environ["STREAMLIT_THEME_BLUE_BACKGROUND_COLOR"] = "#6495ED"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b5a47c9c362b797 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:40 
    os.environ["STREAMLIT_THEME_GREEN_BACKGROUND_COLOR"] = "#9dc183"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07d3c6da006f8a1d — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:41 
    os.environ["STREAMLIT_THEME_VIOLET_BACKGROUND_COLOR"] = "#9E7BB5"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d79ab25dde697d14 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:42 
    os.environ["STREAMLIT_THEME_GRAY_BACKGROUND_COLOR"] = "#A7A6BA"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25fdeb94e213901b — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:43 
    os.environ["STREAMLIT_THEME_SIDEBAR_RED_BACKGROUND_COLOR"] = "#9d2933"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1e3a7305c6ebea6 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:44 
    os.environ["STREAMLIT_THEME_SIDEBAR_ORANGE_BACKGROUND_COLOR"] = "#fed8b1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc5cc49c6a9a9650 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:45 
    os.environ["STREAMLIT_THEME_SIDEBAR_YELLOW_BACKGROUND_COLOR"] = "#ffffe0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5436e4acc1c049b1 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:46 
    os.environ["STREAMLIT_THEME_SIDEBAR_BLUE_BACKGROUND_COLOR"] = "#87afc7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3364c0596086923 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:47 
    os.environ["STREAMLIT_THEME_SIDEBAR_GREEN_BACKGROUND_COLOR"] = "#d8e4bc"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #137114cf72a4d35a — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:48 
    os.environ["STREAMLIT_THEME_SIDEBAR_VIOLET_BACKGROUND_COLOR"] = "#D8BFD8"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #541decf63050a4ea — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:49 
    os.environ["STREAMLIT_THEME_SIDEBAR_GRAY_BACKGROUND_COLOR"] = "#DCDCDC"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c35e6df079e91a3 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:51 
    del os.environ["STREAMLIT_THEME_RED_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76fb5286220aacd2 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:52 
    del os.environ["STREAMLIT_THEME_GREEN_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b36717d1720c9a7f — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:53 
    del os.environ["STREAMLIT_THEME_GRAY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7e457ffecd9a1ae — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:54 
    del os.environ["STREAMLIT_THEME_RED_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06c2ac08d09244af — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:55 
    del os.environ["STREAMLIT_THEME_ORANGE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fc01ec97f8c0523 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:56 
    del os.environ["STREAMLIT_THEME_YELLOW_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff317966400e4dfb — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:57 
    del os.environ["STREAMLIT_THEME_BLUE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7af3efde67f1b432 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:58 
    del os.environ["STREAMLIT_THEME_GREEN_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ed55e778564450c — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:59 
    del os.environ["STREAMLIT_THEME_VIOLET_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d12678363cb09208 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:60 
    del os.environ["STREAMLIT_THEME_GRAY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74e94924917f886e — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:61 
    del os.environ["STREAMLIT_THEME_SIDEBAR_RED_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9410f1c0d4e24c06 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:62 
    del os.environ["STREAMLIT_THEME_SIDEBAR_ORANGE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #104391643b3288ea — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:63 
    del os.environ["STREAMLIT_THEME_SIDEBAR_YELLOW_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35eedd1d1696b448 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:64 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BLUE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #729edb8feaad3fc4 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:65 
    del os.environ["STREAMLIT_THEME_SIDEBAR_GREEN_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9eb260d6af55bedc — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:66 
    del os.environ["STREAMLIT_THEME_SIDEBAR_VIOLET_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52b2ad8c96bea3b0 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:67 
    del os.environ["STREAMLIT_THEME_SIDEBAR_GRAY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8f9a5f78f2b528f — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:52 
    os.environ["STREAMLIT_THEME_BASE"] = "dark"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8fadf0e414845ea — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:53 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be785c3345a8907f — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:54 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#004cbe"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39a4a8176c19c0c9 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:55 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "#bdc4d5"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d23d2c0a1d3f0fd5 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:58 
    os.environ["STREAMLIT_THEME_DARK_BACKGROUND_COLOR"] = "#191e24"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca6a0a1debf975bc — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:59 
    os.environ["STREAMLIT_THEME_DARK_SECONDARY_BACKGROUND_COLOR"] = "#0f161e"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ec5b014a9b8e741 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:60 
    os.environ["STREAMLIT_THEME_DARK_BORDER_COLOR"] = "#293246"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ab67dbbca21d2f8 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:61 
    os.environ["STREAMLIT_THEME_DARK_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02e10628a225fa40 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:65 
    os.environ["STREAMLIT_THEME_DARK_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #620474dfe3556e14 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:69 
    os.environ["STREAMLIT_THEME_DARK_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84983bb6a6cb97cf — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:74 
    os.environ["STREAMLIT_THEME_SIDEBAR_TEXT_COLOR"] = "#091c36"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c750795a135610e — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:75 
    os.environ["STREAMLIT_THEME_SIDEBAR_BACKGROUND_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3086ca649619c628 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:78 
    os.environ["STREAMLIT_THEME_SIDEBAR_SECONDARY_BACKGROUND_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b59d5d2bea9429d2 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:81 
    os.environ["STREAMLIT_THEME_SIDEBAR_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e4c1b1ab91bf881 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:85 
    os.environ["STREAMLIT_THEME_SIDEBAR_DATAFRAME_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0cd9254d0c69920 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:90 
    os.environ["STREAMLIT_THEME_DARK_SIDEBAR_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43be9d311ce3a76d — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:93 
    os.environ["STREAMLIT_THEME_DARK_SIDEBAR_LINK_COLOR"] = "#CD1C18"  # chili red

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #581179a66d695d37 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:95 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f37b2d5176fbad7 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:96 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58c678fb40c24ac2 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:97 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c805fde130df2c0d — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:98 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d6c5a2ef97cbae6 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:99 
    del os.environ["STREAMLIT_THEME_DARK_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a12ce17618c5a3e0 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:100 
    del os.environ["STREAMLIT_THEME_DARK_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85286721ab9c9781 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:101 
    del os.environ["STREAMLIT_THEME_DARK_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2051e1ed080e66a2 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:102 
    del os.environ["STREAMLIT_THEME_DARK_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3023321483a41ad — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:103 
    del os.environ["STREAMLIT_THEME_DARK_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d7971679a7e16bb — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:104 
    del os.environ["STREAMLIT_THEME_DARK_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95a0823ed56a03c3 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:105 
    del os.environ["STREAMLIT_THEME_SIDEBAR_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f476bb07b907d711 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:106 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0cca06d43610b042 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:107 
    del os.environ["STREAMLIT_THEME_SIDEBAR_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f965a7ed927a331 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:108 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bbfd0ddb5e707582 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:109 
    del os.environ["STREAMLIT_THEME_SIDEBAR_DATAFRAME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52977a56416d58ae — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:110 
    del os.environ["STREAMLIT_THEME_DARK_SIDEBAR_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c69f52ccc5dacfb — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:111 
    del os.environ["STREAMLIT_THEME_DARK_SIDEBAR_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #554c4f2addbefdec — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:53 
    os.environ["STREAMLIT_THEME_BASE"] = "dark"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9358566f1c80acbb — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:54 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#004cbe"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91a27f61697b91a9 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:55 
    os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"] = "#191e24"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #caa9e498bf597a07 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:56 
    os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"] = "#0f161e"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aaefabc8e8e825c1 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:57 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "#bdc4d5"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f1728d602093be8 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:58 
    os.environ["STREAMLIT_THEME_BORDER_COLOR"] = "#293246"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ea58a5b8b2ab01f — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:59 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b832ddd76bdf6654 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:60 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #145e233e7763aa09 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:64 
    os.environ["STREAMLIT_THEME_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f7c4b5f5f96f1ba — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:68 
    os.environ["STREAMLIT_THEME_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fe16f8e28b12696 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:73 
    os.environ["STREAMLIT_THEME_DARK_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0590d29fc341cc3 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:76 
    os.environ["STREAMLIT_THEME_DARK_CODE_FONT_SIZE"] = "13px"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21198bb123b9924c — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:77 
    os.environ["STREAMLIT_THEME_DARK_CODE_TEXT_COLOR"] = "#d4c6f5"  # lavender

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02f7164a1113dc31 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:78 
    os.environ["STREAMLIT_THEME_DARK_LINK_COLOR"] = "#CD1C18"  # chili red

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4224b25c69adfe6 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:80 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78805ca4f13d6131 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:81 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9735c8d883acf0ed — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:82 
    del os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5c3a6bf195e7999 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:83 
    del os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6e08b11d973f635 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:84 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf73ef645162f2c6 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:85 
    del os.environ["STREAMLIT_THEME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76040bcdf8099e1c — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:86 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c299f4b782c34e4 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:87 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfa4452c616e13f9 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:88 
    del os.environ["STREAMLIT_THEME_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #811f8604513090b5 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:89 
    del os.environ["STREAMLIT_THEME_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #240dfe804c0db33e — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:90 
    del os.environ["STREAMLIT_THEME_DARK_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3305c3f38fe5d97c — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:91 
    del os.environ["STREAMLIT_THEME_DARK_CODE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b49bc4fd17d52304 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:92 
    del os.environ["STREAMLIT_THEME_DARK_CODE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f38bb238b12b48f — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:93 
    del os.environ["STREAMLIT_THEME_DARK_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9199cd3cd0530f68 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:30 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b8198db889b6f90 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:31 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#1a6ce7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #653ec974ca09fca1 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:32 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "#1e252f"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc1ffeb53de1cebf — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:35 
    os.environ["STREAMLIT_THEME_LIGHT_BACKGROUND_COLOR"] = "#ffffff"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14502fe11caf7b04 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:36 
    os.environ["STREAMLIT_THEME_LIGHT_SECONDARY_BACKGROUND_COLOR"] = "#f7f7f7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #afb3440d164df2b3 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:37 
    os.environ["STREAMLIT_THEME_LIGHT_BORDER_COLOR"] = "#d5dae4"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6444122e6fe0951 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:38 
    os.environ["STREAMLIT_THEME_LIGHT_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26f7aa111fdaabef — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:42 
    os.environ["STREAMLIT_THEME_LIGHT_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f8bfa9c5b2103a8 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:46 
    os.environ["STREAMLIT_THEME_LIGHT_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be63bbaf2a204c7d — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:51 
    os.environ["STREAMLIT_THEME_SIDEBAR_BACKGROUND_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a71954229f878893 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:54 
    os.environ["STREAMLIT_THEME_SIDEBAR_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68d1d06586399d40 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:57 
    os.environ["STREAMLIT_THEME_SIDEBAR_DATAFRAME_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf066df021572c16 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:62 
    os.environ["STREAMLIT_THEME_LIGHT_SIDEBAR_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f9b1196b8de3e79 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:65 
    os.environ["STREAMLIT_THEME_LIGHT_SIDEBAR_LINK_COLOR"] = "#7851A9"  # royal purple

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6ab978bb967af04 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:67 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #999f14e48d3a0446 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:68 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc21e9454968649c — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:69 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64bfd7368f15207d — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:70 
    del os.environ["STREAMLIT_THEME_LIGHT_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cc8a2211548dfbf — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:71 
    del os.environ["STREAMLIT_THEME_LIGHT_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3cb68a78052aa01 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:72 
    del os.environ["STREAMLIT_THEME_LIGHT_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82a51c955fb4bb13 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:73 
    del os.environ["STREAMLIT_THEME_LIGHT_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b31e84fec1e9d408 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:74 
    del os.environ["STREAMLIT_THEME_LIGHT_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3bcae1f237147b7 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:75 
    del os.environ["STREAMLIT_THEME_LIGHT_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc33ddeafb15725b — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:76 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43bc037be667baa1 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:77 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adeb0e12fb24e471 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:78 
    del os.environ["STREAMLIT_THEME_SIDEBAR_DATAFRAME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5a13b1ee8e0c03a — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:79 
    del os.environ["STREAMLIT_THEME_LIGHT_SIDEBAR_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4230f3a191c5b6cb — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:80 
    del os.environ["STREAMLIT_THEME_LIGHT_SIDEBAR_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ccdf2b66635db38 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:34 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#1a6ce7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f69e5dd01c7b1aef — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:35 
    os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"] = "#ffffff"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf3ce1eb87ed3b08 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:36 
    os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"] = "#f7f7f7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cfde83acaaa93889 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:37 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "#1e252f"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5e77c834a60de44 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:38 
    os.environ["STREAMLIT_THEME_BORDER_COLOR"] = "#d5dae4"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb0fcb2d027b6ccf — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:39 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0852f251788c76d6 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:40 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8538f8ae068a94dd — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:44 
    os.environ["STREAMLIT_THEME_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7e8cdac3306e3fd — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:48 
    os.environ["STREAMLIT_THEME_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #403084efb9dae931 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:53 
    os.environ["STREAMLIT_THEME_LIGHT_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #564e66b296240afc — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:56 
    os.environ["STREAMLIT_THEME_LIGHT_CODE_FONT_SIZE"] = "13px"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fe9e197b2a55c31 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:57 
    os.environ["STREAMLIT_THEME_LIGHT_CODE_TEXT_COLOR"] = "#FF69B4"  # hot pink

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04112bb2ce694a3d — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:58 
    os.environ["STREAMLIT_THEME_LIGHT_LINK_COLOR"] = "#89CFF0"  # baby blue

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8a9eb714e832932 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:60 
    os.environ["STREAMLIT_THEME_DARK_PRIMARY_COLOR"] = "#228B22"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42693853e465fbd7 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:61 
    os.environ["STREAMLIT_THEME_DARK_BORDER_COLOR"] = "#ff6700"  # hazard orange

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97b27b31b87d8daf — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:62 
    os.environ["STREAMLIT_THEME_DARK_CODE_FONT_SIZE"] = "13px"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4eca8bfdb6d40d5 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:63 
    os.environ["STREAMLIT_THEME_DARK_CODE_TEXT_COLOR"] = "#FF69B4"  # hot pink

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e72a2ec2382b8d0 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:64 
    os.environ["STREAMLIT_THEME_DARK_LINK_COLOR"] = "#89CFF0"  # baby blue

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc8ebd8fd3ccde21 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:66 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7b09da33ffa24e3 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:67 
    del os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #867a7cb49f2385f6 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:68 
    del os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3eb74840e593b818 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:69 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #272629d07ed4a6fc — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:70 
    del os.environ["STREAMLIT_THEME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d1abf8dde9337a8 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:71 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cc3b3236bb4e34f — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:72 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87cc94f0a4245442 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:73 
    del os.environ["STREAMLIT_THEME_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54816446ca25417a — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:74 
    del os.environ["STREAMLIT_THEME_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad2d12d28f73f109 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:75 
    del os.environ["STREAMLIT_THEME_LIGHT_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a326fe2a4565e0c8 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:76 
    del os.environ["STREAMLIT_THEME_LIGHT_CODE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c76e56307bd2818 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:77 
    del os.environ["STREAMLIT_THEME_LIGHT_CODE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fda9768165f51e67 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:78 
    del os.environ["STREAMLIT_THEME_LIGHT_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6efbcf071aa783ee — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:79 
    del os.environ["STREAMLIT_THEME_DARK_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24325a7ca6fe6a35 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:80 
    del os.environ["STREAMLIT_THEME_DARK_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c5929875aa0bc37 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:81 
    del os.environ["STREAMLIT_THEME_DARK_CODE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1d74bb437a96b67 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:82 
    del os.environ["STREAMLIT_THEME_DARK_CODE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ae950ca34064078 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:83 
    del os.environ["STREAMLIT_THEME_DARK_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7e4d1c4de95f388 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:29 
    os.environ["STREAMLIT_THEME_RED_COLOR"] = "#7d353b"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a472f8216d51a0e6 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:30 
    os.environ["STREAMLIT_THEME_ORANGE_COLOR"] = "#d95a00"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aeb77a399e6e9828 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:31 
    os.environ["STREAMLIT_THEME_YELLOW_COLOR"] = "#916e10"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02b3d1a35089d468 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:32 
    os.environ["STREAMLIT_THEME_BLUE_COLOR"] = "#004280"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f00bd96d119f72a — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:33 
    os.environ["STREAMLIT_THEME_GREEN_COLOR"] = "#177233"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d4ac890bb1abc87 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:34 
    os.environ["STREAMLIT_THEME_VIOLET_COLOR"] = "#583f84"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f2d6cf26bd2a461 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:35 
    os.environ["STREAMLIT_THEME_GRAY_COLOR"] = "#0e1117"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4d64955e852fd64 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:36 
    os.environ["STREAMLIT_THEME_SIDEBAR_RED_COLOR"] = "#ffc7c7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be7a6e6cdbc2b64a — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:37 
    os.environ["STREAMLIT_THEME_SIDEBAR_ORANGE_COLOR"] = "#ffd16a"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c906e2eb7699a58 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:38 
    os.environ["STREAMLIT_THEME_SIDEBAR_YELLOW_COLOR"] = "#ffffa0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ba2caf270ded5e2 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:39 
    os.environ["STREAMLIT_THEME_SIDEBAR_BLUE_COLOR"] = "#a6dcff"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #876f526f461695c6 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:40 
    os.environ["STREAMLIT_THEME_SIDEBAR_GREEN_COLOR"] = "#9ef6bb"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99d600716ea72691 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:41 
    os.environ["STREAMLIT_THEME_SIDEBAR_VIOLET_COLOR"] = "#dbbbff"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #315771489eda92b0 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:42 
    os.environ["STREAMLIT_THEME_SIDEBAR_GRAY_COLOR"] = "#e6eaf1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72fe21b15898e75c — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:47 
    del os.environ["STREAMLIT_THEME_RED_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d60c969a3619d61c — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:48 
    del os.environ["STREAMLIT_THEME_ORANGE_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6251acb534af267 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:49 
    del os.environ["STREAMLIT_THEME_YELLOW_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d04453b8e406017 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:50 
    del os.environ["STREAMLIT_THEME_BLUE_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #966210844962c7f2 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:51 
    del os.environ["STREAMLIT_THEME_GREEN_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5613beb23e8f2272 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:52 
    del os.environ["STREAMLIT_THEME_VIOLET_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fb47729060873c1 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:53 
    del os.environ["STREAMLIT_THEME_GRAY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce5057eec8609c92 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:54 
    del os.environ["STREAMLIT_THEME_SIDEBAR_RED_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1263a61946cd7482 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:55 
    del os.environ["STREAMLIT_THEME_SIDEBAR_ORANGE_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f9e9044fabcf1f6 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:56 
    del os.environ["STREAMLIT_THEME_SIDEBAR_YELLOW_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ffc5c90ca8b279cb — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:57 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BLUE_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34748365d3c6d732 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:58 
    del os.environ["STREAMLIT_THEME_SIDEBAR_GREEN_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff4229fbd2f4f806 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:59 
    del os.environ["STREAMLIT_THEME_SIDEBAR_VIOLET_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92e8da190c19ba0b — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:60 
    del os.environ["STREAMLIT_THEME_SIDEBAR_GRAY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2101eba70386560 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:30 
    os.environ["STREAMLIT_THEME_RED_TEXT_COLOR"] = "#e74c3c"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a166d63c798db218 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:31 
    os.environ["STREAMLIT_THEME_ORANGE_TEXT_COLOR"] = "#f39c12"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07da73e7ae442c1c — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:32 
    os.environ["STREAMLIT_THEME_YELLOW_TEXT_COLOR"] = "#f1c40f"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d6f0f36333605c0 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:33 
    os.environ["STREAMLIT_THEME_BLUE_TEXT_COLOR"] = "#3498db"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d62eeaf4e043ed7a — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:34 
    os.environ["STREAMLIT_THEME_GREEN_TEXT_COLOR"] = "#27ae60"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f692a4c57947c43e — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:35 
    os.environ["STREAMLIT_THEME_VIOLET_TEXT_COLOR"] = "#9b59b6"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b42e8b4046ba819d — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:36 
    os.environ["STREAMLIT_THEME_GRAY_TEXT_COLOR"] = "#7f8c8d"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a6e50dfcfdfb401 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:38 
    os.environ["STREAMLIT_THEME_SIDEBAR_RED_TEXT_COLOR"] = "#8b0000"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45fd53cc701da08e — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:39 
    os.environ["STREAMLIT_THEME_SIDEBAR_ORANGE_TEXT_COLOR"] = "#cc4400"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #106e21261f7eda7b — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:40 
    os.environ["STREAMLIT_THEME_SIDEBAR_YELLOW_TEXT_COLOR"] = "#b8860b"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a0d32a269206ba8 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:41 
    os.environ["STREAMLIT_THEME_SIDEBAR_BLUE_TEXT_COLOR"] = "#000080"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f0490d38a2f4948 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:42 
    os.environ["STREAMLIT_THEME_SIDEBAR_GREEN_TEXT_COLOR"] = "#006400"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f30ce1ace6cd073e — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:43 
    os.environ["STREAMLIT_THEME_SIDEBAR_VIOLET_TEXT_COLOR"] = "#4b0082"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92ef62391f698885 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:44 
    os.environ["STREAMLIT_THEME_SIDEBAR_GRAY_TEXT_COLOR"] = "#2f2f2f"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2185e1fab2d4be3e — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:46 
    del os.environ["STREAMLIT_THEME_RED_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4634cc31aaac976 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:47 
    del os.environ["STREAMLIT_THEME_ORANGE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58d73e7701fdbe61 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:48 
    del os.environ["STREAMLIT_THEME_YELLOW_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d91cfc2208d6efbc — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:49 
    del os.environ["STREAMLIT_THEME_BLUE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #188d7f670bbc796f — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:50 
    del os.environ["STREAMLIT_THEME_GREEN_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99c6d0b353a20e11 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:51 
    del os.environ["STREAMLIT_THEME_VIOLET_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98c97bad5dde2a74 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:52 
    del os.environ["STREAMLIT_THEME_GRAY_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0de5a9cd39679674 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:53 
    del os.environ["STREAMLIT_THEME_SIDEBAR_RED_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f0a7eebd8b77894 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:54 
    del os.environ["STREAMLIT_THEME_SIDEBAR_ORANGE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8e0c2cce0cc6c3a — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:55 
    del os.environ["STREAMLIT_THEME_SIDEBAR_YELLOW_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1a656f963a71155 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:56 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BLUE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #475b62cc5ee26b38 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:57 
    del os.environ["STREAMLIT_THEME_SIDEBAR_GREEN_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54bbfaf0900bc55e — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:58 
    del os.environ["STREAMLIT_THEME_SIDEBAR_VIOLET_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c9951566ac6043a — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:59 
    del os.environ["STREAMLIT_THEME_SIDEBAR_GRAY_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd2e9bfd29079f93 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:29 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #078def5879db7701 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:33 
    os.environ["STREAMLIT_THEME_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc4c32e698af2eef — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:37 
    os.environ["STREAMLIT_THEME_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1b1025e97f9f80a — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:41 
    os.environ["STREAMLIT_THEME_SIDEBAR_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #115c6fa71e76c553 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:44 
    os.environ["STREAMLIT_THEME_SIDEBAR_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d2c274b801c9c65 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:47 
    os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0af5d5150f41b858 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:51 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59fbf37ecb405591 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:52 
    del os.environ["STREAMLIT_THEME_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #115d33ea98cdf360 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:53 
    del os.environ["STREAMLIT_THEME_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ebbc96a58089a5e8 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:54 
    del os.environ["STREAMLIT_THEME_SIDEBAR_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd68617a1185e1ee — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:55 
    del os.environ["STREAMLIT_THEME_SIDEBAR_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89620956e2e023d1 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:56 
    del os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c8be522a3213e7e — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:29 
    os.environ["STREAMLIT_THEME_BASE"] = "dark"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7970012a2a52bbd5 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:30 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#1BD760"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d4657199c3a2421 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:31 
    os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"] = "#001200"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e76a63abb2216500 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:32 
    os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"] = "#03200C"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27952f266896b50d — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:33 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "#DFFDE0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24f60bbb34b3c3d2 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:34 
    os.environ["STREAMLIT_THEME_BASE_RADIUS"] = "1.2rem"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #206aba508f4b2a6a — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:35 
    os.environ["STREAMLIT_THEME_BUTTON_RADIUS"] = "0.57rem"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #304298efe8affd9b — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:36 
    os.environ["STREAMLIT_THEME_BORDER_COLOR"] = "#0B4C0B"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f0057203a7242b2 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:37 
    os.environ["STREAMLIT_THEME_DATAFRAME_BORDER_COLOR"] = "#f0ee86"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ee953a129323426 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:38 
    os.environ["STREAMLIT_THEME_DATAFRAME_HEADER_BACKGROUND_COLOR"] = "#70aec1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae1e8083d36bd42b — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:39 
    os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72edf5f1cbc161cf — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:40 
    os.environ["STREAMLIT_THEME_LINK_COLOR"] = "#2EC163"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a43280885de31d3 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:41 
    os.environ["STREAMLIT_THEME_CODE_FONT_SIZE"] = "15px"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #413e39a6d3983724 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:42 
    os.environ["STREAMLIT_THEME_CODE_TEXT_COLOR"] = "#301934"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cfde0c440b20dee5 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:43 
    os.environ["STREAMLIT_THEME_CODE_BACKGROUND_COLOR"] = "#d4c6f5"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93a159d673866f01 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:44 
    os.environ["STREAMLIT_THEME_SHOW_SIDEBAR_BORDER"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40490f77d23a3383 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:45 
    os.environ["STREAMLIT_THEME_HEADING_FONT"] = "bold, serif"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0d497e2f8ca44ee — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:46 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d49552b17a8e2450 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:48 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7be3e1de7848aef0 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:49 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b14cb6fda694b59 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:50 
    del os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2d939a9354a18d0 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:51 
    del os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be4f51f4d452407e — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:52 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a9e555efe79cdc3 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:53 
    del os.environ["STREAMLIT_THEME_BASE_RADIUS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #090710d53e53a721 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:54 
    del os.environ["STREAMLIT_THEME_BUTTON_RADIUS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26b2e6a5f38cfd2a — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:55 
    del os.environ["STREAMLIT_THEME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #caeac15bd2f666f5 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:56 
    del os.environ["STREAMLIT_THEME_DATAFRAME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6681ca76064544dd — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:57 
    del os.environ["STREAMLIT_THEME_DATAFRAME_HEADER_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87f4f6c4a238b7a2 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:58 
    del os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70b20cf6a147a3a5 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:59 
    del os.environ["STREAMLIT_THEME_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #328de419ac75f423 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:60 
    del os.environ["STREAMLIT_THEME_CODE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #189732eab5c7bb48 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:61 
    del os.environ["STREAMLIT_THEME_CODE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a09924611aa4494 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:62 
    del os.environ["STREAMLIT_THEME_CODE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b72c7e9603ce1d6d — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:63 
    del os.environ["STREAMLIT_THEME_SHOW_SIDEBAR_BORDER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f82dbdf7d9804dc4 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:64 
    del os.environ["STREAMLIT_THEME_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c86cbea6c02aeaf2 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:65 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7ac85bc816af85a — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:41 
    os.environ["STREAMLIT_THEME_BASE"] = "https://data.streamlit.io/corporate.toml"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c933d85a02bc2b4 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:42 
    os.environ["STREAMLIT_THEME_LINK_COLOR"] = "#CD1C18"  # Chili red

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cbe7ac5f1b1385f0 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:43 
    os.environ["STREAMLIT_THEME_CODE_BACKGROUND_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6d184f395cee3b4 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:46 
    os.environ["STREAMLIT_THEME_SIDEBAR_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #631f824e6eec3085 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:49 
    os.environ["STREAMLIT_THEME_SIDEBAR_LINK_COLOR"] = "#7851A9"  # Royal purple

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a4c5aca4fb5fe8b — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:52 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58b035aee7367898 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:53 
    del os.environ["STREAMLIT_THEME_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #452b498c31ff0e88 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:54 
    del os.environ["STREAMLIT_THEME_CODE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e4ae037e08dc5fa — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:55 
    del os.environ["STREAMLIT_THEME_SIDEBAR_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #123bfdeff589052c — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:56 
    del os.environ["STREAMLIT_THEME_SIDEBAR_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5166c6cec8f5ac8e — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:30 
    os.environ["STREAMLIT_THEME_FONT_FACES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3103c126f80c34f — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:46 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42430a6ad2c2a874 — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:49 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "16"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcf4d3205f7c77b6 — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:50 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #148023a589d29e42 — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:52 
    del os.environ["STREAMLIT_THEME_FONT_FACES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97f72b04bbc4d484 — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:53 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3957977a1780dc19 — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:54 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc815e72361d55af — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:55 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c9a11344a2d9a3b — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:30 
    os.environ["STREAMLIT_THEME_FONT_FACES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e58db8fc357c3624 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:66 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aff129fa1aad90eb — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:69 
    os.environ["STREAMLIT_THEME_SIDEBAR_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5d8a88d6bb82f1b — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:72 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "16"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc07cc4a67067c73 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:73 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5639f6be9e201e3 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:75 
    del os.environ["STREAMLIT_THEME_FONT_FACES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42e13f90c4d9e243 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:76 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fa3207fd55a8ba4 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:77 
    del os.environ["STREAMLIT_THEME_SIDEBAR_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3eb38d7b52c47cbe — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:78 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2eb206beb4091881 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:79 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1abdffe033562ec7 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:30 
    os.environ["STREAMLIT_THEME_FONT_FACES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25beb09b7c56625f — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:70 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #772bdd36220ce5f2 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:73 
    os.environ["STREAMLIT_THEME_SIDEBAR_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aecacf82360f337e — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:76 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "16"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2561325d181b4c34 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:77 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2cb54ccc72aa2135 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:79 
    del os.environ["STREAMLIT_THEME_FONT_FACES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #696e7226ab528699 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:80 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74ff82b618c1d715 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:81 
    del os.environ["STREAMLIT_THEME_SIDEBAR_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #116bb56f0a9d4d4e — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:82 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #003d5a0dac73a0c5 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:83 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #633a5a935a9260df — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:29 
    os.environ["STREAMLIT_THEME_BASE"] = "light"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8094a114ffaf4c09 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:30 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fefa19f7fba4979 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:31 
    os.environ["STREAMLIT_THEME_BASE_RADIUS"] = "full"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62eda89dd456394b — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:32 
    os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3d51bc02f316a46 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:33 
    os.environ["STREAMLIT_THEME_SIDEBAR_BACKGROUND_COLOR"] = "black"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4944ccfd21c3e284 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:34 
    os.environ["STREAMLIT_THEME_SIDEBAR_BASE_RADIUS"] = "none"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76320629fb9645e3 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:35 
    os.environ["STREAMLIT_THEME_SIDEBAR_BUTTON_RADIUS"] = "small"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c1adc22c93ba295 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:36 
    os.environ["STREAMLIT_THEME_SIDEBAR_BORDER_COLOR"] = "white"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d82dd0030dc65cf — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:37 
    os.environ["STREAMLIT_THEME_SIDEBAR_DATAFRAME_BORDER_COLOR"] = "orange"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad6d30337a7152e3 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:38 
    os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT"] = "bold, serif"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a6921ce39a5472d — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:39 
    os.environ["STREAMLIT_THEME_SIDEBAR_CODE_FONT_SIZE"] = "0.625rem"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b7ba865a3a9c56f — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:40 
    os.environ["STREAMLIT_THEME_SIDEBAR_LINK_COLOR"] = "#90EE90"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71147757f16df7f6 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:41 
    os.environ["STREAMLIT_THEME_SIDEBAR_CODE_TEXT_COLOR"] = "#601EF9"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a4f8989459668fa — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:42 
    os.environ["STREAMLIT_THEME_SIDEBAR_CODE_BACKGROUND_COLOR"] = "#d4c6f5"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfa94c272b348593 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:43 
    os.environ["STREAMLIT_THEME_SIDEBAR_PRIMARY_COLOR"] = "blue"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df6685a41ec6608c — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:44 
    os.environ["STREAMLIT_THEME_SIDEBAR_SECONDARY_BACKGROUND_COLOR"] = "#222222"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5fb64cefe089aba — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:45 
    os.environ["STREAMLIT_THEME_SIDEBAR_TEXT_COLOR"] = "white"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2cc6e32ebaefe606 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:46 
    os.environ["STREAMLIT_THEME_SIDEBAR_LINK_UNDERLINE"] = "False"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #079846ef8b3006e9 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:47 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1d704ad15ef7113 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:49 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cedce0622a791a7 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:50 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ceb0ab64ea0eea63 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:51 
    del os.environ["STREAMLIT_THEME_BASE_RADIUS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02d76ef5e05e6ded — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:52 
    del os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e1a7b7feeb83aa3 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:53 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46fcc771d8bc4d3a — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:54 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BASE_RADIUS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd9af58fa9c9bbfa — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:55 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BUTTON_RADIUS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bc8acddcd48d9ec — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:56 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9383c8d5227c856b — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:57 
    del os.environ["STREAMLIT_THEME_SIDEBAR_DATAFRAME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #466c0f0bfef8e4c2 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:58 
    del os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c807daef6a761de8 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:59 
    del os.environ["STREAMLIT_THEME_SIDEBAR_CODE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ca463b02286a7c6 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:60 
    del os.environ["STREAMLIT_THEME_SIDEBAR_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ef460a6af49f6af — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:61 
    del os.environ["STREAMLIT_THEME_SIDEBAR_CODE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fee555cc0608d715 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:62 
    del os.environ["STREAMLIT_THEME_SIDEBAR_CODE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fcb2b53ee0d9b9c — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:63 
    del os.environ["STREAMLIT_THEME_SIDEBAR_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d53d94f40f7d0e2e — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:64 
    del os.environ["STREAMLIT_THEME_SIDEBAR_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a99de23a20dfd36 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:65 
    del os.environ["STREAMLIT_THEME_SIDEBAR_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a565c2d0cddff6ca — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:66 
    del os.environ["STREAMLIT_THEME_SIDEBAR_LINK_UNDERLINE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e208adcaac51b79b — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:67 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9402fb482d8680d — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:30 
    os.environ["STREAMLIT_THEME_BASE"] = "dark"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed9e902b2ece5726 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:31 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#004cbe"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b6ee3fb7dfda307 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:32 
    os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"] = "#191e24"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65512fe78c6f2b1b — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:33 
    os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"] = "#0f161e"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20c6f8ffff9fa36b — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:34 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "oklab(79.31% -0.019 -0.063)"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e0b338740114741 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:35 
    os.environ["STREAMLIT_THEME_BORDER_COLOR"] = "#293246"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e90560143196301 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:36 
    os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #edefe489c9ffb607 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:37 
    os.environ["STREAMLIT_THEME_FONT_FACES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b93089d8b0064a6 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:76 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d53203103f719288 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:80 
    os.environ["STREAMLIT_THEME_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23d2f4663f328381 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:84 
    os.environ["STREAMLIT_THEME_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f0dc6fedb56dee6 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:87 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fae06608f9d0ed6 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:88 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2e8c86579909e86 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:90 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78c1218bfc67271b — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:91 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a3fe09cc80894f7 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:92 
    del os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c0825581c6f5708 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:93 
    del os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56914313d251097f — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:94 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44a265f4b3d16b2e — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:95 
    del os.environ["STREAMLIT_THEME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6089764119680a8 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:96 
    del os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f045b92f9a745077 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:97 
    del os.environ["STREAMLIT_THEME_FONT_FACES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2796e77e4545598d — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:98 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3643faff8ccbd5f — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:99 
    del os.environ["STREAMLIT_THEME_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #181dbd329371f884 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:100 
    del os.environ["STREAMLIT_THEME_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c0df7595c2b6f2f — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:101 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54e7c473a41851e9 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:102 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55911d0e68af93f3 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:30 
    os.environ["STREAMLIT_THEME_BASE"] = "light"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ba6d4f57e40b4e2 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:31 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#1a6ce7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7381dfa7fcf3c23 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:32 
    os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"] = "#ffffff"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #157df79fbe29a8ee — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:33 
    os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"] = "#f7f7f7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #716567c6e9409611 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:34 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "oklch(20.36% 0.024 253)"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #770405e276a135d2 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:35 
    os.environ["STREAMLIT_THEME_BORDER_COLOR"] = "#d5dae4"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c96172c6f02e7d7 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:36 
    os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27c3144b56c35017 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:37 
    os.environ["STREAMLIT_THEME_FONT_FACES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2bce71ad822331d1 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:76 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #affb0f8c0ae7a0aa — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:80 
    os.environ["STREAMLIT_THEME_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c12fbb4dce9fbc89 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:84 
    os.environ["STREAMLIT_THEME_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c52754e6aab0f12 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:87 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d232113c242228e4 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:88 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b9d8e9e9e8f5508 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:90 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51a6a42b4c165440 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:91 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9cd5a733df280659 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:92 
    del os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bb3e52d75d5f7ab — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:93 
    del os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f669cd729356d86c — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:94 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7291114286233df — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:95 
    del os.environ["STREAMLIT_THEME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9721474a4b239778 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:96 
    del os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #907ade1899b473a7 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:97 
    del os.environ["STREAMLIT_THEME_FONT_FACES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22d34ca1dfc66da1 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:98 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b4931e2a63939df — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:99 
    del os.environ["STREAMLIT_THEME_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8315341c52c34c5c — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:100 
    del os.environ["STREAMLIT_THEME_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd228a313ffe0143 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:101 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1f01656fe9c1e7d — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:102 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e908ccc63f1da2a0 — Environment-variable access.
repo/e2e_playwright/theming/theme_chart_colors_test.py:33 
    os.environ["STREAMLIT_THEME_CHART_CATEGORICAL_COLORS"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22c1856e9bb5fce8 — Environment-variable access.
repo/e2e_playwright/theming/theme_chart_colors_test.py:47 
    os.environ["STREAMLIT_THEME_CHART_SEQUENTIAL_COLORS"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06921e39f0594750 — Environment-variable access.
repo/e2e_playwright/theming/theme_chart_colors_test.py:61 
    os.environ["STREAMLIT_THEME_CHART_DIVERGING_COLORS"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94873859f2730372 — Environment-variable access.
repo/e2e_playwright/theming/theme_chart_colors_test.py:76 
    del os.environ["STREAMLIT_THEME_CHART_CATEGORICAL_COLORS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6ecff08aee165f5 — Environment-variable access.
repo/e2e_playwright/theming/theme_chart_colors_test.py:77 
    del os.environ["STREAMLIT_THEME_CHART_SEQUENTIAL_COLORS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ded2a2f2553c62bb — Environment-variable access.
repo/e2e_playwright/theming/theme_chart_colors_test.py:78 
    del os.environ["STREAMLIT_THEME_CHART_DIVERGING_COLORS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee8fdaeb712a5902 — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:29 
    os.environ["STREAMLIT_THEME_BASE_FONT_WEIGHT"] = "200"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d429d3f78ecd5d0 — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:30 
    os.environ["STREAMLIT_THEME_CODE_FONT_WEIGHT"] = "600"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #590eef23ca223de4 — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:31 
    os.environ["STREAMLIT_THEME_HEADING_FONT_WEIGHTS"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #849591f32a1c2aa1 — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:35 
    os.environ["STREAMLIT_THEME_SIDEBAR_CODE_FONT_WEIGHT"] = "200"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e17df6c0e2de22f — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:36 
    os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT_WEIGHTS"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b711e7a50b5abb40 — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:40 
    del os.environ["STREAMLIT_THEME_BASE_FONT_WEIGHT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f17377c3fec09a8 — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:41 
    del os.environ["STREAMLIT_THEME_CODE_FONT_WEIGHT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11c14e6454780386 — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:42 
    del os.environ["STREAMLIT_THEME_HEADING_FONT_WEIGHTS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa13b1d1273ba8ed — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:43 
    del os.environ["STREAMLIT_THEME_SIDEBAR_CODE_FONT_WEIGHT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #646d7d2bea9b08e5 — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:44 
    del os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT_WEIGHTS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0a7c702bf73a420 — Environment-variable access.
repo/e2e_playwright/theming/theme_header_sizes_test.py:29 
    os.environ["STREAMLIT_THEME_HEADING_FONT_SIZES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e13847f201238d4 — Environment-variable access.
repo/e2e_playwright/theming/theme_header_sizes_test.py:33 
    os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT_SIZES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5a73385985563fa — Environment-variable access.
repo/e2e_playwright/theming/theme_header_sizes_test.py:37 
    del os.environ["STREAMLIT_THEME_HEADING_FONT_SIZES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da71dae77a51b0e8 — Environment-variable access.
repo/e2e_playwright/theming/theme_header_sizes_test.py:38 
    del os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT_SIZES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #260e856c45b7d499 — Environment-variable access.
repo/e2e_playwright/theming/theme_metric_value_style_test.py:30 
    os.environ["STREAMLIT_THEME_METRIC_VALUE_FONT_SIZE"] = "3rem"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #235b1e51a4a02938 — Environment-variable access.
repo/e2e_playwright/theming/theme_metric_value_style_test.py:31 
    os.environ["STREAMLIT_THEME_METRIC_VALUE_FONT_WEIGHT"] = "300"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d94456c06aa42a7 — Environment-variable access.
repo/e2e_playwright/theming/theme_metric_value_style_test.py:33 
    del os.environ["STREAMLIT_THEME_METRIC_VALUE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6619152614c85a37 — Environment-variable access.
repo/e2e_playwright/theming/theme_metric_value_style_test.py:34 
    del os.environ["STREAMLIT_THEME_METRIC_VALUE_FONT_WEIGHT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5f06a0f153b7378 — Environment-variable access.
repo/lib/streamlit/__init__.py:57 
_os.environ["MPLBACKEND"] = "Agg"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #edc5888b8825ed94 — Filesystem access.
repo/lib/streamlit/cli_util.py:62 
    with open(os.devnull, "w", encoding="utf-8") as devnull:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #238899d87efe2495 — Filesystem access.
repo/lib/streamlit/components/v2/manifest_scanner.py:266 
            pyproject_content = dist.read_text("pyproject.toml")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1aabf41789af6602 — Filesystem access.
repo/lib/streamlit/components/v2/manifest_scanner.py:364 
        with open(pyproject_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e87390bae52603df — Filesystem access.
repo/lib/streamlit/components/v2/manifest_scanner.py:412 
        with open(pyproject_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d9d4b8ac5bd6616 — Environment-variable access.
repo/lib/streamlit/config.py:880 
        and not os.getenv("DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9608f9271d6587fd — Environment-variable access.
repo/lib/streamlit/config.py:881 
        and not os.getenv("WAYLAND_DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc3c16a279d98373 — Environment-variable access.
repo/lib/streamlit/config.py:2645 
        env_var_value = os.environ.get(opt_val.env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb0bf8b4cbdd89ef — Environment-variable access.
repo/lib/streamlit/config.py:2789 
        env_var = os.environ.get(var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b386613256af6acf — Filesystem access.
repo/lib/streamlit/config.py:2902 
            with open(filename, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c05f77292da0f9d1 — Filesystem access.
repo/lib/streamlit/config_util.py:644 
            with open(file_path_or_url, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47bef2a829a3cdab — Filesystem access.
repo/lib/streamlit/connections/snowflake_connection.py:714 
        with open(SNOWPARK_CONNECTION_TOKEN_FILE, encoding="utf-8") as token_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1deab530e0c2aca — Environment-variable access.
repo/lib/streamlit/connections/snowflake_connection.py:747 
            value = os.getenv(env_var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d40be22af9d617fc — Filesystem access.
repo/lib/streamlit/elements/html.py:120 
            with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fea86f2889a364b2 — Filesystem access.
repo/lib/streamlit/elements/iframe.py:419 
                with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #038e0675b68cf6cb — Filesystem access.
repo/lib/streamlit/elements/iframe.py:433 
            with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e1572c01ccd7902 — Filesystem access.
repo/lib/streamlit/elements/lib/image_utils.py:273 
            with open(image, encoding="utf-8") as textfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfdadecd3e4bd6a0 — Filesystem access.
repo/lib/streamlit/elements/lib/image_utils.py:294 
            with open(image, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #accb1f80393a5f31 — Filesystem access.
repo/lib/streamlit/elements/lib/subtitle_utils.py:121 
        with open(data_or_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99b782cac34eae53 — Filesystem access.
repo/lib/streamlit/elements/pdf.py:138 
                    with open(data_str, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28d6e238316a6588 — Environment-variable access.
repo/lib/streamlit/env_util.py:33 
    if "WSL_DISTRO_NAME" in os.environ or "WSL_INTEROP" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f16ff6b6447d6c0 — Filesystem access.
repo/lib/streamlit/env_util.py:37 
        with open("/proc/version", encoding="utf-8") as proc_version:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5990fe1858c5275 — Filesystem access.
repo/lib/streamlit/file_util.py:89 
    with open(os.path.join(CONFIG_FOLDER_NAME, path), mode) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0dcf70962667f9e3 — Filesystem access.
repo/lib/streamlit/file_util.py:115 
        with open(path, mode) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33ab3960878aa53b — Environment-variable access.
repo/lib/streamlit/file_util.py:223 
    pythonpath = os.environ.get("PYTHONPATH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #787ff7f9fa4ea813 — Environment-variable access.
repo/lib/streamlit/runtime/app_session.py:861 
            "DISPLAY" in os.environ or "WAYLAND_DISPLAY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #547612287859cb4d — Environment-variable access.
repo/lib/streamlit/runtime/connection_factory.py:420 
        name = os.environ[envvar_name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a32d9342a3728d5 — Environment-variable access.
repo/lib/streamlit/runtime/credentials.py:50 
        not env_util.IS_WINDOWS or os.environ.get("WT_SESSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #6d1e532a8f268017 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/lib/streamlit/runtime/credentials.py:78 
        response_json = requests.get(
            "https://data.streamlit.io/metrics.json", timeout=2
        ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #84429b2fc48287ba — Filesystem access.
repo/lib/streamlit/runtime/credentials.py:151 
            with open(self._conf_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53acfc7ac3066ed4 — Filesystem access.
repo/lib/streamlit/runtime/credentials.py:221 
        with open(self._conf_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56b8e7180c530bfb — Filesystem access.
repo/lib/streamlit/runtime/memory_media_file_storage.py:205 
            with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #365309c90418c7bd — Filesystem access.
repo/lib/streamlit/runtime/metrics_util.py:255 
        with open(_ETC_MACHINE_ID_PATH, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d7529c6ce88c646 — Filesystem access.
repo/lib/streamlit/runtime/metrics_util.py:259 
        with open(_DBUS_MACHINE_ID_PATH, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08d5e5d0da6d608b — Filesystem access.
repo/lib/streamlit/runtime/secrets.py:307 
            with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0949fe195e2b95e — Filesystem access.
repo/lib/streamlit/runtime/secrets.py:363 
                with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e940bc30ebd487df — Environment-variable access.
repo/lib/streamlit/runtime/secrets.py:513 
            os.environ[k] = str(v)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9ed73ffa0416a46 — Environment-variable access.
repo/lib/streamlit/runtime/secrets.py:522 
        if value_type in {str, int, float} and os.environ.get(k) == str(v):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9669995955da199a — Environment-variable access.
repo/lib/streamlit/runtime/secrets.py:523 
            del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d37feb8577fda48d — Filesystem access.
repo/lib/streamlit/source_util.py:55 
    return open(filename, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0aca08815a768da2 — Filesystem access.
repo/lib/streamlit/testing/v1/app_test.py:231 
        path.write_text(aligned_script, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a329237ee287efa2 — Filesystem access.
repo/lib/streamlit/watcher/util.py:118 
    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3ad1b35bd49003b — Environment-variable access.
repo/lib/streamlit/web/bootstrap.py:126 
    if "MAPBOX_API_KEY" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d610b4292a912b26 — Environment-variable access.
repo/lib/streamlit/web/bootstrap.py:127 
        os.environ["MAPBOX_API_KEY"] = config.get_option("mapbox.token")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #996e45568c5214ca — Filesystem access.
repo/lib/streamlit/web/cli.py:122 
    with open(main_script_path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5257014525ba4724 — Filesystem access.
repo/lib/streamlit/web/cli.py:585 
    (project_dir / "requirements.txt").write_text("streamlit\n", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f160ecc2c441481 — Filesystem access.
repo/lib/streamlit/web/cli.py:588 
    (project_dir / "streamlit_app.py").write_text(
        """import streamlit as st

st.title("🎈 My new app")
st.write(
    "Let's start building! For help and inspiration, head over to [docs.streamlit.io](https://docs.streamlit.io/)."
)
""",
        encoding="utf-8",
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5abe924633d4d1e — Filesystem access.
repo/lib/streamlit/web/server/app_discovery.py:365 
        source = path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ff3bc9c7573078e — Environment-variable access.
repo/lib/streamlit/web/server/server_util.py:191 
            port_str = os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee5ba6b489ff9d74 — Filesystem access.
repo/lib/streamlit/web/skills.py:270 
        if (target_path / rel_path).read_bytes() != source_file.read_bytes():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #abe57178c43c88bd — Filesystem access.
repo/scripts/changelog_categorize_prs.py:195 
    with open(args.input, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2638bc4c1d85a0d1 — Filesystem access.
repo/scripts/changelog_categorize_prs.py:202 
    with open(args.output, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e83e7c575403b15a — Filesystem access.
repo/scripts/changelog_fetch_prs.py:226 
    with open(args.output, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4eb0e0a101a6612 — Filesystem access.
repo/scripts/check_license_headers.py:33 
    (SCRIPT_DIR / "assets" / "license-template.txt").read_text().splitlines()[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f4efc3e4529892d — Filesystem access.
repo/scripts/check_license_headers.py:102 
            file_content = filepath.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42a7d6ff780c6939 — Environment-variable access.
repo/scripts/cli_regression_tests.py:69 
        STREAMLIT_RELEASE_VERSION = os.environ.get("STREAMLIT_RELEASE_VERSION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e00bdd50d4b27d0 — Environment-variable access.
repo/scripts/cli_regression_tests.py:159 
        os.environ.get("SKIP_VERSION_CHECK", "false").lower() == "true",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #854ddd787ed8c41f — Filesystem access.
repo/scripts/cli_regression_tests.py:179 
        with open(CREDENTIALS_FILE_PATH, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89e5d912dd6dbe64 — Filesystem access.
repo/scripts/cli_regression_tests.py:216 
        with open(CONFIG_FILE_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d813d765e6732d49 — Environment-variable access.
repo/scripts/create_release.py:28 
    tag = os.getenv("GIT_TAG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef2e5cc63e4288e4 — Environment-variable access.
repo/scripts/create_release.py:29 
    access_token = os.getenv("GH_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #da609c0b5848a820 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/create_release.py:38 
    response = requests.get(f"{url}/latest", headers=header)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #6f1dad874ce3474d — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/create_release.py:47 
    response = requests.post(f"{url}/generate-notes", json=payload, headers=header)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #2240f5392aa319e2 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/create_release.py:56 
    response = requests.post(url, json=payload, headers=header)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #98e9ad8c72dcf0d7 — Filesystem access.
repo/scripts/fetch_flaky_tests.py:104 
    with open(stats_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7def1df4ae75f0c0 — Filesystem access.
repo/scripts/generate_agent_rules.py:205 
    with open(source_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b43f0b61337a39de — Filesystem access.
repo/scripts/generate_agent_rules.py:219 
        with open(target_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b742eafd64f49396 — Filesystem access.
repo/scripts/generate_agent_rules.py:233 
        with open(target_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efe7affa5200b703 — Filesystem access.
repo/scripts/generate_agent_rules.py:260 
    with open(skill_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83eb309565bf0004 — Filesystem access.
repo/scripts/generate_agent_rules.py:289 
        with open(agents_md_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b1e55757a73a83d — Filesystem access.
repo/scripts/generate_agent_rules.py:308 
        with open(cursor_mdc_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f3c1a6f6d8ce138 — Filesystem access.
repo/scripts/generate_agent_rules.py:326 
        with open(github_copilot_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cf4bd55aaaa769f — Filesystem access.
repo/scripts/generate_agent_rules.py:356 
        with open(claude_md_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #b979bc165a38fc5a — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/get_release_branch.py:38 
    response = requests.get(url).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #59eaf78c2a1beb0a — Environment-variable access.
repo/scripts/log_agent_metrics.py:213 
    project_dir = os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #a54383b514b217fe — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/pypi_nightly_create_tag.py:48 
    rsp = requests.get(PYPI_STREAMLIT_URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #61b54071ff31d617 — Environment-variable access.
repo/scripts/run_bare_execution_tests.py:55 
os.environ["MPLBACKEND"] = "Agg"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbb8a54b06703901 — Environment-variable access.
repo/scripts/slack_notifications.py:64 
    webhook = os.getenv("SLACK_WEBHOOK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f99eaaa9aaf4d49 — Environment-variable access.
repo/scripts/slack_notifications.py:78 
    run_id = os.getenv("RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1669181405617801 — Environment-variable access.
repo/scripts/slack_notifications.py:110 
            pr_url = os.getenv("PR_URL", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48a436ec4f389bba — Environment-variable access.
repo/scripts/slack_notifications.py:124 
            pr_url = os.getenv("PR_URL", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b00c642a38cba88 — Environment-variable access.
repo/scripts/slack_notifications.py:137 
        repo = os.getenv("REPO", os.getenv("GITHUB_REPOSITORY", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b41c8ecdc1ce5db0 — Environment-variable access.
repo/scripts/slack_notifications.py:138 
        release_version = os.getenv("RELEASE_VERSION", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24dd35bfd159bbbf — Environment-variable access.
repo/scripts/slack_notifications.py:139 
        release_branch = os.getenv("RELEASE_BRANCH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #070f589cfd5e6c67 — Environment-variable access.
repo/scripts/slack_notifications.py:140 
        commit_sha = os.getenv("CHERRY_PICK_SHA", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f53b26abed4a89bd — Environment-variable access.
repo/scripts/slack_notifications.py:143 
            base_ref = os.getenv("RELEASE_BASE_REF", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9cb5470b810882dc — Environment-variable access.
repo/scripts/slack_notifications.py:163 
            pr_url = os.getenv("PR_URL", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d522e31e72079cc7 — Environment-variable access.
repo/scripts/slack_notifications.py:196 
            error_reason = os.getenv("ERROR_REASON", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0e550c9e7663e30 — Environment-variable access.
repo/scripts/slack_notifications.py:209 
        repo = os.getenv("REPO", os.getenv("GITHUB_REPOSITORY", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #684b8c94ecac0346 — Environment-variable access.
repo/scripts/slack_notifications.py:210 
        run_id = os.getenv("RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e1ebbd9a5df04db — Environment-variable access.
repo/scripts/slack_notifications.py:211 
        package_name = os.getenv("PACKAGE_NAME", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bc1f97de65e2893 — Environment-variable access.
repo/scripts/slack_notifications.py:212 
        package_version = os.getenv("PACKAGE_VERSION", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d968a4abd1e1c8a4 — Environment-variable access.
repo/scripts/slack_notifications.py:235 
            error_reason = os.getenv("ERROR_REASON", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f58d6dd30cc41392 — Filesystem access.
repo/scripts/snapshot_cleanup.py:168 
            with open(test_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39c86cb6bf52e948 — Filesystem access.
repo/scripts/sync_ruff_version.py:49 
        with open(pyproject_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfe4b5630227a9ab — Filesystem access.
repo/scripts/sync_ruff_version.py:65 
        with open(pre_commit_config_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #093ae7ab02609676 — Filesystem access.
repo/scripts/sync_ruff_version.py:84 
        with open(pre_commit_config_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc7831924f82c9df — Filesystem access.
repo/scripts/sync_ruff_version.py:95 
        with open(pre_commit_config_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88a4f87ac49d8e6b — Filesystem access.
repo/scripts/sync_vscode_devcontainer.py:84 
            with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac4e40eb8b935625 — Filesystem access.
repo/scripts/sync_vscode_devcontainer.py:109 
            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7386cafe9b0feb9c — Filesystem access.
repo/scripts/update_e2e_snapshots.py:155 
    with open(download_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8c842b7637b838a — Filesystem access.
repo/scripts/update_emojis.py:49 
with open(EMOJIS_SCRIPT_PATH, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9a5148773fc495e — Filesystem access.
repo/scripts/update_emojis.py:54 
with open(EMOJIS_SCRIPT_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #59baf4cae4b1f833 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/update_material_icon_font_and_names.py:65 
with urllib.request.urlopen(MATERIAL_ICONS_CODEPOINTS_URL) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #e2aa916cfecc232f — Filesystem access.
repo/scripts/update_material_icon_font_and_names.py:94 
with open(NAMES_MODULE_PATH, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9a4812a59d2e495 — Filesystem access.
repo/scripts/update_material_icon_font_and_names.py:99 
with open(NAMES_MODULE_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #692dcf8526f360b1 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/update_material_icon_font_and_names.py:104 
response = requests.get(
    MATERIAL_ICONS_FONT_URL,
    headers={
        "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 "
        "(KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
    },
)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d888b87cbfabbbaf — Filesystem access.
repo/scripts/update_material_icon_font_and_names.py:128 
    with open(FONT_FILE_PATH, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4dc81d66b6bfc73 — Filesystem access.
repo/scripts/update_material_icon_font_and_names.py:145 
with open(PLAYWRIGHT_TEST_MODULE_PATH, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b19808a7406a67f — Filesystem access.
repo/scripts/update_material_icon_font_and_names.py:149 
with open(PLAYWRIGHT_TEST_MODULE_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cddb6062d9a0b3f3 — Filesystem access.
repo/scripts/update_name.py:51 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #341b428b2059fb69 — Filesystem access.
repo/scripts/update_name.py:81 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61e81ba796a0453f — Filesystem access.
repo/scripts/verify_version.py:45 
    with open(pyproject_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aba255c7a5115d19 — Environment-variable access.
repo/scripts/verify_version.py:64 
    tag = args.tag or os.getenv("TAG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): lib

python first-party
expand_more 50 low-confidence finding(s)
low env_fs production #a5f06a0f153b7378 — Environment-variable access.
repo/lib/streamlit/__init__.py:57 
_os.environ["MPLBACKEND"] = "Agg"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #edc5888b8825ed94 — Filesystem access.
repo/lib/streamlit/cli_util.py:62 
    with open(os.devnull, "w", encoding="utf-8") as devnull:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #238899d87efe2495 — Filesystem access.
repo/lib/streamlit/components/v2/manifest_scanner.py:266 
            pyproject_content = dist.read_text("pyproject.toml")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1aabf41789af6602 — Filesystem access.
repo/lib/streamlit/components/v2/manifest_scanner.py:364 
        with open(pyproject_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e87390bae52603df — Filesystem access.
repo/lib/streamlit/components/v2/manifest_scanner.py:412 
        with open(pyproject_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d9d4b8ac5bd6616 — Environment-variable access.
repo/lib/streamlit/config.py:880 
        and not os.getenv("DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9608f9271d6587fd — Environment-variable access.
repo/lib/streamlit/config.py:881 
        and not os.getenv("WAYLAND_DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc3c16a279d98373 — Environment-variable access.
repo/lib/streamlit/config.py:2645 
        env_var_value = os.environ.get(opt_val.env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb0bf8b4cbdd89ef — Environment-variable access.
repo/lib/streamlit/config.py:2789 
        env_var = os.environ.get(var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b386613256af6acf — Filesystem access.
repo/lib/streamlit/config.py:2902 
            with open(filename, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c05f77292da0f9d1 — Filesystem access.
repo/lib/streamlit/config_util.py:644 
            with open(file_path_or_url, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47bef2a829a3cdab — Filesystem access.
repo/lib/streamlit/connections/snowflake_connection.py:714 
        with open(SNOWPARK_CONNECTION_TOKEN_FILE, encoding="utf-8") as token_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1deab530e0c2aca — Environment-variable access.
repo/lib/streamlit/connections/snowflake_connection.py:747 
            value = os.getenv(env_var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d40be22af9d617fc — Filesystem access.
repo/lib/streamlit/elements/html.py:120 
            with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fea86f2889a364b2 — Filesystem access.
repo/lib/streamlit/elements/iframe.py:419 
                with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #038e0675b68cf6cb — Filesystem access.
repo/lib/streamlit/elements/iframe.py:433 
            with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e1572c01ccd7902 — Filesystem access.
repo/lib/streamlit/elements/lib/image_utils.py:273 
            with open(image, encoding="utf-8") as textfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfdadecd3e4bd6a0 — Filesystem access.
repo/lib/streamlit/elements/lib/image_utils.py:294 
            with open(image, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #accb1f80393a5f31 — Filesystem access.
repo/lib/streamlit/elements/lib/subtitle_utils.py:121 
        with open(data_or_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99b782cac34eae53 — Filesystem access.
repo/lib/streamlit/elements/pdf.py:138 
                    with open(data_str, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28d6e238316a6588 — Environment-variable access.
repo/lib/streamlit/env_util.py:33 
    if "WSL_DISTRO_NAME" in os.environ or "WSL_INTEROP" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f16ff6b6447d6c0 — Filesystem access.
repo/lib/streamlit/env_util.py:37 
        with open("/proc/version", encoding="utf-8") as proc_version:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5990fe1858c5275 — Filesystem access.
repo/lib/streamlit/file_util.py:89 
    with open(os.path.join(CONFIG_FOLDER_NAME, path), mode) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0dcf70962667f9e3 — Filesystem access.
repo/lib/streamlit/file_util.py:115 
        with open(path, mode) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33ab3960878aa53b — Environment-variable access.
repo/lib/streamlit/file_util.py:223 
    pythonpath = os.environ.get("PYTHONPATH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #787ff7f9fa4ea813 — Environment-variable access.
repo/lib/streamlit/runtime/app_session.py:861 
            "DISPLAY" in os.environ or "WAYLAND_DISPLAY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #547612287859cb4d — Environment-variable access.
repo/lib/streamlit/runtime/connection_factory.py:420 
        name = os.environ[envvar_name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a32d9342a3728d5 — Environment-variable access.
repo/lib/streamlit/runtime/credentials.py:50 
        not env_util.IS_WINDOWS or os.environ.get("WT_SESSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #6d1e532a8f268017 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/lib/streamlit/runtime/credentials.py:78 
        response_json = requests.get(
            "https://data.streamlit.io/metrics.json", timeout=2
        ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #84429b2fc48287ba — Filesystem access.
repo/lib/streamlit/runtime/credentials.py:151 
            with open(self._conf_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53acfc7ac3066ed4 — Filesystem access.
repo/lib/streamlit/runtime/credentials.py:221 
        with open(self._conf_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56b8e7180c530bfb — Filesystem access.
repo/lib/streamlit/runtime/memory_media_file_storage.py:205 
            with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #365309c90418c7bd — Filesystem access.
repo/lib/streamlit/runtime/metrics_util.py:255 
        with open(_ETC_MACHINE_ID_PATH, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d7529c6ce88c646 — Filesystem access.
repo/lib/streamlit/runtime/metrics_util.py:259 
        with open(_DBUS_MACHINE_ID_PATH, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08d5e5d0da6d608b — Filesystem access.
repo/lib/streamlit/runtime/secrets.py:307 
            with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0949fe195e2b95e — Filesystem access.
repo/lib/streamlit/runtime/secrets.py:363 
                with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e940bc30ebd487df — Environment-variable access.
repo/lib/streamlit/runtime/secrets.py:513 
            os.environ[k] = str(v)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9ed73ffa0416a46 — Environment-variable access.
repo/lib/streamlit/runtime/secrets.py:522 
        if value_type in {str, int, float} and os.environ.get(k) == str(v):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9669995955da199a — Environment-variable access.
repo/lib/streamlit/runtime/secrets.py:523 
            del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d37feb8577fda48d — Filesystem access.
repo/lib/streamlit/source_util.py:55 
    return open(filename, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0aca08815a768da2 — Filesystem access.
repo/lib/streamlit/testing/v1/app_test.py:231 
        path.write_text(aligned_script, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a329237ee287efa2 — Filesystem access.
repo/lib/streamlit/watcher/util.py:118 
    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3ad1b35bd49003b — Environment-variable access.
repo/lib/streamlit/web/bootstrap.py:126 
    if "MAPBOX_API_KEY" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d610b4292a912b26 — Environment-variable access.
repo/lib/streamlit/web/bootstrap.py:127 
        os.environ["MAPBOX_API_KEY"] = config.get_option("mapbox.token")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #996e45568c5214ca — Filesystem access.
repo/lib/streamlit/web/cli.py:122 
    with open(main_script_path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5257014525ba4724 — Filesystem access.
repo/lib/streamlit/web/cli.py:585 
    (project_dir / "requirements.txt").write_text("streamlit\n", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f160ecc2c441481 — Filesystem access.
repo/lib/streamlit/web/cli.py:588 
    (project_dir / "streamlit_app.py").write_text(
        """import streamlit as st

st.title("🎈 My new app")
st.write(
    "Let's start building! For help and inspiration, head over to [docs.streamlit.io](https://docs.streamlit.io/)."
)
""",
        encoding="utf-8",
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5abe924633d4d1e — Filesystem access.
repo/lib/streamlit/web/server/app_discovery.py:365 
        source = path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ff3bc9c7573078e — Environment-variable access.
repo/lib/streamlit/web/server/server_util.py:191 
            port_str = os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee5ba6b489ff9d74 — Filesystem access.
repo/lib/streamlit/web/skills.py:270 
        if (target_path / rel_path).read_bytes() != source_file.read_bytes():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

pyarrow

python dependency
high pii_flow tooling reachable #1a5a9a2330b71006 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:62 · flow /tmp/closeopen-ortqh_mo/pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:60 → /tmp/closeopen-ortqh_mo/pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:62 
        r = requests.post(endpoint + master_key_identifier,
                          headers=headers,
                          data={'plaintext': base64.b64encode(key_bytes)})

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow tooling reachable #c88dfe5f003fcaf5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:76 · flow /tmp/closeopen-ortqh_mo/pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:74 → /tmp/closeopen-ortqh_mo/pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:76 
        r = requests.post(endpoint + master_key_identifier,
                          headers=headers,
                          data={'ciphertext': wrapped_key})

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 17 low-confidence finding(s)
low env_fs tooling reachable #58b958af3a661dfe — Filesystem access.
pkgs/python/[email protected]/examples/flight/client.py:168 
            with open(args.tls_roots, "rb") as root_certs:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #d01c11321a96a9a3 — Filesystem access.
pkgs/python/[email protected]/examples/flight/client.py:171 
        with open(args.mtls[0], "rb") as cert_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #c5137415b1aa1226 — Filesystem access.
pkgs/python/[email protected]/examples/flight/client.py:173 
        with open(args.mtls[1], "rb") as key_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #921cfc5500306ca4 — Filesystem access.
pkgs/python/[email protected]/examples/flight/server.py:137 
        with open(args.tls[0], "rb") as cert_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #16bf85b2cb10c43a — Filesystem access.
pkgs/python/[email protected]/examples/flight/server.py:139 
        with open(args.tls[1], "rb") as key_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #07b5801d14189cdd — Environment-variable access.
pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:117 
        kms_instance_url=os.environ.get('VAULT_URL', ''),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #ecc44f417dc6cb91 — Environment-variable access.
pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:118 
        key_access_token=os.environ.get('VAULT_TOKEN', ''),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e183e92f1a5947f — Environment-variable access.
pkgs/python/[email protected]/pyarrow/__init__.py:316 
    return _os.environ.get('PKG_CONFIG', 'pkg-config')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad5ffe8331c68bc3 — Environment-variable access.
pkgs/python/[email protected]/pyarrow/__init__.py:409 
    pkg_config_executable = _os.environ.get('PKG_CONFIG') or 'pkg-config'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #027dbad7d5c56c17 — Environment-variable access.
pkgs/python/[email protected]/pyarrow/__init__.py:441 
    if _os.environ.get('ARROW_HOME'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6214c247e131113f — Environment-variable access.
pkgs/python/[email protected]/pyarrow/__init__.py:442 
        append_library_dir(_os.path.join(_os.environ['ARROW_HOME'], 'lib'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14e8cbd5979c93cc — Environment-variable access.
pkgs/python/[email protected]/pyarrow/ipc.py:138 
        bool(int(os.environ.get('ARROW_PRE_0_15_IPC_FORMAT', '0')))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a02daa2987160e70 — Environment-variable access.
pkgs/python/[email protected]/pyarrow/ipc.py:139 
    if bool(int(os.environ.get('ARROW_PRE_1_0_METADATA_VERSION', '0'))):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd9bde819578ad03 — Filesystem access.
pkgs/python/[email protected]/pyarrow/util.py:237 
        with open(out_path, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4bcbe115a6f5da33 — Filesystem access.
pkgs/python/[email protected]/pyarrow/util.py:244 
        with open(out_path, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #0c15310b0b01c605 — Filesystem access.
pkgs/python/[email protected]/scripts/update_stub_docstrings.py:200 
        tree = libcst.parse_module(stub_file.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #9af2e490c24aab1a — Filesystem access.
pkgs/python/[email protected]/scripts/update_stub_docstrings.py:202 
        stub_file.write_text(modified.code, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

SQLAlchemy

python dependency
expand_more 28 low-confidence finding(s)
low env_fs dependency Excluded from app score #9aa773d14db3afe4 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/fixtures/mypy.py:42 
            with open(
                Path(cachedir) / "sqla_mypy_config.cfg", "w"
            ) as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46778c7a19f5f71f — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/fixtures/mypy.py:56 
            with open(
                Path(cachedir) / "plain_mypy_config.cfg", "w"
            ) as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #caf85e95a95b98e7 — Environment-variable access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/fixtures/mypy.py:106 
            os.environ.pop("MYPY_FORCE_COLOR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c0136055fc3f90d — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/fixtures/mypy.py:146 
        with open(path) as file_:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #133dee5b8d0baea4 — Environment-variable access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/plugin/plugin_base.py:398 
    if os.environ.get("REQUIRE_SQLALCHEMY_CEXT", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #377427763c3bb32a — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/plugin/plugin_base.py:455 
            with open(options.write_idents, "a") as file_:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d42844478b6a933 — Environment-variable access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/plugin/pytestplugin.py:880 
        return os.environ.get("PYTEST_CURRENT_TEST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c56da37fb3b9309 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/profiling.py:200 
            profile_f = open(self.fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d18ba0015affdc60 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/profiling.py:219 
        profile_f = open(self.fname, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #225c458aa6803584 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/provision.py:453 
    with open(idents_file) as file_:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3489eac502b750c1 — Environment-variable access.
pkgs/python/[email protected]/lib/sqlalchemy/util/_has_cy.py:27 
    if os.environ.get("DISABLE_SQLALCHEMY_CEXT_RUNTIME"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a726e1f2e93e88a3 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/util/tool_support.py:134 
            Path(destination_path).write_text(
                text, encoding="utf-8", newline="\n"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #396c0a8e0e3440f4 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/util/tool_support.py:146 
            with open(tempfile) as tf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ea45770477cdb09 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/util/tool_support.py:162 
            with open(source_file, encoding="utf-8") as tf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #832311254ec6a571 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/util/tool_support.py:169 
        with open(destination_path, encoding="utf-8") as dp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b69e31154848c0c — Environment-variable access.
pkgs/python/[email protected]/noxfile.py:95 
    cmd.extend(os.environ.get(dburl_env, default_dburl).split())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a9e81c358af4436 — Environment-variable access.
pkgs/python/[email protected]/noxfile.py:106 
    env_dbdrivers = os.environ.get(extra_driver_env, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #722b6f27a95af7f1 — Environment-variable access.
pkgs/python/[email protected]/noxfile.py:269 
    cmd.extend(os.environ.get("TOX_WORKERS", "-n4").split())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3afb9baa781d73e — Environment-variable access.
pkgs/python/[email protected]/setup.py:23 
DISABLE_EXTENSION = bool(os.environ.get("DISABLE_SQLALCHEMY_CEXT"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #062641a0296a10af — Environment-variable access.
pkgs/python/[email protected]/setup.py:24 
REQUIRE_EXTENSION = bool(os.environ.get("REQUIRE_SQLALCHEMY_CEXT"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #8b290f50d7b5daae — Filesystem access.
pkgs/python/[email protected]/tools/format_docs_code.py:155 
    original = file.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #0a2413998f690673 — Filesystem access.
pkgs/python/[email protected]/tools/format_docs_code.py:313 
                file.write_text(updated, "utf-8", newline="\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #8d4612e44cc7e87a — Filesystem access.
pkgs/python/[email protected]/tools/generate_proxy_methods.py:145 
    with open(fn.__code__.co_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #e4f0c81ac4c758fa — Filesystem access.
pkgs/python/[email protected]/tools/generate_proxy_methods.py:373 
        open(filename) as orig_py,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #d9f01187076df90b — Filesystem access.
pkgs/python/[email protected]/tools/generate_sql_functions.py:38 
        open(filename) as orig_py,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #32a90063bddf14c5 — Filesystem access.
pkgs/python/[email protected]/tools/generate_tuple_map_overloads.py:53 
        open(filename) as orig_py,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #9371f68ce9343fca — Filesystem access.
pkgs/python/[email protected]/tools/normalize_file_headers.py:27 
    content = file.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #cd886ef6b0cd9f4c — Filesystem access.
pkgs/python/[email protected]/tools/sync_test_files.py:35 
    source_data = Path(source).read_text().replace(remove_str, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

altair

python dependency
expand_more 7 low-confidence finding(s)
low env_fs dependency Excluded from app score #06512c472e4cfa40 — Environment-variable access.
pkgs/python/[email protected]/altair/datasets/_cache.py:307 
        Path(os.environ.get("XDG_CACHE_HOME", Path.home() / ".cache")) / "altair"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2cdc1d68f3c1335 — Environment-variable access.
pkgs/python/[email protected]/altair/datasets/_cache.py:401 
        fp = Path(usr) if (usr := os.environ.get(self._ENV_VAR)) else self._XDG_CACHE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b052288fc5f8fc34 — Environment-variable access.
pkgs/python/[email protected]/altair/datasets/_cache.py:408 
            os.environ[self._ENV_VAR] = str(Path(source).resolve())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ea333b07dea15bd — Environment-variable access.
pkgs/python/[email protected]/altair/datasets/_cache.py:410 
            os.environ[self._ENV_VAR] = ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bfb53cd6e6dbb62 — Environment-variable access.
pkgs/python/[email protected]/altair/datasets/_cache.py:429 
        return os.environ.get(self._ENV_VAR) == ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe1ddb03c685879d — Filesystem access.
pkgs/python/[email protected]/altair/jupyter/jupyter_chart.py:95 
    return (_here / "js" / "index.js").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97f5945455822838 — Filesystem access.
pkgs/python/[email protected]/altair/utils/data.py:308 
    Path(filename).write_text(data, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

anyio

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #9cc549bb190f0237 — Filesystem access.
pkgs/python/[email protected]/src/anyio/to_process.py:212 
    sys.stdin = open(os.devnull)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9105018edadfd9d8 — Filesystem access.
pkgs/python/[email protected]/src/anyio/to_process.py:213 
    sys.stdout = open(os.devnull, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

cachetools

python dependency
expand_more 1 low-confidence finding(s)
low env_fs tooling reachable #3bd5b8f8d1a27955 — Filesystem access.
pkgs/python/[email protected]/docs/conf.py:12 
    text = (src_directory / "cachetools/__init__.py").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

click

python dependency
expand_more 31 low-confidence finding(s)
low env_fs dependency Excluded from app score #d1ae7d6d97efcca2 — Filesystem access.
pkgs/python/[email protected]/src/click/_compat.py:366 
        return open(file, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f356b3448a902edb — Filesystem access.
pkgs/python/[email protected]/src/click/_compat.py:368 
    return open(file, mode, encoding=encoding, errors=errors)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0d4aae7686f866d — Environment-variable access.
pkgs/python/[email protected]/src/click/_termui_impl.py:418 
    pager_cmd_parts = shlex.split(os.environ.get("PAGER", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0019a004dc547bc — Environment-variable access.
pkgs/python/[email protected]/src/click/_termui_impl.py:424 
    if os.environ.get("TERM") in ("dumb", "emacs"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #daf185a5477db14e — Environment-variable access.
pkgs/python/[email protected]/src/click/_termui_impl.py:516 
    env = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b35553a012d61da8 — Environment-variable access.
pkgs/python/[email protected]/src/click/_termui_impl.py:521 
        less_flags = f"{os.environ.get('LESS', '')}{' '.join(cmd_params)}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f508f53de77deb43 — Environment-variable access.
pkgs/python/[email protected]/src/click/_termui_impl.py:673 
            rv = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97fce7700ae286e9 — Environment-variable access.
pkgs/python/[email protected]/src/click/_termui_impl.py:695 
            environ = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cace48e93a451aa0 — Filesystem access.
pkgs/python/[email protected]/src/click/_termui_impl.py:761 
            with open(name, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a28f2bb29530dcf — Filesystem access.
pkgs/python/[email protected]/src/click/_termui_impl.py:790 
        null = open("/dev/null", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #510c8c45dd8fc09c — Filesystem access.
pkgs/python/[email protected]/src/click/_termui_impl.py:916 
            f = open("/dev/tty")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ad1fa25b316c3e0 — Filesystem access.
pkgs/python/[email protected]/src/click/core.py:1243 
                formatter.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6277d30ec5e71ee — Filesystem access.
pkgs/python/[email protected]/src/click/core.py:1264 
                formatter.write_text(epilog)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #627cbdc58726ef0c — Environment-variable access.
pkgs/python/[email protected]/src/click/core.py:1557 
        instruction = os.environ.get(complete_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d513ea2e53bbf68 — Environment-variable access.
pkgs/python/[email protected]/src/click/core.py:2631 
            rv = os.environ.get(self.envvar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96853cb744121806 — Environment-variable access.
pkgs/python/[email protected]/src/click/core.py:2637 
                rv = os.environ.get(envvar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a91d83b499d66b57 — Environment-variable access.
pkgs/python/[email protected]/src/click/core.py:3402 
            rv = os.environ.get(envvar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17457f9bafa84c7c — Environment-variable access.
pkgs/python/[email protected]/src/click/shell_completion.py:371 
        cwords = split_arg_string(os.environ["COMP_WORDS"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41d1986e1c03ab50 — Environment-variable access.
pkgs/python/[email protected]/src/click/shell_completion.py:372 
        cword = int(os.environ["COMP_CWORD"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #550eb9312f4cdbf8 — Environment-variable access.
pkgs/python/[email protected]/src/click/shell_completion.py:393 
        cwords = split_arg_string(os.environ["COMP_WORDS"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be08f8eaf20acfa9 — Environment-variable access.
pkgs/python/[email protected]/src/click/shell_completion.py:394 
        cword = int(os.environ["COMP_CWORD"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94158d89af0c7ef9 — Environment-variable access.
pkgs/python/[email protected]/src/click/shell_completion.py:429 
        cwords = split_arg_string(os.environ["COMP_WORDS"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6781c5836cc82b09 — Environment-variable access.
pkgs/python/[email protected]/src/click/shell_completion.py:430 
        incomplete = os.environ["COMP_CWORD"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #039e734d51878294 — Environment-variable access.
pkgs/python/[email protected]/src/click/testing.py:567 
                old_env[key] = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fa17264889e0337 — Environment-variable access.
pkgs/python/[email protected]/src/click/testing.py:570 
                        del os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cdb2d150d7009feb — Environment-variable access.
pkgs/python/[email protected]/src/click/testing.py:574 
                    os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c93866147a9f2412 — Environment-variable access.
pkgs/python/[email protected]/src/click/testing.py:580 
                        del os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d007a0783fc9150a — Environment-variable access.
pkgs/python/[email protected]/src/click/testing.py:584 
                    os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd6d0a613a206066 — Filesystem access.
pkgs/python/[email protected]/src/click/utils.py:149 
                open(filename, mode).close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8a4b0852005bf34 — Environment-variable access.
pkgs/python/[email protected]/src/click/utils.py:506 
        folder = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d6c4043f0b68488 — Environment-variable access.
pkgs/python/[email protected]/src/click/utils.py:517 
        os.environ.get("XDG_CONFIG_HOME", os.path.expanduser("~/.config")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

gitpython

python dependency
expand_more 55 low-confidence finding(s)
low env_fs dependency Excluded from app score #e0347dc0c4649413 — Filesystem access.
pkgs/python/[email protected]/doc/source/conf.py:50 
with open(os.path.join(os.path.dirname(__file__), "..", "..", "VERSION")) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcaeb91852371e39 — Environment-variable access.
pkgs/python/[email protected]/git/cmd.py:663 
    GIT_PYTHON_TRACE = os.environ.get("GIT_PYTHON_TRACE", False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #790f1b6efb1cad24 — Environment-variable access.
pkgs/python/[email protected]/git/cmd.py:779 
            new_git = os.environ.get(cls._git_exec_env_var, cls.git_exec_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea52e0f9a25af1a0 — Environment-variable access.
pkgs/python/[email protected]/git/cmd.py:828 
                mode = os.environ.get(cls._refresh_env_var, "raise").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9da3c28384dad85 — Environment-variable access.
pkgs/python/[email protected]/git/cmd.py:1256 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b0d5261c50c81e5 — Filesystem access.
pkgs/python/[email protected]/git/cmd.py:1278 
        stdout_sink = PIPE if with_stdout else getattr(subprocess, "DEVNULL", None) or open(os.devnull, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ffb62b2d58bff396 — Environment-variable access.
pkgs/python/[email protected]/git/config.py:259 
        config_home = os.environ.get("XDG_CONFIG_HOME") or osp.join(os.environ.get("HOME", "~"), ".config")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #900a8184ab972a90 — Filesystem access.
pkgs/python/[email protected]/git/config.py:650 
                    with open(file_path, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19d052c21ad8e9da — Filesystem access.
pkgs/python/[email protected]/git/config.py:768 
            with open(fp, "wb") as fp_open:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81853a3b27682108 — Filesystem access.
pkgs/python/[email protected]/git/index/base.py:705 
                return open(filepath, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9c0b66c16102632 — Filesystem access.
pkgs/python/[email protected]/git/index/base.py:1180 
        with open(self._commit_editmsg_filepath(), "wb") as commit_editmsg_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2fc58bf7d33fd38a — Filesystem access.
pkgs/python/[email protected]/git/index/base.py:1187 
        with open(self._commit_editmsg_filepath(), "rb") as commit_editmsg_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd689047cbad72b8 — Environment-variable access.
pkgs/python/[email protected]/git/index/fun.py:89 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56cf126d9369571a — Environment-variable access.
pkgs/python/[email protected]/git/objects/commit.py:664 
        env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #025613348ad29f85 — Filesystem access.
pkgs/python/[email protected]/git/objects/submodule/base.py:428 
        with open(git_file, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c49f6dd041d11cc8 — Filesystem access.
pkgs/python/[email protected]/git/refs/log.py:267 
        with open(filepath, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11be5db061da4357 — Filesystem access.
pkgs/python/[email protected]/git/refs/log.py:363 
            fd = open(filepath, "ab")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #265ab22f99ecbfa7 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:152 
            with open(cls._get_packed_refs_path(repo), "rt", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1078268dcc48d2f9 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:265 
            with open(os.path.join(repodir, ref_path), "rt", encoding="UTF-8") as fp:  # type: ignore[arg-type]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f225ec90dc1ed859 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:668 
                with open(pack_file_path, "rb") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2902a9554c0f4ba6 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:696 
                    with open(pack_file_path, "wb") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7523ca5de3c4dda9 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:738 
            with open(abs_ref_path, "rb") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #380434335e4b5429 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:822 
                with open(new_abs_path, "rb") as fd1:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46dcfbc883f3a2b3 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:824 
                with open(cur_abs_path, "rb") as fd2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c15e34ef5b76c401 — Filesystem access.
pkgs/python/[email protected]/git/remote.py:915 
        with open(fetch_head.abspath, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65d3bfdfd15fbacf — Environment-variable access.
repo/base.py:216 
        epath = path or os.getenv("GIT_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1981bc7431c609ec — Environment-variable access.
repo/base.py:252 
                if "GIT_WORK_TREE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #499d2a70a3b383d2 — Environment-variable access.
repo/base.py:253 
                    self._working_tree_dir = os.getenv("GIT_WORK_TREE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43ec86fb9fa15991 — Filesystem access.
repo/base.py:257 
                    with open(osp.join(git_dir, "gitdir")) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d27ef6dddfed5fb — Environment-variable access.
repo/base.py:280 
                if os.environ.get("GIT_COMMON_DIR") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f2143e2da2a581a — Environment-variable access.
repo/base.py:284 
                if "GIT_WORK_TREE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1a6e9cade31b1f5 — Environment-variable access.
repo/base.py:285 
                    self._working_tree_dir = os.getenv("GIT_WORK_TREE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fbdd6c52fba13d3 — Filesystem access.
repo/base.py:321 
            common_dir = (Path(self.git_dir) / "commondir").read_text().splitlines()[0].strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0726b6c817a8b3bb — Filesystem access.
repo/base.py:382 
        with open(filename, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29934f88d5a7bd59 — Filesystem access.
repo/base.py:388 
        with open(filename, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be5b505b43f19a55 — Environment-variable access.
repo/base.py:663 
            config_home = os.environ.get("XDG_CONFIG_HOME") or osp.join(os.environ.get("HOME", "~"), ".config")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7cfdc669a7dffbe6 — Filesystem access.
repo/base.py:922 
            with open(alternates_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22293a06ab7954c9 — Filesystem access.
repo/base.py:945 
            with open(alternates_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e42aa6d09c5b6ae — Filesystem access.
repo/base.py:1661 
        with open(rebase_head_file, "rt") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9dde3b100158c55e — Filesystem access.
repo/fun.py:55 
    with open(filename, "ab"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f299c325d62e8349 — Environment-variable access.
repo/fun.py:69 
        if (osp.isdir(osp.join(d, "objects")) or "GIT_OBJECT_DIRECTORY" in os.environ) and osp.isdir(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #187c17de1d1525e0 — Filesystem access.
repo/fun.py:93 
        lines = Path(dotgit).read_text().splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4bf7b9303329cb58 — Filesystem access.
repo/fun.py:108 
        with open(d) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5fb28ebfb285362 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:122 
        value = os.environ[name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d080fde387f7f97d — Environment-variable access.
pkgs/python/[email protected]/git/util.py:201 
    old_value = os.getenv(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f21c3e2ee97fade8 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:202 
    os.environ[name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c1c6582ede2d94a — Environment-variable access.
pkgs/python/[email protected]/git/util.py:207 
            del os.environ[name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da0c9b01cba7e3d8 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:209 
            os.environ[name] = old_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8d5dda5ae7046b3 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:338 
    PATHEXT = os.environ.get("PATHEXT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13eb243c33a276a1 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:374 
        path = os.environ["PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a79c1d3b1b27ded — Environment-variable access.
pkgs/python/[email protected]/git/util.py:865 
                val = os.environ[evar]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22c1f753bb5d7b4e — Filesystem access.
pkgs/python/[email protected]/git/util.py:1051 
            with open(lock_file, mode="w"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3276791fb1d8fbc — Filesystem access.
pkgs/python/[email protected]/setup.py:14 
    return (Path(__file__).parent / path).read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea9684aa3699f333 — Filesystem access.
pkgs/python/[email protected]/setup.py:49 
        with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b079303cce7795b7 — Filesystem access.
pkgs/python/[email protected]/setup.py:59 
        with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

httptools

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #fb1524469d723ca6 — Filesystem access.
pkgs/python/[email protected]/setup.py:143 
with open(str(ROOT / 'httptools' / '_version.py')) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

orjson

python dependency
expand_more 40 low-confidence finding(s)
low env_fs dependency Excluded from app score #87d62d9f9aa62dd6 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:118 
data = json.load(open("../encoding/encodings.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6d4d861964e2b32 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:120 
indexes = json.load(open("../encoding/indexes.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c126746b16f6ba9 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:366 
  partially_generated_file = open(path, "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d140c2e3463eabd — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:387 
label_file = open("src/lib.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2561c766f6a401b — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:405 
  docfile = open("doc/%s.txt" % name, "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c75eedf224450dac — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:457 
label_test_file = open("src/test_labels_names.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2fed6c0142935b36 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:484 
data_file = open("src/data.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcbfcc1a76d14d8f — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1173 
variant_file = open("src/variant.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #905788f2a00349ca — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1417 
ffi_file = open("../encoding_c/src/lib.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83fc529315eda0f2 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1440 
single_byte_file = open("src/single_byte.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5370e88472b8b4c0 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1494 
static_file = open("../encoding_c/include/encoding_rs_statics.h", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ae9b27e10ae9fa0 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1560 
utf_8_file = open("src/utf_8.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0052798c4938de0 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1623 
jis0208_in_file = open("src/test_data/jis0208_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abf03f0be8bb6285 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1632 
jis0208_in_ref_file = open("src/test_data/jis0208_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8cd7215d0de0d8c — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1642 
jis0208_out_file = open("src/test_data/jis0208_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b20db52576d74178 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1643 
jis0208_out_ref_file = open("src/test_data/jis0208_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e4fd84a6f047190 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1660 
shift_jis_in_file = open("src/test_data/shift_jis_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87c54de4a7cfa016 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1669 
shift_jis_in_ref_file = open("src/test_data/shift_jis_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3afc91b595e2879 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1684 
shift_jis_out_file = open("src/test_data/shift_jis_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73d3420e0dc1a085 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1685 
shift_jis_out_ref_file = open("src/test_data/shift_jis_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b67619c8cfd11a1 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1713 
iso_2022_jp_in_file = open("src/test_data/iso_2022_jp_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ac72939d46d9f06 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1722 
iso_2022_jp_in_ref_file = open("src/test_data/iso_2022_jp_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0eb16ab02435aa6 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1732 
iso_2022_jp_out_file = open("src/test_data/iso_2022_jp_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff951bf41712a23c — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1733 
iso_2022_jp_out_ref_file = open("src/test_data/iso_2022_jp_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fb6f1da94a47690 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1761 
euc_kr_in_file = open("src/test_data/euc_kr_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81f80d5f4a779774 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1770 
euc_kr_in_ref_file = open("src/test_data/euc_kr_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60fb966c2de09b8a — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1785 
euc_kr_out_file = open("src/test_data/euc_kr_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29029c518cd95e0e — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1786 
euc_kr_out_ref_file = open("src/test_data/euc_kr_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02f2e07ffbae889c — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1802 
gb18030_in_file = open("src/test_data/gb18030_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #860443f60dffb298 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1811 
gb18030_in_ref_file = open("src/test_data/gb18030_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #983470da02cb5d91 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1826 
gb18030_out_file = open("src/test_data/gb18030_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7157fc4e96dd3d4c — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1827 
gb18030_out_ref_file = open("src/test_data/gb18030_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3713c18ecfd435c — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1845 
big5_in_file = open("src/test_data/big5_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44f47cb325aa9050 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1861 
big5_in_ref_file = open("src/test_data/big5_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75298cfc0ec6a577 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1898 
big5_out_file = open("src/test_data/big5_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11fbf6bfa03f2e0d — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1899 
big5_out_ref_file = open("src/test_data/big5_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f31e72e028f6708f — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1921 
jis0212_in_file = open("src/test_data/jis0212_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0261046c6f07a61 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1930 
jis0212_in_ref_file = open("src/test_data/jis0212_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2806d36e7e5798d0 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1942 
codepage_file = open("../codepage/src/lib.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61bcfc5221b78a16 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1974 
codepage_test_file = open("../codepage/src/tests.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

packaging

python dependency
expand_more 3 low-confidence finding(s)
low env_fs tooling reachable #5f60bea7fdc30efc — Filesystem access.
pkgs/python/[email protected]/docs/conf.py:11 
with open(os.path.join(_BASE_DIR, "src", "packaging", "__init__.py")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca81623bbb812acf — Filesystem access.
pkgs/python/[email protected]/src/packaging/_manylinux.py:34 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f709d4c41c787170 — Filesystem access.
pkgs/python/[email protected]/src/packaging/_musllinux.py:46 
        with open(executable, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pandas

python dependency
expand_more 28 low-confidence finding(s)
low env_fs dependency Excluded from app score #75a6810be4817e3a — Filesystem access.
pkgs/python/[email protected]/generate_pxi.py:8 
    with open(pxifile, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #975c2f83fd4393d1 — Filesystem access.
pkgs/python/[email protected]/generate_pxi.py:12 
    with open(outfile, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1893fff0c3bf883e — Environment-variable access.
pkgs/python/[email protected]/generate_version.py:25 
    if os.environ.get("MESON_DIST_ROOT"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #848fd488df4738f8 — Environment-variable access.
pkgs/python/[email protected]/generate_version.py:26 
        path = os.path.join(os.environ.get("MESON_DIST_ROOT"), path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c768a1c7e1d24dd — Filesystem access.
pkgs/python/[email protected]/generate_version.py:27 
    with open(path, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5bf94bf693b2b21 — Environment-variable access.
pkgs/python/[email protected]/pandas/_testing/contexts.py:76 
                    del os.environ["TZ"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e57375ca5c94573 — Environment-variable access.
pkgs/python/[email protected]/pandas/_testing/contexts.py:80 
                os.environ["TZ"] = tz

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ed86a7006a3f17c — Environment-variable access.
pkgs/python/[email protected]/pandas/_testing/contexts.py:85 
    orig_tz = os.environ.get("TZ")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc4eb286a17be9a0 — Filesystem access.
pkgs/python/[email protected]/pandas/_version.py:159 
        with open(versionfile_abs, encoding="utf-8") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d78ae5684cbd3794 — Environment-variable access.
pkgs/python/[email protected]/pandas/_version.py:264 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3aefe3b7d21ff53e — Environment-variable access.
pkgs/python/[email protected]/pandas/compat/__init__.py:154 
    return os.environ.get("PANDAS_CI", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb390a79a6fbde13 — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:425 
        if os.environ.get("PANDAS_COPY_ON_WRITE", "0") == "warn"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10130b95b01d623d — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:426 
        else os.environ.get("PANDAS_COPY_ON_WRITE", "1") == "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f0850d116b4fb4c — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:878 
        False if os.environ.get("PANDAS_FUTURE_INFER_STRING", "1") == "0" else True,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #502e0526aec7b11a — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:895 
        os.environ.get("PANDAS_FUTURE_DISTINGUISH_NAN_AND_NA", "0") == "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ebaf1f347991f81 — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:906 
        False if os.environ.get("PANDAS_FUTURE_PYTHON_SCALARS", "0") == "0" else True,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54f84ff6eb222435 — Filesystem access.
pkgs/python/[email protected]/pandas/core/series.py:1573 
            with open(buf, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c50a825077f0ac5b — Environment-variable access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:74 
HAS_DISPLAY = os.getenv("DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dce28cdf890af787 — Filesystem access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:302 
        with open("/dev/clipboard", "w", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b0085fd0f758a73 — Filesystem access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:306 
        with open("/dev/clipboard", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48a4244f7d5ed257 — Environment-variable access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:569 
        if os.environ.get("WAYLAND_DISPLAY") and _executable_exists("wl-copy"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca6a5bbc5abd190b — Filesystem access.
pkgs/python/[email protected]/pandas/io/common.py:930 
            handle = open(
                handle,
                ioargs.mode,
                encoding=ioargs.encoding,
                errors=errors,
                newline="",
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8420efa5360faf75 — Filesystem access.
pkgs/python/[email protected]/pandas/io/common.py:939 
            handle = open(handle, ioargs.mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c356fe4785e8c69f — Filesystem access.
pkgs/python/[email protected]/pandas/io/common.py:1192 
        handle = open(handle, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38813208c8f1e8d1 — Filesystem access.
pkgs/python/[email protected]/pandas/io/formats/format.py:1076 
        with open(buf, "w", encoding=encoding, newline="") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c2b22621e671dbc — Environment-variable access.
pkgs/python/[email protected]/pandas/util/_print_versions.py:57 
        "LC_ALL": os.environ.get("LC_ALL"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbc6b04267bbbee9 — Environment-variable access.
pkgs/python/[email protected]/pandas/util/_print_versions.py:58 
        "LANG": os.environ.get("LANG"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5101b73cbcd054f1 — Filesystem access.
pkgs/python/[email protected]/pandas/util/_print_versions.py:148 
            with open(as_json, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

protobuf

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #fd80493a1febd85b — Environment-variable access.
pkgs/python/[email protected]/google/protobuf/internal/api_implementation.py:65 
_implementation_type = os.getenv('PROTOCOL_BUFFERS_PYTHON_IMPLEMENTATION',
                                 _implementation_type)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8921b6ba94ea8065 — Environment-variable access.
pkgs/python/[email protected]/google/protobuf/runtime_version.py:71 
  disable_flag = os.getenv('TEMPORARILY_DISABLE_PROTOBUF_VERSION_CHECK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #292b3d02c27741cd — Filesystem access.
pkgs/python/[email protected]/setup.py:28 
  with open(os.path.join('google', 'protobuf', '__init__.py')) as version_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pydeck

python dependency
expand_more 13 low-confidence finding(s)
low env_fs tooling reachable #b623851e4ae1497a — Environment-variable access.
pkgs/python/[email protected]/examples/terrain_layer.py:12 
MAPBOX_API_KEY = os.environ.get("MapboxAccessToken") or os.environ.get("MAPBOX_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32ec00d0f8691d2e — Environment-variable access.
pkgs/python/[email protected]/pydeck/bindings/deck.py:172 
                    attr_value = os.getenv(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04f3238a74d95199 — Environment-variable access.
pkgs/python/[email protected]/pydeck/io/html.py:42 
    dev_port = os.getenv("PYDECK_DEV_PORT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e8c5e4837b598b5 — Filesystem access.
pkgs/python/[email protected]/pydeck/io/html.py:51 
        with open(join(dirname(__file__), RELPATH_TO_BUNDLE), "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c8321a18031c222 — Filesystem access.
pkgs/python/[email protected]/pydeck/io/html.py:156 
        with open(filename, "w+", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1451f1b23573f0f8 — Filesystem access.
pkgs/python/[email protected]/pydeck/types/image.py:50 
            with open(os.path.expanduser(self.path), "rb") as img_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0956ffc333b75fa — Filesystem access.
pkgs/python/[email protected]/setup.py:20 
with open(os.path.join(here, "pydeck", "_version.py")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3791aa9b2529a12c — Filesystem access.
pkgs/python/[email protected]/setup.py:25 
    return open(os.path.join(here, *parts), "r").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6459513bd1437c04 — Environment-variable access.
pkgs/python/[email protected]/setup.py:32 
log.info("$PATH=%s" % os.environ["PATH"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38e77b33e166e59c — Environment-variable access.
pkgs/python/[email protected]/setup.py:41 
    [os.path.join(PATH_TO_REPO_ROOT, "node_modules", ".bin"), os.environ.get("PATH", os.defpath)]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc5e5cf38f078b23 — Filesystem access.
pkgs/python/[email protected]/setup.py:100 
            check_call(["npm", "--version"], stdout=open(os.devnull, "wb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbc4157b5e02b4ac — Filesystem access.
pkgs/python/[email protected]/setup.py:101 
            check_call(["yarn", "--version"], stdout=open(os.devnull, "wb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07302221e59c9e35 — Environment-variable access.
pkgs/python/[email protected]/setup.py:124 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

python-multipart

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #a13701c3c29579fa — Filesystem access.
pkgs/python/[email protected]/python_multipart/multipart.py:516 
                tmp_file = open(path, "w+b")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

requests

python dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #ba1cbdd568f5acf6 — Environment-variable access.
pkgs/python/[email protected]/src/requests/sessions.py:857 
                    os.environ.get("REQUESTS_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c779f171477370fd — Environment-variable access.
pkgs/python/[email protected]/src/requests/sessions.py:858 
                    or os.environ.get("CURL_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad00c1681e353996 — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:239 
    netrc_file = os.environ.get("NETRC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #093e886e26892b2d — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:798 
        old_value = os.environ.get(env_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ad2a32f082412d1 — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:799 
        os.environ[env_name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d084a68cae7d5426 — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:805 
                del os.environ[env_name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef1982fd8d650e42 — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:807 
                os.environ[env_name] = old_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d40bc7a02736953a — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:820 
        return os.environ.get(key) or os.environ.get(key.upper())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

starlette

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #112f4de190859485 — Environment-variable access.
pkgs/python/[email protected]/starlette/config.py:19 
    def __init__(self, environ: MutableMapping[str, str] = os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c167bd2d7440e31 — Filesystem access.
pkgs/python/[email protected]/starlette/config.py:113 
        with open(file_name, encoding=encoding) as input_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

toml

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #8f4aadeaf8aa8bbc — Filesystem access.
pkgs/python/[email protected]/setup.py:8 
with open("README.rst") as readme_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4ade39d125a7103 — Filesystem access.
pkgs/python/[email protected]/toml/decoder.py:133 
        with io.open(_getpath(f), encoding='utf-8') as ffile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

typing-extensions

python dependency
expand_more 7 low-confidence finding(s)
low env_fs dependency Excluded from app score #6c04ce0126ab6eb7 — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:1698 
            Path(tempdir, "ann_module.py").write_text(ANN_MODULE_SOURCE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a685eb2395329674 — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:1699 
            Path(tempdir, "ann_module2.py").write_text(ANN_MODULE_2_SOURCE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64d704c4f97a6564 — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:1700 
            Path(tempdir, "ann_module3.py").write_text(ANN_MODULE_3_SOURCE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ed87ddde13c0896 — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:8783 
            Path(tempdir, "inspect_stock_annotations.py").write_text(STOCK_ANNOTATIONS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5a54868cf4d3ab8 — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:8784 
            Path(tempdir, "inspect_stringized_annotations.py").write_text(STRINGIZED_ANNOTATIONS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80cec39e7aedd4a2 — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:8785 
            Path(tempdir, "inspect_stringized_annotations_2.py").write_text(STRINGIZED_ANNOTATIONS_2)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a336b85ec2977096 — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:9234 
            Path(tempdir, "inspect_stringized_annotations_pep_695.py").write_text(STRINGIZED_ANNOTATIONS_PEP_695)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

uvicorn

python dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #adbceddc5d60afee — Environment-variable access.
pkgs/python/[email protected]/uvicorn/config.py:351 
        if workers is None and "WEB_CONCURRENCY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d198f4954da70789 — Environment-variable access.
pkgs/python/[email protected]/uvicorn/config.py:352 
            self.workers = int(os.environ["WEB_CONCURRENCY"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01dad4c9aae18ddd — Environment-variable access.
pkgs/python/[email protected]/uvicorn/config.py:356 
            self.forwarded_allow_ips = os.environ.get("FORWARDED_ALLOW_IPS", "127.0.0.1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b52412462e743dc — Filesystem access.
pkgs/python/[email protected]/uvicorn/config.py:393 
                with open(self.log_config) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef4c50a2796c8ef1 — Filesystem access.
pkgs/python/[email protected]/uvicorn/config.py:404 
                with open(self.log_config) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

vega-datasets

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #d92d78907016ddda — Filesystem access.
pkgs/python/[email protected]/setup.py:13 
    with io.open(path, encoding=encoding) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

websockets

python dependency
expand_more 24 low-confidence finding(s)
low env_fs dependency Excluded from app score #2b780a9cfb624e06 — Filesystem access.
pkgs/python/[email protected]/setup.py:10 
exec((root_dir / "src" / "websockets" / "version.py").read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fd1b6a251155cac — Filesystem access.
pkgs/python/[email protected]/setup.py:16 
    (root_dir / "README.rst").read_text(encoding="utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #353935ddea30097c — Environment-variable access.
pkgs/python/[email protected]/setup.py:22 
if os.environ.get("BUILD_EXTENSION") == "no":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dab89ffdaf6a074f — Environment-variable access.
pkgs/python/[email protected]/setup.py:29 
            optional=os.environ.get("BUILD_EXTENSION") != "yes",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aebe7f5ffa8798d3 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/asyncio/client.py:39 
MAX_REDIRECTS = int(os.environ.get("WEBSOCKETS_MAX_REDIRECTS", "10"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cadb82c59bfe88b0 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/client.py:353 
BACKOFF_INITIAL_DELAY = float(os.environ.get("WEBSOCKETS_BACKOFF_INITIAL_DELAY", "5"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1cbe24c3f103e3b — Environment-variable access.
pkgs/python/[email protected]/src/websockets/client.py:354 
BACKOFF_MIN_DELAY = float(os.environ.get("WEBSOCKETS_BACKOFF_MIN_DELAY", "3.1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fb62d9fd666cfae — Environment-variable access.
pkgs/python/[email protected]/src/websockets/client.py:355 
BACKOFF_MAX_DELAY = float(os.environ.get("WEBSOCKETS_BACKOFF_MAX_DELAY", "90.0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73c73d467225a664 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/client.py:356 
BACKOFF_FACTOR = float(os.environ.get("WEBSOCKETS_BACKOFF_FACTOR", "1.618"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #340aec6a08208eb0 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/frames.py:148 
    MAX_LOG_SIZE = int(os.environ.get("WEBSOCKETS_MAX_LOG_SIZE", "75"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89a3b1b872cac3dc — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:27 
USER_AGENT = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d04882cf30a425a — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:27 
USER_AGENT = os.environ.get(
    "WEBSOCKETS_USER_AGENT",
    f"Python/{PYTHON_VERSION} websockets/{websockets_version}",
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abf6d7a37f0659ff — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:33 
SERVER = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1d10884c2183176 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:33 
SERVER = os.environ.get(
    "WEBSOCKETS_SERVER",
    f"Python/{PYTHON_VERSION} websockets/{websockets_version}",
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4ea6ad120f4bf3b — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:39 
MAX_NUM_HEADERS = int(os.environ.get("WEBSOCKETS_MAX_NUM_HEADERS", "128"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7771465b454a28d — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:43 
MAX_LINE_LENGTH = int(os.environ.get("WEBSOCKETS_MAX_LINE_LENGTH", "8192"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5bcd9fdebebd2fd — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:47 
MAX_BODY_SIZE = int(os.environ.get("WEBSOCKETS_MAX_BODY_SIZE", "1_048_576"))  # 1 MiB

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb22a4c90992ff50 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/client.py:417 
    MAX_REDIRECTS_ALLOWED = int(os.environ.get("WEBSOCKETS_MAX_REDIRECTS", "10"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebe29016d3d397f8 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/client.py:591 
    BACKOFF_INITIAL = float(os.environ.get("WEBSOCKETS_BACKOFF_INITIAL_DELAY", "5"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf159a64f642ffd1 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/client.py:592 
    BACKOFF_MIN = float(os.environ.get("WEBSOCKETS_BACKOFF_MIN_DELAY", "3.1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc310941b61b0ee3 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/client.py:593 
    BACKOFF_MAX = float(os.environ.get("WEBSOCKETS_BACKOFF_MAX_DELAY", "90.0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aaafe146eab4bcc9 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/client.py:594 
    BACKOFF_FACTOR = float(os.environ.get("WEBSOCKETS_BACKOFF_FACTOR", "1.618"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7cefc50d79e7ebff — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/http.py:13 
MAX_NUM_HEADERS = int(os.environ.get("WEBSOCKETS_MAX_NUM_HEADERS", "128"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90ad1f187ac9483e — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/http.py:14 
MAX_LINE_LENGTH = int(os.environ.get("WEBSOCKETS_MAX_LINE_LENGTH", "8192"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

yfinance

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #093388a7a0a69610 — Filesystem access.
pkgs/python/[email protected]/setup.py:16 
with open("yfinance/version.py") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d70ef46f2733b59 — Filesystem access.
pkgs/python/[email protected]/setup.py:25 
with io.open(path.join(here, 'README.md'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8f7794b9009d78e — Environment-variable access.
pkgs/python/[email protected]/yfinance/_http.py:19 
_DISABLE = os.environ.get("YF_DISABLE_CURL_CFFI", "").lower() in ("1", "true", "yes")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • pillow prod — sdist exceeds byte cap