Close Open Privacy Scan

link https://github.com/microsoft/DeepSpeed
bolt Snapshot: commit 000ca19
science engine v1.14
schedule 2026-07-16T17:07:33.721568+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

App Privacy Score

97 /100
Low privacy risk

Low risk · 305 finding(s)

Dependency score: 100 (Low risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 0 medium 305 low
First-party packages: 1
Dependency packages: 0
Ecosystem: python

swap_horiz External domains

arxiv.orgazure.github.iodeepspeed.aideepspeed.readthedocs.iodiscuss.pytorch.orgdocs.nvidia.comdocs.wandb.aidoi.orgdownload.pytorch.orggithub.comhuggingface.cokellerjordan.github.iokexue.fmnedbatchelder.comopenreview.netpytorch.orgstackoverflow.comtridao.mewww.apache.orgwww.comet.comwww.deepspeed.aiwww8.cs.umu.se

</> First-Party Code

first-party (python)

python first-party
expand_more 305 low-confidence finding(s)
low env_fs production #a56c94a273b09483 — Environment-variable access.
repo/accelerator/cpu_accelerator.py:65 
        return os.environ.get('LOCAL_RANK', 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5c9dc5d0ca8f16e — Environment-variable access.
repo/accelerator/cpu_accelerator.py:71 
        device_count = int(os.environ.get('LOCAL_SIZE', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5eb065b00b3b101 — Environment-variable access.
repo/accelerator/cuda_accelerator.py:187 
        if "CUDA_VISIBLE_DEVICES" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ae1eadc4c2b896f — Environment-variable access.
repo/accelerator/cuda_accelerator.py:188 
            ids = list(map(int, os.environ.get("CUDA_VISIBLE_DEVICES", "").split(",")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f652f0e0e798b4fc — Environment-variable access.
repo/accelerator/cuda_accelerator.py:214 
        allow_deprecated_fp16 = os.environ.get('DS_ALLOW_DEPRECATED_FP16', '0') == '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d6ae9474b34d075 — Environment-variable access.
repo/accelerator/hpu_accelerator.py:37 
            if key not in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73c8e495f0e29135 — Environment-variable access.
repo/accelerator/hpu_accelerator.py:38 
                os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b25b58521a536ef6 — Environment-variable access.
repo/accelerator/real_accelerator.py:59 
    if "DS_ACCELERATOR" in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a49807463d40d4a — Environment-variable access.
repo/accelerator/real_accelerator.py:60 
        accelerator_name = os.environ["DS_ACCELERATOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa9575d362c79cc7 — Environment-variable access.
repo/bin/ds_bench:11 
if not all(map(lambda v: v in os.environ, required_env)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ec54e9f9dbb083b — Filesystem access.
repo/bin/ds_elastic:14 
    ds_config = json.load(open(args.config, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be9ed7d4ce8446a7 — Filesystem access.
repo/ci/test_tests_fetcher.py:91 
        p.write_text(content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bdc5fa0bce05249a — Filesystem access.
repo/ci/tests_fetcher.py:351 
            tree = ast.parse(path.read_text(encoding="utf-8"), filename=str(path))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #448786e267ec7823 — Environment-variable access.
repo/ci/tests_fetcher.py:622 
    gh_out = os.environ.get("GITHUB_OUTPUT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b7fd83475bf3f86 — Filesystem access.
repo/ci/tests_fetcher.py:625 
    with open(gh_out, "a", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e4756536895fa49 — Environment-variable access.
repo/ci/tests_fetcher.py:633 
    path = os.environ.get("GITHUB_STEP_SUMMARY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b67e6f2e0d27b127 — Filesystem access.
repo/ci/tests_fetcher.py:661 
        with open(path, "a", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fb39fe2c394b49c — Filesystem access.
repo/ci/tests_fetcher.py:725 
    out_path.write_text("\n".join(targets) + ("\n" if targets else ""), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fcd6c43c5706d547 — Environment-variable access.
repo/ci/torch_latest.py:56 
    selected_preset = os.environ.get("MODAL_TORCH_PRESET") or DEFAULT_MODAL_TORCH_PRESET

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ff7b8576c9bd213 — Environment-variable access.
repo/ci/torch_latest.py:70 
    transformers_source = os.environ.get("MODAL_TRANSFORMERS_SOURCE") or DEFAULT_MODAL_TRANSFORMERS_SOURCE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5489d67cf9f1414 — Environment-variable access.
repo/ci/torch_latest.py:77 
    transformers_ref = os.environ.get("MODAL_TRANSFORMERS_REF") or ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3da1ea1d8261d057 — Environment-variable access.
repo/ci/torch_latest.py:139 
    env_path = os.environ.get("DS_TEST_LIST_FILE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b52b4c8f440731a — Filesystem access.
repo/ci/torch_latest.py:144 
        targets = [line.strip() for line in list_file.read_text().splitlines() if line.strip()]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84c87ca0fa174cd9 — Environment-variable access.
repo/ci/torch_latest.py:206 
    selected_tests = os.environ.get("DS_SELECTED_TESTS", DEFAULT_TEST_TARGET).split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca2c6770a4f6c234 — Filesystem access.
repo/csrc/aio/py_test/aio_bench_perf_sweep.py:107 
    with open(sweep_config_json) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10a153d9eee22fec — Filesystem access.
repo/csrc/aio/py_test/ds_aio_job.py:34 
            self.output_fd = open(self.output_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5384187728fbdd8 — Filesystem access.
repo/csrc/aio/py_test/parse_aio_stats.py:90 
    with open(file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3aa6d3f93c51eb96 — Environment-variable access.
repo/deepspeed/__init__.py:14 
os.environ.setdefault("PYTORCH_NVML_BASED_CUDA_CHECK", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6767ca0b7e680aac — Filesystem access.
repo/deepspeed/__init__.py:386 
        with open(config, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3761bb601d9884f — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:136 
            with open(os.path.join(self.results_dir, 'summary.txt'), 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef607a283748698d — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:152 
            with open(os.path.join(self.results_dir, 'summary.txt'), 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #346d2fbcdbc5074b — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:184 
                return json.load(open(user_config_file, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cbb24e70c072167 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:332 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e7640b13d13d16c — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:337 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1491db329ae4e157 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:342 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b9f5eab26f0958d — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:347 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9467e30b224e5029 — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:408 
            self.mlflow_parent_id = os.environ['MLFLOW_RUN_ID']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04cf2a17193c4cc3 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:689 
        with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f433cab8b5541cf4 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:704 
            with open(model_info_path, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1cb36a441c537af — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:768 
            with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa9774353497ea8d — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:782 
                    with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbcf53cdfa56258d — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:789 
                            os.environ.pop('MLFLOW_RUN_ID')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04464abf161acbf5 — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:794 
                            os.environ['MLFLOW_RUN_ID'] = self.mlflow_parent_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2d8eab7595d696a — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:828 
                with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46077c87ee98ea81 — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:832 
                        os.environ.pop('MLFLOW_RUN_ID')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #353344514355c815 — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:837 
                        os.environ['MLFLOW_RUN_ID'] = self.mlflow_parent_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e95136474a615ac6 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1065 
        with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adec5cc4ef51b0e5 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1083 
            with open(os.path.join(exp_dir, "cmd.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #456d4f8f9b8b3319 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1086 
            ds_config = hjson.load(open(os.path.join(exp_dir, "ds_config.json"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ddb3aca98f285459 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1090 
            json.dump(ds_config, open(ds_config_path, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8176fc06130500ca — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1093 
            with open(cmd_path, "w") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c2b6608f7e08c06 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:64 
                with open(exp_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ca48a59347416ec — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:207 
            with open(path, 'a') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a105a1f393b00386 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:232 
                with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bdc0ad404f94f6b — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:291 
    if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71022f0d64451203 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:292 
        infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4f686e7e65f6d77 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:293 
    elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b04bd80c3fae162 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:294 
        infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1343a43bef75a14 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:303 
    if "USER" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4528b395f85bee33 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:304 
        user = os.environ["USER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cb165a25b7ecd88 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:341 
    with open(exp["ds_config_path"], "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32106e6e9cb771f0 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:348 
    with open(os.path.join(exp_dir, "exp.json"), "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db9835599361ce7e — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:374 
    with open(os.path.join(exp_dir, "cmd.txt"), "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3015e4f5bdd71458 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:384 
    with open(os.path.join(exp_dir, "stdout.log"), "wb") as out, open(os.path.join(exp_dir, "stderr.log"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11aaf05d6ce3947c — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:384 
    with open(os.path.join(exp_dir, "stdout.log"), "wb") as out, open(os.path.join(exp_dir, "stderr.log"),
                                                                      "wb") as err:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #772b894839374967 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:402 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29ffadeb07793172 — Filesystem access.
repo/deepspeed/autotuning/tuner/model_based_tuner.py:136 
            with open(p, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd06ed2ee13b785d — Filesystem access.
repo/deepspeed/autotuning/utils.py:20 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98371f671c002b87 — Filesystem access.
repo/deepspeed/autotuning/utils.py:32 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01ca21add377f73b — Filesystem access.
repo/deepspeed/autotuning/utils.py:157 
    with open(hostfile_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19cc4c648fde015c — Filesystem access.
repo/deepspeed/autotuning/utils.py:409 
        with open(exp_path, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2ad30949bd1ea40 — Filesystem access.
repo/deepspeed/checkpoint/ds_to_universal.py:904 
    with open(latest_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c604c854493a105 — Environment-variable access.
repo/deepspeed/comm/comm.py:155 
    rank = int(os.getenv('RANK', '-1'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e575607aacff86f0 — Environment-variable access.
repo/deepspeed/comm/comm.py:156 
    size = int(os.getenv('WORLD_SIZE', '-1'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e727cdc83312ed9 — Environment-variable access.
repo/deepspeed/comm/comm.py:838 
        if auto_mpi_discovery and not all(map(lambda v: v in os.environ, required_env)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4abe3e017213300 — Environment-variable access.
repo/deepspeed/comm/comm.py:849 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #141083f782a74ff6 — Environment-variable access.
repo/deepspeed/comm/comm.py:855 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cabffe84bda0482 — Environment-variable access.
repo/deepspeed/comm/comm.py:888 
    os.environ['RANK'] = str(rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27256e19784ccdf7 — Environment-variable access.
repo/deepspeed/comm/comm.py:889 
    os.environ['WORLD_SIZE'] = str(world_size)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74bfcbdad05af7ab — Environment-variable access.
repo/deepspeed/comm/comm.py:890 
    os.environ['LOCAL_RANK'] = str(local_rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4a63c5a2d851144 — Environment-variable access.
repo/deepspeed/comm/comm.py:891 
    os.environ['MASTER_ADDR'] = master_addr

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2277a563f4f017a — Environment-variable access.
repo/deepspeed/comm/comm.py:892 
    os.environ['MASTER_PORT'] = str(distributed_port)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f42aab8f82b39672 — Environment-variable access.
repo/deepspeed/comm/comm.py:897 
            format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94893a3b8f885b4e — Environment-variable access.
repo/deepspeed/comm/comm.py:898 
                   os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #854ea62f889b516a — Environment-variable access.
repo/deepspeed/comm/comm.py:908 
    return 'AZUREML_EXPERIMENT_ID' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed36db701140cf79 — Environment-variable access.
repo/deepspeed/comm/comm.py:913 
    return 'SM_TRAINING_ENV' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fb741b1ee54f9d0 — Environment-variable access.
repo/deepspeed/comm/comm.py:918 
    return 'DLTS_JOB_ID' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c727e6252d63cb5 — Environment-variable access.
repo/deepspeed/comm/comm.py:926 
    os.environ["RANK"] = os.environ["OMPI_COMM_WORLD_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d88a032bf724a585 — Environment-variable access.
repo/deepspeed/comm/comm.py:927 
    os.environ["WORLD_SIZE"] = os.environ["OMPI_COMM_WORLD_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a95b7bcd48bf01a4 — Environment-variable access.
repo/deepspeed/comm/comm.py:928 
    single_node = int(os.environ["OMPI_COMM_WORLD_LOCAL_SIZE"]) == int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f731b70bf3d4b2b — Environment-variable access.
repo/deepspeed/comm/comm.py:931 
        master_node_params = os.environ["AZ_BATCH_MASTER_NODE"].split(":")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7983c7c5a74cb4a — Environment-variable access.
repo/deepspeed/comm/comm.py:932 
        os.environ["MASTER_ADDR"] = master_node_params[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c064a91306314ad1 — Environment-variable access.
repo/deepspeed/comm/comm.py:934 
        if "MASTER_PORT" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5447b4a43cd20c30 — Environment-variable access.
repo/deepspeed/comm/comm.py:935 
            os.environ["MASTER_PORT"] = str(master_port)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77953a60bcfe035a — Environment-variable access.
repo/deepspeed/comm/comm.py:937 
        os.environ["MASTER_ADDR"] = os.environ["AZ_BATCHAI_MPI_MASTER_NODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #309e7a08b5a87fac — Environment-variable access.
repo/deepspeed/comm/comm.py:938 
        os.environ["MASTER_PORT"] = DEFAULT_AML_MASTER_PORT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab4599a51a6e6c3e — Environment-variable access.
repo/deepspeed/comm/comm.py:941 
        utils.logger.info("NCCL_SOCKET_IFNAME original value = {}".format(os.environ["NCCL_SOCKET_IFNAME"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e80d49ff47106221 — Environment-variable access.
repo/deepspeed/comm/comm.py:943 
    os.environ["NCCL_SOCKET_IFNAME"] = DEFAULT_AML_NCCL_SOCKET_IFNAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ff363d5698d0770 — Environment-variable access.
repo/deepspeed/comm/comm.py:944 
    os.environ['LOCAL_RANK'] = os.environ["OMPI_COMM_WORLD_LOCAL_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7b226232416d57a — Environment-variable access.
repo/deepspeed/comm/comm.py:949 
            .format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d50506afd4f79aa — Environment-variable access.
repo/deepspeed/comm/comm.py:950 
                    os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac6ce8dd3d896f58 — Environment-variable access.
repo/deepspeed/comm/comm.py:956 
    os.environ["RANK"] = os.environ["OMPI_COMM_WORLD_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae6a00ef55af5618 — Environment-variable access.
repo/deepspeed/comm/comm.py:957 
    os.environ['LOCAL_RANK'] = os.environ["OMPI_COMM_WORLD_LOCAL_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9aa00e2a22b79ad1 — Environment-variable access.
repo/deepspeed/comm/comm.py:958 
    os.environ["WORLD_SIZE"] = os.environ["OMPI_COMM_WORLD_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb7e7bd46214b57b — Environment-variable access.
repo/deepspeed/comm/comm.py:963 
            .format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9cdb051366cedd4c — Environment-variable access.
repo/deepspeed/comm/comm.py:964 
                    os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #136615ceedc4c9fe — Environment-variable access.
repo/deepspeed/comm/mori.py:103 
    return os.environ.get("DS_SDMA_ALLGATHER", "0") in _TRUTHY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24dda94736b8dabd — Environment-variable access.
repo/deepspeed/comm/mori.py:107 
    raw = os.environ.get("DS_SDMA_ALLGATHER_MAX_NUMEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #338af74c577f6c18 — Environment-variable access.
repo/deepspeed/comm/mori.py:142 
    os.environ.setdefault("MORI_ENABLE_SDMA", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61f0993f68d63ac9 — Environment-variable access.
repo/deepspeed/comm/torch.py:175 
                local_rank = int(os.environ.get('LOCAL_RANK', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b1e2d2550de320d — Environment-variable access.
repo/deepspeed/comm/torch.py:211 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc2f6459f7dcfba8 — Environment-variable access.
repo/deepspeed/comm/torch.py:219 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c84d15242c889e46 — Environment-variable access.
repo/deepspeed/comm/torch.py:232 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fbd2e62a26ddda0 — Environment-variable access.
repo/deepspeed/comm/torch.py:245 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbe91aae940f3423 — Environment-variable access.
repo/deepspeed/comm/torch.py:271 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56ca5823180bc7bd — Environment-variable access.
repo/deepspeed/comm/utils.py:14 
    rank = os.environ.get('LOCAL_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e886e49938205e50 — Environment-variable access.
repo/deepspeed/comm/utils.py:17 
        rank = os.environ.get('OMPI_COMM_WORLD_LOCAL_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d389b00d9bf341d — Environment-variable access.
repo/deepspeed/comm/utils.py:29 
    rank = os.environ.get('RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2a6c9afb7c6738d — Environment-variable access.
repo/deepspeed/comm/utils.py:32 
        rank = os.environ.get('OMPI_COMM_WORLD_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b723eeea46a06f17 — Environment-variable access.
repo/deepspeed/comm/utils.py:43 
    size = os.environ.get('WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3d96ee8ec276507 — Environment-variable access.
repo/deepspeed/comm/utils.py:44 
    rank = os.environ.get('RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #699b284c20cb1142 — Environment-variable access.
repo/deepspeed/comm/utils.py:47 
        size = os.environ.get('OMPI_COMM_WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b94cf43f499853a — Environment-variable access.
repo/deepspeed/compile/profilers/comm_profile.py:157 
    local_rank = int(os.environ['LOCAL_RANK'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0a1c48903fd30de — Filesystem access.
repo/deepspeed/compile/util.py:358 
    with open(csv_filename, mode='w', newline='') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14478a4e1f1a7a12 — Filesystem access.
repo/deepspeed/compression/compress.py:24 
        return json.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de049c52ff212adf — Environment-variable access.
repo/deepspeed/constants.py:19 
default_pg_timeout = timedelta(minutes=int(os.getenv("DEEPSPEED_TIMEOUT", default=30)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb565c44e6641b2e — Environment-variable access.
repo/deepspeed/elasticity/elastic_agent.py:96 
                "NCCL_ASYNC_ERROR_HANDLING": os.getenv("NCCL_ASYNC_ERROR_HANDLING", str(1)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4134b49874ef7010 — Environment-variable access.
repo/deepspeed/elasticity/elastic_agent.py:99 
            if "OMP_NUM_THREADS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53b376212b3e61e6 — Environment-variable access.
repo/deepspeed/elasticity/elastic_agent.py:100 
                worker_env_ds["OMP_NUM_THREADS"] = os.environ["OMP_NUM_THREADS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef443138cda1511e — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:212 
    if DEEPSPEED_ELASTICITY_CONFIG in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aebc4c23ce0b91e6 — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:213 
        scheduler_elastic_config_dict = json.loads(os.environ[DEEPSPEED_ELASTICITY_CONFIG])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8491a88bfb1fbad5 — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:319 
            if "WORLD_SIZE" in os.environ and \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #abcdbdaae6f1773a — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:320 
                os.getenv('WORLD_SIZE').isnumeric():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91ac1018639530bc — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:321 
                current_num_gpus = int(os.getenv('WORLD_SIZE'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a427895b27eaaf2c — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:323 
                WORLD_SIZE = os.getenv('WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f52a30e44cb74dd0 — Environment-variable access.
repo/deepspeed/env_report.py:78 
    if "ASCEND_HOME_PATH" in os.environ or os.path.exists(os.environ["ASCEND_HOME_PATH"]):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #334567476157f607 — Environment-variable access.
repo/deepspeed/env_report.py:79 
        return os.environ["ASCEND_HOME_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50c6bf10140940ba — Filesystem access.
repo/deepspeed/env_report.py:95 
            with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfb40df47fa16dd7 — Filesystem access.
repo/deepspeed/git_version_info.py:13 
        version = open('version.txt', 'r').read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4bfde900be35efb — Environment-variable access.
repo/deepspeed/inference/engine.py:251 
            local_rank = int(os.getenv('LOCAL_RANK', '0'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a43ea461f936c8e — Filesystem access.
repo/deepspeed/inference/engine.py:421 
                    with open(latest_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0138310ca315219d — Filesystem access.
repo/deepspeed/inference/v2/checkpoint/huggingface_engine.py:94 
            param_map = json.load(open(model_param_json, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3476ce1cccebbbad — Filesystem access.
repo/deepspeed/inference/v2/engine_factory.py:55 
    metadata = json.load(open(metadata_filename, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fb695e8bc9518df — Filesystem access.
repo/deepspeed/inference/v2/engine_factory.py:65 
    model_config = pickle.load(open(os.path.join(path, "ds_model_config.pkl"), "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a262caffd024197 — Environment-variable access.
repo/deepspeed/inference/v2/engine_v2.py:98 
        local_rank = int(os.getenv("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee5bc863a5801385 — Filesystem access.
repo/deepspeed/inference/v2/engine_v2.py:265 
        json.dump(self._model.flattened_param_metadata.json(), open(metadata_file_name, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9349b0e872d56c9 — Filesystem access.
repo/deepspeed/inference/v2/engine_v2.py:268 
            pickle.dump(self._model._config, open(os.path.join(save_path, "ds_model_config.pkl"), "wb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #402d176eacfb4a38 — Filesystem access.
repo/deepspeed/inference/v2/model_implementations/inference_policy_base.py:209 
            metadata = json.load(open(metadata_path, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #517f6975793b8449 — Filesystem access.
repo/deepspeed/io/fast_file_writer.py:166 
        fp = open(self._file_path, 'ab')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a95918e149679a7b — Filesystem access.
repo/deepspeed/io/mock_file_writer.py:15 
        self._fp = open(file_path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06544acc10532b35 — Filesystem access.
repo/deepspeed/io/py_file_writer.py:15 
        self._fp = open(file_path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #250886090af56ae0 — Environment-variable access.
repo/deepspeed/launcher/launch.py:147 
    current_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66bda63af06317fa — Filesystem access.
repo/deepspeed/launcher/launch.py:202 
        with open(pid_file, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #afc028894110386f — Filesystem access.
repo/deepspeed/launcher/launch.py:212 
        with open(DLTS_POD_ENV_PATH) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5976f1ec261eca8c — Filesystem access.
repo/deepspeed/launcher/launch.py:267 
                log_fd = open(log_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2a5b1aae6b7a660 — Environment-variable access.
repo/deepspeed/launcher/launch.py:304 
        run_id = os.environ.get("ELASTIC_RUN_ID", ELASTIC_TRAINING_ID_DEFAULT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d1f334cedb3e56a — Environment-variable access.
repo/deepspeed/launcher/launcher_helper.py:84 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c834c7771ff33cc — Filesystem access.
repo/deepspeed/launcher/multinode_runner.py:453 
        with open(MVAPICH_TMP_HOSTFILE, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1aa142640e95b127 — Environment-variable access.
repo/deepspeed/launcher/runner.py:39 
DEEPSPEED_ENVIRONMENT_NAME = os.getenv("DS_ENV_FILE", ".deepspeed_env")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25de06d78b0652d9 — Filesystem access.
repo/deepspeed/launcher/runner.py:237 
    with open(hostfile_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fec63f377cfca9ed — Environment-variable access.
repo/deepspeed/launcher/runner.py:450 
    visible_devices = os.environ.get(visible_devices_env, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #389c56341632f816 — Environment-variable access.
repo/deepspeed/launcher/runner.py:460 
        del os.environ[visible_devices_env]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4f3a021e1fc9dc8 — Environment-variable access.
repo/deepspeed/launcher/runner.py:480 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4265c3b0c19dd5b4 — Filesystem access.
repo/deepspeed/launcher/runner.py:620 
                with open(environ_file, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3fd86809fcd35e4 — Filesystem access.
repo/deepspeed/module_inject/replace_module.py:542 
            with open(f"{config.save_mp_checkpoint_path}/ds_inference_config.json", "w") as cfg:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e952ab4325086a2 — Environment-variable access.
repo/deepspeed/moe/ep_tp_dispatch.py:168 
    if os.environ.get("AUTOEP_FOLDING_DEBUG_PAYLOAD", "0") not in {"1", "true", "TRUE", "yes"}:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #680558276df6f13a — Environment-variable access.
repo/deepspeed/moe/ep_tp_dispatch.py:185 
    sample_limit = int(os.environ.get("AUTOEP_FOLDING_DEBUG_SAMPLE_LIMIT", "12"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #634ede49b73310b0 — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:28 
                if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd80b12cb1f5aa2c — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:29 
                    infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25d395976ec49619 — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:30 
                elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5e76b42394217f5 — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:31 
                    infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27a774553fe68d99 — Filesystem access.
repo/deepspeed/monitor/csv_monitor.py:62 
                with open(fname, 'a+') as csv_monitor_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f32025eb4718d1fc — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:34 
                if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d57827075095829f — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:35 
                    infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43f33c99ee4fd225 — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:36 
                elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3784d2878a55065b — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:37 
                    infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4414075a8c93fd3 — Filesystem access.
repo/deepspeed/nvme/ds_aio_job.py:34 
            self.output_fd = open(self.output_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b74c8fa28f2c1c7 — Filesystem access.
repo/deepspeed/nvme/parse_nvme_stats.py:90 
    with open(file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af7fbf2c1c2f7ded — Filesystem access.
repo/deepspeed/nvme/perf_run_sweep.py:130 
    with open(sweep_config_json) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e43b9fbab0f70427 — Filesystem access.
repo/deepspeed/ops/sparse_attention/trsrc/__init__.py:36 
    with open(fname, 'r') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86b4e550e7896caa — Filesystem access.
repo/deepspeed/ops/transformer/inference/config.py:131 
        with open(json_file, "r", encoding='utf-8') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4b9840d883fb25f — Filesystem access.
repo/deepspeed/ops/transformer/inference/moe_inference.py:104 
        with open(json_file, "r", encoding='utf-8') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0cfcb2f6df2321f — Environment-variable access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:64 
        tt_home = os.environ.get('TRITON_HOME') or os.path.join(Path.home(), ".triton")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #862e89426274677d — Environment-variable access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:98 
        self.cache_dir = os.environ.get('TRITON_CACHE_DIR', TritonCacheDir.default_cache_dir())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf20123ae1d37751 — Filesystem access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:112 
                with open(self.file_path + ".tmp", 'wb') as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #890f783897e73179 — Filesystem access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:118 
            with open(self.file_path, 'rb') as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #036691fd91272147 — Filesystem access.
repo/deepspeed/ops/transformer/transformer.py:138 
        with open(json_file, "r", encoding='utf-16') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #105449d11e271222 — Filesystem access.
repo/deepspeed/profiling/flops_profiler/profiler.py:307 
            f = open(output_file, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a69b20a03ecb7f4e — Filesystem access.
repo/deepspeed/runtime/config.py:669 
        self.data = json.load(open(filename, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3ef2081b2340c23 — Filesystem access.
repo/deepspeed/runtime/config.py:672 
        with open(filename, "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93087ca3c1b30e4c — Filesystem access.
repo/deepspeed/runtime/config.py:683 
            self._param_dict = hjson.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #267e5d2df93fc766 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:122 
                        with open(f"{metric_fname}_{m_value}.csv", 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9ea0200f9c30aa2 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:142 
                        with open(f"{metric_fname}_{m_value}.csv", 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b00ae76e762a81c — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:271 
                        with open(w_metric_to_sample_fname, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46545901ead6ed66 — Environment-variable access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:828 
        worker_id=int(os.environ['RANK']),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d070a898ab965889 — Environment-variable access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:829 
        num_workers=int(os.environ['WORLD_SIZE']),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51847237277f80ef — Environment-variable access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:838 
        device=f"cuda:{int(os.environ['LOCAL_RANK'])}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f75f00e244bcd5af — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:865 
            with open(os.path.join(da.save_path, path), 'rb') as f1, \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5600bfb8c219812 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:866 
                open(os.path.join(dda.save_path, path), 'rb') as f2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6af6ad17aeab5a19 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:46 
        with open(index_file_path(path), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8add6c41a70b1903 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:150 
        with open(index_file_path(path), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c580ba5b90c671e — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:166 
        self.data_file = open(data_file_path(path), 'rb', buffering=0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #594b5b47c447504a — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:275 
        self.out_file = open(out_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b519062db8be6c3 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:308 
        with open(data_file_path(another_file), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bcb311d9418406a4 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:318 
        index = open(index_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e6e5e84d506b388 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:332 
    with open(path, 'rb') as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7e30acf7963b71e — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:380 
                    self._file = open(path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #369254d7d73ea2b2 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:422 
            with open(path, 'rb') as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb51b51554422ced — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:578 
        self._data_file = open(out_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d8f5df527515680 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:618 
        with open(data_file_path(another_file), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2457b7a0d5bea3be — Environment-variable access.
repo/deepspeed/runtime/engine.py:1519 
        if "OMPI_COMM_WORLD_LOCAL_RANK" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69531701ea91b98a — Environment-variable access.
repo/deepspeed/runtime/engine.py:1520 
            ompi_local_rank = os.environ.get("OMPI_COMM_WORLD_LOCAL_RANK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6527b58498aa154a — Environment-variable access.
repo/deepspeed/runtime/engine.py:1521 
            local_rank = os.environ.get('LOCAL_RANK', ompi_local_rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37e525e65a3fbb23 — Environment-variable access.
repo/deepspeed/runtime/engine.py:1524 
            os.environ['LOCAL_RANK'] = local_rank

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #581c121d720a8e47 — Environment-variable access.
repo/deepspeed/runtime/engine.py:1526 
        self.local_rank = int(os.environ['LOCAL_RANK'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c5e230d4fb57677 — Environment-variable access.
repo/deepspeed/runtime/engine.py:1532 
        assert "LOCAL_RANK" in os.environ or "OMPI_COMM_WORLD_LOCAL_RANK" in os.environ, "DeepSpeed requires the LOCAL_RANK environment " \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0299682b638c489f — Environment-variable access.
repo/deepspeed/runtime/engine.py:1540 
                env_local_rank = int(os.environ.get("LOCAL_RANK"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d3cf53cea0fadb5 — Filesystem access.
repo/deepspeed/runtime/engine.py:4112 
                with open(latest_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0067e4b6ced0ff41 — Filesystem access.
repo/deepspeed/runtime/engine.py:4646 
                with open(os.path.join(save_dir, 'latest'), 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39fad60e67308655 — Filesystem access.
repo/deepspeed/runtime/engine.py:4664 
            with open(os.path.join(commit_info.save_dir, 'latest'), 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af54a9d1f7ef6eaa — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:71 
                                 local_rank=int(os.environ[LOCAL_RANK]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ab0f2424ee6b0f7 — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:76 
                                 num_machines=int(os.environ[CROSS_SIZE]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #492069d7773cb0ec — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:77 
                                 machine_rank=int(os.environ[CROSS_RANK]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2a89c3660305c1b — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:78 
                                 num_sockets=int(os.environ[CROSS_SIZE]) * SOCKETS_PER_MACHINE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #955063bfde5d336c — Environment-variable access.
repo/deepspeed/runtime/pipe/module.py:166 
        self.local_rank = int(os.environ.get("LOCAL_RANK", None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f9db563d0f7e760 — Filesystem access.
repo/deepspeed/runtime/state_dict_factory.py:26 
            with open(json_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c812cd74513e68f — Filesystem access.
repo/deepspeed/runtime/tensor_parallel/init_utils.py:24 
            return hjson.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #382030b99426d1ae — Environment-variable access.
repo/deepspeed/runtime/zenflow/zenflow_utils.py:119 
    os.environ['OMP_NUM_THREADS'] = str(len(zf_affinity))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d73f4ff3ea49aab — Environment-variable access.
repo/deepspeed/runtime/zenflow/zenflow_utils.py:188 
    os.environ['OMP_NUM_THREADS'] = str(len(pt_affinity))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54eb256d26a61efc — Environment-variable access.
repo/deepspeed/runtime/zero/mics_utils.py:62 
    ndevices_per_node = int(os.environ.get("NDEV_PER_NODE", get_accelerator().device_count()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1775947fd8185220 — Environment-variable access.
repo/deepspeed/runtime/zero/partition_parameters.py:1059 
        self.local_device = torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30e2b99889b644cb — Environment-variable access.
repo/deepspeed/runtime/zero/utils.py:77 
        device=torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"])),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1b1bdc426754936 — Environment-variable access.
repo/deepspeed/runtime/zero/utils.py:97 
        device=torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"])),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b271275c753b582 — Filesystem access.
repo/deepspeed/utils/debug.py:112 
    with open(__file__, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a58e3c29bcf72a6 — Filesystem access.
repo/deepspeed/utils/debug.py:149 
        fh = open(f"log_rank_{rank}.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c76a51780bd173a4 — Environment-variable access.
repo/deepspeed/utils/groups.py:149 
    if os.environ.get("TORCH_DISTRIBUTED_DEBUG", "").upper() == "DETAIL":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41a1762b43f0100b — Environment-variable access.
repo/deepspeed/utils/logging.py:49 
        if required_torch_version(min_version=2.6) and os.getenv("DISABLE_LOGS_WHILE_COMPILING", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #557e48639a9cc074 — Environment-variable access.
repo/deepspeed/utils/logging.py:52 
                for item in os.getenv("LOGGER_METHODS_TO_EXCLUDE_FROM_DISABLE", "").split(",")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd2954ada6752723 — Filesystem access.
repo/deepspeed/utils/logging.py:178 
        with open(path, 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3062b28a1d0e1d9c — Environment-variable access.
repo/deepspeed/utils/numa.py:107 
    if 'KMP_AFFINITY' in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a4fe7545b36fb75 — Filesystem access.
repo/deepspeed/utils/zero_to_fp32.py:611 
            with open(latest_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a8e4a28229c5ec3 — Filesystem access.
repo/deepspeed/utils/zero_to_fp32.py:708 
        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1084003cb57d8f9 — Filesystem access.
repo/docs/code-docs/source/conf.py:28 
with open("../../../version.txt", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f174a08c1f850538 — Environment-variable access.
repo/examples/sdma_allgather/test_sdma_allgather_zero3.py:105 
    parser.add_argument("--local_rank", type=int, default=int(os.environ.get("LOCAL_RANK", 0)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cdba934123798304 — Environment-variable access.
repo/examples/sdma_allgather/train_qwen3_zero3.py:123 
    max_chunks = int(os.environ.get("QWEN3_MAX_CHUNKS", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b68b0d323654348 — Environment-variable access.
repo/op_builder/builder.py:102 
        elif os.getenv("DS_SKIP_CUDA_CHECK", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #969dfb0dfcad87dc — Filesystem access.
repo/op_builder/builder.py:231 
                with open(rocm_ver_file, 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a198c11af85ce78 — Filesystem access.
repo/op_builder/builder.py:242 
                    with open(rocm_ver_file, 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d036060575f1257 — Filesystem access.
repo/op_builder/builder.py:347 
            with open(filename, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #915d763ccb45638e — Filesystem access.
repo/op_builder/builder.py:352 
                filestderr = open(os.path.join(tempdir, 'stderr.txt'), 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb0cc5750099a18b — Environment-variable access.
repo/op_builder/builder.py:363 
            cflags = shlex.split(os.environ.get('CFLAGS', ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ee179412deca9b4 — Environment-variable access.
repo/op_builder/builder.py:368 
            ldflags = shlex.split(os.environ.get('LDFLAGS', ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8f3ecf755981aba — Environment-variable access.
repo/op_builder/builder.py:561 
        torch_arch_list_present = "TORCH_CUDA_ARCH_LIST" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c98b975cfcf6fab2 — Environment-variable access.
repo/op_builder/builder.py:562 
        torch_arch_list = os.environ.get("TORCH_CUDA_ARCH_LIST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43adf747d1ea42c7 — Environment-variable access.
repo/op_builder/builder.py:587 
                os.environ["PYTORCH_ROCM_ARCH"] = self.get_rocm_gpu_arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f2dbb5ac2c274a1 — Environment-variable access.
repo/op_builder/builder.py:608 
                os.environ["TORCH_CUDA_ARCH_LIST"] = torch_arch_list

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a7dfd57d69f32b2 — Environment-variable access.
repo/op_builder/builder.py:610 
                os.environ.pop("TORCH_CUDA_ARCH_LIST", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b03f3d4adbc04299 — Environment-variable access.
repo/op_builder/builder.py:668 
                arch_string = os.environ.get('TORCH_CUDA_ARCH_LIST', '').strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8db4f0fb887ae63 — Environment-variable access.
repo/op_builder/builder.py:693 
            cross_compile_archs_env = os.environ.get('TORCH_CUDA_ARCH_LIST', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b73a5e187c27094 — Environment-variable access.
repo/op_builder/builder.py:737 
        os.environ["TORCH_CUDA_ARCH_LIST"] = ";".join(arch_tokens)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #03c547beca673156 — Environment-variable access.
repo/op_builder/builder.py:806 
                os.environ["PYTORCH_ROCM_ARCH"] = self.get_rocm_gpu_arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2cb8430004da279e — Environment-variable access.
repo/op_builder/builder.py:863 
                nvcc_threads = int(os.getenv("DS_NVCC_THREADS", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c722c11a4b8d621b — Environment-variable access.
repo/op_builder/builder.py:882 
            if os.environ.get('DS_DEBUG_CUDA_BUILD', '0') == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c522ff2c65d4fea — Environment-variable access.
repo/op_builder/cpu/comm.py:37 
        ccl_root_path = os.environ.get("CCL_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f7b84d99a26b997 — Environment-variable access.
repo/op_builder/evoformer_attn.py:22 
        self.cutlass_path = os.environ.get("CUTLASS_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #842422efbf9942d9 — Environment-variable access.
repo/op_builder/evoformer_attn.py:39 
        if os.environ.get("DS_EVOFORMER_GPU_ARCH"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fff56e119899aed — Filesystem access.
repo/op_builder/evoformer_attn.py:78 
                with open(changelog_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e8d5f182dac632f — Environment-variable access.
repo/op_builder/evoformer_attn.py:86 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4353fb53c9e23a17 — Environment-variable access.
repo/op_builder/evoformer_attn.py:121 
            value = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d298caaed06c79a — Environment-variable access.
repo/op_builder/fp_quantizer.py:35 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e96277d3a01d73a8 — Environment-variable access.
repo/op_builder/inference_core_ops.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2c853587aecb073 — Environment-variable access.
repo/op_builder/inference_cutlass_builder.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #855ff739b6bfc45d — Environment-variable access.
repo/op_builder/npu/builder.py:42 
        if "ASCEND_HOME_PATH" in os.environ or os.path.exists(os.environ["ASCEND_HOME_PATH"]):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93712b61aa683944 — Environment-variable access.
repo/op_builder/npu/builder.py:43 
            return os.environ["ASCEND_HOME_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9612ac728a15493a — Filesystem access.
repo/op_builder/npu/builder.py:56 
                with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94e5369cd2fa8721 — Environment-variable access.
repo/op_builder/ragged_ops.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39b43c786a731c80 — Environment-variable access.
repo/op_builder/ragged_utils.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0615244a82724aa — Environment-variable access.
repo/op_builder/spatial_inference.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d138df206b5520a2 — Environment-variable access.
repo/op_builder/transformer_inference.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f57b465991805cdc — Environment-variable access.
repo/op_builder/xpu/builder.py:89 
        if os.environ.get('USE_MKL_GEMM'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ca3769a7d3e55cb — Environment-variable access.
repo/op_builder/xpu/builder.py:152 
            saved_env[var] = os.environ.get(var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5830b2c21e20dbe1 — Environment-variable access.
repo/op_builder/xpu/builder.py:153 
        os.environ['CXX'] = 'icpx'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #049301e2f7cc1ce2 — Environment-variable access.
repo/op_builder/xpu/builder.py:159 
            lib_path = os.environ.get('LIBRARY_PATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d3e1fb38a6283ad — Environment-variable access.
repo/op_builder/xpu/builder.py:160 
            os.environ['LIBRARY_PATH'] = f'{sycl_lib}:{lib_path}' if lib_path else sycl_lib

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3a4e250d2bfd8c6 — Environment-variable access.
repo/op_builder/xpu/builder.py:162 
            cpath = os.environ.get('CPATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #502726c0f0b53f4b — Environment-variable access.
repo/op_builder/xpu/builder.py:163 
            os.environ['CPATH'] = f'{sycl_inc}:{cpath}' if cpath else sycl_inc

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5425ba0d4b0f8b9f — Environment-variable access.
repo/op_builder/xpu/builder.py:176 
                    os.environ.pop(var, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2d2e2fe526aaeec — Environment-variable access.
repo/op_builder/xpu/builder.py:178 
                    os.environ[var] = val

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #227778a380b1bb64 — Filesystem access.
repo/release/bump_patch_version.py:19 
with open('./version.txt', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fce591e139402df2 — Filesystem access.
repo/release/check_release_version.py:17 
with open('./version.txt') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #90cb0f7306446fd6 — Filesystem access.
repo/scripts/replace_copyright.py:66 
    with open(fp, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #df29fad4a8ef2a06 — Filesystem access.
repo/scripts/replace_copyright.py:103 
    with open(fp, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e247a6b73012f08f — Filesystem access.
repo/scripts/replace_copyright.py:132 
    with open(fp, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #47cf2e59e2361311 — Filesystem access.
repo/scripts/replace_copyright.py:203 
    with open(fp, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f8e8b72ed1d906a — Filesystem access.
repo/setup.py:61 
    with open(path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11c213269885e6e3 — Environment-variable access.
repo/setup.py:69 
    return bool(os.environ.get(key, None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f485378dcff4a40d — Environment-variable access.
repo/setup.py:78 
    return os.environ.get(key, None) or default

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #117cc8fc0f72e0bb — Environment-variable access.
repo/setup.py:148 
        os.environ["TORCH_CUDA_ARCH_LIST"] = get_default_compute_capabilities()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de3b6107a6f7e240 — Filesystem access.
repo/setup.py:239 
version_str = open('version.txt', 'r').read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #556d2ea8bc4e2f72 — Filesystem access.
repo/setup.py:247 
    with open('build.txt', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa28d72d56c277d8 — Environment-variable access.
repo/setup.py:248 
        fd.write(os.environ['DS_BUILD_STRING'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35d029811ffc8af3 — Environment-variable access.
repo/setup.py:249 
    version_str += os.environ['DS_BUILD_STRING']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe7238c333f96ace — Filesystem access.
repo/setup.py:252 
    with open('build.txt', 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f92ba3a5c2c16dde — Filesystem access.
repo/setup.py:286 
with open('deepspeed/git_version_info_installed.py', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b04c4a0a3fbad0d — Filesystem access.
repo/setup.py:299 
with open(os.path.join(thisdir, 'README.md'), encoding='utf-8') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.