Close Open Privacy Scan

link https://github.com/huggingface/diffusers
bolt Snapshot: commit 0196914
science engine v3
schedule 2026-07-12T11:28:02.801601+00:00

verified_user Application data leak confirmed

High-confidence data exfiltration identified in application code.

App Privacy Score

22 /100
High privacy risk — application leak confirmed

High risk · 370 finding(s)

Dependency score: 100 (Low risk)

bar_chart Score Breakdown

pii_flow −60
egress −15
env_fs −3

list Scan Summary

2 high 0 medium 368 low
First-party packages: 1
Dependency packages: 0
Ecosystem: python

swap_horiz Confirmed data exfiltration in application code

External domains: civitai.comgithub.comhuggingface.coremote-text-encoder-flux-2.huggingface.co

high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/utils/notify_benchmarking_status.py:24 → repo/utils/notify_benchmarking_status.py:44
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/utils/notify_community_pipelines_mirror.py:24 → repo/utils/notify_community_pipelines_mirror.py:42

</> First-Party Code

first-party (python)

python first-party
high pii_flow production #01bd8d8f6a7b4941 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/utils/notify_benchmarking_status.py:44 · flow /tmp/closeopen-yad97u0_/repo/utils/notify_benchmarking_status.py:24 → /tmp/closeopen-yad97u0_/repo/utils/notify_benchmarking_status.py:44 
    response = requests.post(SLACK_WEBHOOK_URL, json=payload)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c488f53197365571 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/utils/notify_community_pipelines_mirror.py:42 · flow /tmp/closeopen-yad97u0_/repo/utils/notify_community_pipelines_mirror.py:24 → /tmp/closeopen-yad97u0_/repo/utils/notify_community_pipelines_mirror.py:42 
    response = requests.post(SLACK_WEBHOOK_URL, json=payload)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 368 low-confidence finding(s)
low env_fs test-only #5cc7dc9f9143a62e — Environment-variable access.
repo/benchmarks/run_all.py:14 
GITHUB_SHA = os.getenv("GITHUB_SHA", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf448e4e15846802 — Environment-variable access.
repo/examples/advanced_diffusion_training/train_dreambooth_lora_flux_advanced.py:848 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d6e714999384797 — Environment-variable access.
repo/examples/advanced_diffusion_training/train_dreambooth_lora_sd15_advanced.py:721 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80b056d8494cdec2 — Filesystem access.
repo/examples/advanced_diffusion_training/train_dreambooth_lora_sdxl_advanced.py:112 
    with open(model_index, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c181026ec3ca9092 — Environment-variable access.
repo/examples/advanced_diffusion_training/train_dreambooth_lora_sdxl_advanced.py:853 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58fbe03a3724377e — Filesystem access.
repo/examples/cogvideo/train_cogvideox_image_to_video_lora.py:549 
        with open(prompt_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c223d7b6100c202 — Filesystem access.
repo/examples/cogvideo/train_cogvideox_image_to_video_lora.py:551 
        with open(video_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd895e0ca98e964f — Filesystem access.
repo/examples/cogvideo/train_cogvideox_lora.py:533 
        with open(prompt_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0492a309a0e084dc — Filesystem access.
repo/examples/cogvideo/train_cogvideox_lora.py:535 
        with open(video_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1059c312e32af492 — Filesystem access.
repo/examples/community/adaptive_mask_inpainting.py:155 
    with open(output_file, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a13ba8357b36b9ea — Filesystem access.
repo/examples/community/run_tensorrt_controlnet.py:41 
    with open(engine_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7e966e3bf162b50 — Filesystem access.
repo/examples/community/wildcard_stable_diffusion.py:31 
    with open(path, encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #385d8de259768a4a — Environment-variable access.
repo/examples/consistency_distillation/train_lcm_distill_lora_sd_wds.py:841 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91b435491b4ac9a5 — Environment-variable access.
repo/examples/consistency_distillation/train_lcm_distill_lora_sdxl.py:663 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #683c4eb3cba60514 — Environment-variable access.
repo/examples/consistency_distillation/train_lcm_distill_lora_sdxl_wds.py:821 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81679cd96ede4f93 — Environment-variable access.
repo/examples/consistency_distillation/train_lcm_distill_sd_wds.py:806 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #328acd945e42e93f — Environment-variable access.
repo/examples/consistency_distillation/train_lcm_distill_sdxl_wds.py:831 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74e9f4b7861f48a6 — Environment-variable access.
repo/examples/controlnet/train_controlnet_flax.py:467 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #422ad6f20af08db3 — Filesystem access.
repo/examples/cosmos/create_prompts_for_gr1_dataset.py:43 
    meta_lines = open(meta_csv).readlines()[1:]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68028928644d7483 — Filesystem access.
repo/examples/cosmos/create_prompts_for_gr1_dataset.py:55 
        with open(meta_txt_filename, "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb38e1ddc4e94263 — Filesystem access.
repo/examples/cosmos/eval_cosmos_predict25_lora.py:51 
        with open(txt_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #630da6d1068f90a1 — Environment-variable access.
repo/examples/cosmos/train_cosmos_predict25_lora.py:255 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #afee9b9d3f198028 — Filesystem access.
repo/examples/cosmos/train_cosmos_predict25_lora.py:347 
            return text_source.read_text().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59a1af50c4252d8f — Filesystem access.
repo/examples/cosmos/train_cosmos_predict25_lora.py:355 
            with open(json_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f7383ca48486ab9 — Filesystem access.
repo/examples/cosmos3/inference_cosmos3.py:53 
        action = json.loads(pathlib.Path(path).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25ff10944aec2ca2 — Filesystem access.
repo/examples/cosmos3/inference_cosmos3.py:292 
            with open(action_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35fc052e5814dfee — Filesystem access.
repo/examples/custom_diffusion/retrieve.py:54 
        open(f"{class_data_dir}/caption.txt", "w") as f1,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec97a5c2f970f910 — Filesystem access.
repo/examples/custom_diffusion/retrieve.py:55 
        open(f"{class_data_dir}/urls.txt", "w") as f2,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3e55ee45a908282 — Filesystem access.
repo/examples/custom_diffusion/retrieve.py:56 
        open(f"{class_data_dir}/images.txt", "w") as f3,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4041d7865c0eccc5 — Filesystem access.
repo/examples/custom_diffusion/retrieve.py:65 
                    with open(f"{class_data_dir}/images/{total}.jpg", "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cd42edb4f6caa67 — Filesystem access.
repo/examples/custom_diffusion/train_custom_diffusion.py:212 
                    with open(class_data_root, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #774903880ce0ca81 — Filesystem access.
repo/examples/custom_diffusion/train_custom_diffusion.py:214 
                    with open(concept["class_prompt"], "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ddb15282895922a — Environment-variable access.
repo/examples/custom_diffusion/train_custom_diffusion.py:643 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27baacdbbe7443ee — Filesystem access.
repo/examples/custom_diffusion/train_custom_diffusion.py:725 
        with open(args.concepts_list, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5e3a2ea32662f84 — Filesystem access.
repo/examples/dreambooth/convert_to_imagefolder.py:30 
        caption_text = caption.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a20294bcf734912e — Environment-variable access.
repo/examples/dreambooth/train_dreambooth.py:589 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06ed14ad2b2697b0 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_flax.py:204 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5a4229413316675 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_flux.py:658 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfc49ff2a42ad144 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora.py:550 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5010b29ce173af1e — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_flux.py:707 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33ec4f053c461348 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_flux2.py:747 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a230ffe8c16488b5 — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_flux2.py:1192 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #4398f56b34d3999e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/examples/dreambooth/train_dreambooth_lora_flux2.py:1517 
            response = requests.post(
                "https://remote-text-encoder-flux-2.huggingface.co/predict",
                json={"prompt": prompt},
                headers={"Authorization": f"Bearer {hf_token}", "Content-Type": "application/json"},
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #9b0a289ff448430c — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_flux2_img2img.py:722 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f596cd09acc8aed — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_flux2_img2img.py:1143 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #554eeec7357ea5e2 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/examples/dreambooth/train_dreambooth_lora_flux2_img2img.py:1470 
            response = requests.post(
                "https://remote-text-encoder-flux-2.huggingface.co/predict",
                json={"prompt": prompt},
                headers={"Authorization": f"Bearer {hf_token}", "Content-Type": "application/json"},
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #74e7a212cb5e33e0 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_flux2_klein.py:742 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f738cb3d9a668402 — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_flux2_klein.py:1187 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f18a5414664daf73 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_flux2_klein_img2img.py:718 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efa8b462eff07ca1 — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_flux2_klein_img2img.py:1139 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf5d3f0b8134d6b4 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_flux_kontext.py:741 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1870a525edff83f — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_hidream.py:714 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b521b380ac1f0bff — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_hidream.py:1095 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #023ee5513495a2c0 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_ideogram4.py:840 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f39afc8861890766 — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_ideogram4.py:1333 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e3a5a289e227f6f — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_krea2.py:787 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #503a5b5241927996 — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_krea2.py:1163 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48fde1de5fa7cdfc — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_lumina2.py:633 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3175e34d2d2aa08 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_qwen_image.py:684 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb2d7e8a9b95a770 — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_qwen_image.py:1106 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79fb99095988fa7c — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_sana.py:648 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05ef1e2f905ab0ae — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_sd3.py:701 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0866cd622bb7b40b — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_sdxl.py:97 
    with open(model_index, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a50d685bd390b952 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_sdxl.py:697 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d36dc4520a91547 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_z_image.py:736 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c668a2677d3b946 — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_z_image.py:1180 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b33401c0818c02a1 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_sd3.py:633 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95912d4a8cded9d8 — Environment-variable access.
repo/examples/instruct_pix2pix/train_instruct_pix2pix.py:401 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6dbeff4027413500 — Environment-variable access.
repo/examples/instruct_pix2pix/train_instruct_pix2pix_sdxl.py:458 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #471b3cb0ea1721e4 — Filesystem access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_decoder.py:134 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aaaadd1e7a874b7f — Environment-variable access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_decoder.py:431 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84a25ab635a3fa23 — Filesystem access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_lora_decoder.py:78 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83528176d158cb18 — Environment-variable access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_lora_decoder.py:316 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #423612466a1d4ea7 — Filesystem access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_lora_prior.py:78 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37b51939701ba7d9 — Environment-variable access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_lora_prior.py:323 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b13748c800204bc3 — Filesystem access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_prior.py:137 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d2dbc1c2354ddf1 — Environment-variable access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_prior.py:432 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #304f7cb09d2e0a41 — Filesystem access.
repo/examples/model_search/pipeline_easy.py:539 
    with open(save_path, mode) as model_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #21b9f4cca291d89a — Hardcoded external endpoint. Review what data is sent to this destination.
repo/examples/model_search/pipeline_easy.py:817 
        response = requests.get("https://civitai.com/api/v1/models", params=params, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7963ab942a104ad7 — Filesystem access.
repo/examples/research_projects/anytext/anytext.py:485 
        with open(character_dict_path, "rb") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29f8084b8d45054b — Environment-variable access.
repo/examples/research_projects/colossalai/train_dreambooth_colossalai.py:232 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76163ec398d5dae1 — Environment-variable access.
repo/examples/research_projects/consistency_training/train_cm_ct_unconditional.py:776 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f45dcf48517966e — Filesystem access.
repo/examples/research_projects/controlnet/train_controlnet_webdataset.py:473 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68263b56e3f51322 — Environment-variable access.
repo/examples/research_projects/diffusion_dpo/train_diffusion_dpo.py:439 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab83ad23ffedbc7f — Environment-variable access.
repo/examples/research_projects/diffusion_dpo/train_diffusion_dpo_sdxl.py:466 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e01802c76599d2a0 — Environment-variable access.
repo/examples/research_projects/diffusion_orpo/train_diffusion_orpo_sdxl_lora.py:456 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc706b996f96ce32 — Environment-variable access.
repo/examples/research_projects/diffusion_orpo/train_diffusion_orpo_sdxl_lora_wds.py:437 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10d34bbea6323a45 — Environment-variable access.
repo/examples/research_projects/dreambooth_inpaint/train_dreambooth_inpaint.py:281 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d93888564656a3a2 — Environment-variable access.
repo/examples/research_projects/dreambooth_inpaint/train_dreambooth_inpaint_lora.py:280 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a54fede85c201c9 — Environment-variable access.
repo/examples/research_projects/flux_lora_quantization/train_dreambooth_lora_flux_miniature.py:455 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a18aded9771d0232 — Environment-variable access.
repo/examples/research_projects/instructpix2pix_lora/train_instruct_pix2pix_lora.py:458 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c622a49f52b6698e — Environment-variable access.
repo/examples/research_projects/intel_opts/textual_inversion/textual_inversion_bf16.py:209 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b2d9d793dcf8482 — Environment-variable access.
repo/examples/research_projects/intel_opts/textual_inversion_dfq/textual_inversion.py:206 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35e526eac20dd9ae — Filesystem access.
repo/examples/research_projects/ip_adapter/tutorial_train_faceid.py:37 
            open(json_file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f59fcbd18b8d7f4 — Environment-variable access.
repo/examples/research_projects/ip_adapter/tutorial_train_faceid.py:253 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #271ffdee463fc33d — Filesystem access.
repo/examples/research_projects/ip_adapter/tutorial_train_ip-adapter.py:43 
        self.data = json.load(open(json_file))  # list of dict: [{"image_file": "1.png", "text": "A dog"}]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76d1bff694f0a5d3 — Environment-variable access.
repo/examples/research_projects/ip_adapter/tutorial_train_ip-adapter.py:255 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78e1d5039ad6e352 — Filesystem access.
repo/examples/research_projects/ip_adapter/tutorial_train_plus.py:43 
        self.data = json.load(open(json_file))  # list of dict: [{"image_file": "1.png", "text": "A dog"}]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e62f45f067afea65 — Environment-variable access.
repo/examples/research_projects/ip_adapter/tutorial_train_plus.py:271 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98a9a3ab104d60f2 — Filesystem access.
repo/examples/research_projects/ip_adapter/tutorial_train_sdxl.py:61 
        self.data = json.load(open(json_file))  # list of dict: [{"image_file": "1.png", "text": "A dog"}]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce0564cdc577d41f — Environment-variable access.
repo/examples/research_projects/ip_adapter/tutorial_train_sdxl.py:316 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91254916ee9356f6 — Filesystem access.
repo/examples/research_projects/lora/train_text_to_image_lora.py:82 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3c3c86c28c91e2e — Environment-variable access.
repo/examples/research_projects/lora/train_text_to_image_lora.py:378 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0285c7b121b14a8d — Filesystem access.
repo/examples/research_projects/lora/train_text_to_image_lora.py:934 
            with open(os.path.join(args.output_dir, f"{global_step}_lora_config.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08236460fdd6b450 — Filesystem access.
repo/examples/research_projects/lora/train_text_to_image_lora.py:964 
            with open(os.path.join(args.output_dir, f"{global_step}_lora_config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ee9f9516911a3e9 — Environment-variable access.
repo/examples/research_projects/lpl/train_sdxl_lpl.py:604 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #771195c9b8437d6d — Environment-variable access.
repo/examples/research_projects/multi_subject_dreambooth/train_multi_subject_dreambooth.py:512 
    env_local_rank = int(environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b5876bfc04b6fc7 — Filesystem access.
repo/examples/research_projects/multi_subject_dreambooth/train_multi_subject_dreambooth.py:723 
        with open(args.concepts_list, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26ab90f87db6e4ce — Environment-variable access.
repo/examples/research_projects/multi_token_textual_inversion/textual_inversion.py:394 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #013877762732ade2 — Environment-variable access.
repo/examples/research_projects/multi_token_textual_inversion/textual_inversion_flax.py:179 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51270175a4d7e410 — Environment-variable access.
repo/examples/research_projects/onnxruntime/text_to_image/train_text_to_image.py:398 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d3563ca0bbd2cd3 — Filesystem access.
repo/examples/research_projects/onnxruntime/textual_inversion/textual_inversion.py:114 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b92140c7777a82d8 — Environment-variable access.
repo/examples/research_projects/onnxruntime/textual_inversion/textual_inversion.py:416 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff446399017492b0 — Environment-variable access.
repo/examples/research_projects/onnxruntime/unconditional_image_generation/train_unconditional.py:269 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67b3b0957d81b5e6 — Filesystem access.
repo/examples/research_projects/promptdiffusion/convert_original_promptdiffusion_to_diffusers.py:1441 
            with open(original_config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ac2aaae33ba1553 — Filesystem access.
repo/examples/research_projects/promptdiffusion/convert_original_promptdiffusion_to_diffusers.py:2011 
    original_config = yaml.safe_load(open(original_config_file))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30fe524518a9b85f — Filesystem access.
repo/examples/research_projects/pytorch_xla/inference/flux/flux_inference.py:113 
        with open(metrics_filepath, "w+") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ef0eb4594ac8b3e — Filesystem access.
repo/examples/research_projects/pytorch_xla/inference/flux/flux_inference_spmd.py:177 
    with open(metrics_filepath, "w+") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e6bda3e69cfe186 — Environment-variable access.
repo/examples/research_projects/pytorch_xla/training/text_to_image/train_text_to_image_xla.py:35 
PROFILE_DIR = os.environ.get("PROFILE_DIR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #597ec9b0d1a47c86 — Environment-variable access.
repo/examples/research_projects/pytorch_xla/training/text_to_image/train_text_to_image_xla.py:36 
CACHE_DIR = os.environ.get("CACHE_DIR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88c5003f2c5609b4 — Filesystem access.
repo/examples/research_projects/realfill/train_realfill.py:101 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45109021dbbc2a85 — Environment-variable access.
repo/examples/research_projects/realfill/train_realfill.py:419 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d79f9d9085d83032 — Environment-variable access.
repo/examples/research_projects/sana/train_sana_sprint_diffusers.py:690 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b8eda6aeac528db — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/dreambooth/train_dreambooth.py:609 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31ca710d107fc502 — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/dreambooth/train_dreambooth_lora.py:549 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94981dcac02b9277 — Filesystem access.
repo/examples/research_projects/scheduled_huber_loss_training/dreambooth/train_dreambooth_lora_sdxl.py:97 
    with open(model_index, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60212d874ff93910 — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/dreambooth/train_dreambooth_lora_sdxl.py:701 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0b466f97a326988 — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/text_to_image/train_text_to_image.py:502 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ab16f809ca5730b — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/text_to_image/train_text_to_image_lora.py:397 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dee429189c74d196 — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/text_to_image/train_text_to_image_lora_sdxl.py:459 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c28ab062daa1fd94 — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/text_to_image/train_text_to_image_sdxl.py:492 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42d571da8c25826d — Filesystem access.
repo/examples/research_projects/sd3_lora_colab/compute_embeddings.py:39 
    with open(image_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17601ec718745ce9 — Environment-variable access.
repo/examples/research_projects/sd3_lora_colab/train_dreambooth_lora_sd3_miniature.py:490 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3d9e25013a7eae1 — Filesystem access.
repo/examples/research_projects/sd3_lora_colab/train_dreambooth_lora_sd3_miniature.py:599 
        with open(image_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac6df20e55983550 — Filesystem access.
repo/examples/research_projects/wuerstchen/text_to_image/train_text_to_image_lora_prior.py:140 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7306cfaa28ec0e75 — Environment-variable access.
repo/examples/research_projects/wuerstchen/text_to_image/train_text_to_image_lora_prior.py:434 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f1dd9f1cebd789e — Filesystem access.
repo/examples/research_projects/wuerstchen/text_to_image/train_text_to_image_prior.py:137 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a9b0b9811015f3b — Environment-variable access.
repo/examples/research_projects/wuerstchen/text_to_image/train_text_to_image_prior.py:432 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad96ef29a5d2d368 — Environment-variable access.
repo/examples/server-async/Pipelines.py:36 
        self.model_path = model_path or os.getenv("MODEL_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f1fcb55e91aa876 — Environment-variable access.
repo/examples/server-async/serverasync.py:41 
    os.environ["PYTORCH_CUDA_ALLOC_CONF"] = "max_split_size_mb:128,expandable_segments:True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aacf39281714509a — Environment-variable access.
repo/examples/server-async/serverasync.py:42 
    os.environ["CUDA_LAUNCH_BLOCKING"] = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4238a0ff049f655a — Filesystem access.
repo/examples/server-async/test.py:26 
    with open(path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87177bfc7b8d4e93 — Environment-variable access.
repo/examples/server/server.py:50 
            model_path = os.getenv("MODEL_PATH", "stabilityai/stable-diffusion-3.5-large")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a55bdd2f05edbe9 — Environment-variable access.
repo/examples/server/server.py:58 
            model_path = os.getenv("MODEL_PATH", "stabilityai/stable-diffusion-3.5-medium")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #819ddee6b264974e — Environment-variable access.
repo/examples/server/server.py:70 
service_url = os.getenv("SERVICE_URL", "http://localhost:8000")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2cb812a8873cae4 — Environment-variable access.
repo/examples/text_to_image/train_text_to_image.py:513 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9214849410bd1991 — Environment-variable access.
repo/examples/text_to_image/train_text_to_image_flax.py:241 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ddedfe881ece647 — Environment-variable access.
repo/examples/text_to_image/train_text_to_image_lora.py:437 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae15a665a97dded5 — Environment-variable access.
repo/examples/text_to_image/train_text_to_image_lora_sdxl.py:498 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2eeebeb385ed129 — Environment-variable access.
repo/examples/text_to_image/train_text_to_image_sdxl.py:488 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d37beb5db8a4269 — Environment-variable access.
repo/examples/textual_inversion/textual_inversion.py:444 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fbde4e74582203d — Environment-variable access.
repo/examples/textual_inversion/textual_inversion_flax.py:192 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d478bb76c26f0172 — Environment-variable access.
repo/examples/textual_inversion/textual_inversion_sdxl.py:430 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dac49000b377da0d — Environment-variable access.
repo/examples/unconditional_image_generation/train_unconditional.py:288 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56b5f8c308d6561a — Filesystem access.
repo/examples/vqgan/test_vqgan.py:90 
        with open(vqmodel_config_path, "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a1237bca0d32f12 — Filesystem access.
repo/examples/vqgan/test_vqgan.py:92 
        with open(discriminator_config_path, "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d381f2e9c8316f7f — Environment-variable access.
repo/examples/vqgan/train_vqgan.py:533 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5872a6755f68ef6e — Filesystem access.
repo/scripts/change_naming_configs_and_checkpoints.py:69 
    with open(os.path.join(args.repo_path, subfolder, "config.json"), "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3ad98c191d03e8c — Filesystem access.
repo/scripts/convert_ace_step_to_diffusers.py:92 
        with open(sharded_index_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bf424b4e2caabb7 — Filesystem access.
repo/scripts/convert_ace_step_to_diffusers.py:119 
    with open(config_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e716af20e01ef444 — Environment-variable access.
repo/scripts/convert_amused.py:22 
os.environ["CUDA_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04b178881db95f1c — Environment-variable access.
repo/scripts/convert_amused.py:23 
os.environ["CUBLAS_WORKSPACE_CONFIG"] = ":16:8"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36e1ec91b1474f13 — Filesystem access.
repo/scripts/convert_consistency_decoder.py:55 
        if insecure_hashlib.sha256(open(download_target, "rb").read()).hexdigest() == expected_sha256:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ec0d5dacff55903 — Filesystem access.
repo/scripts/convert_consistency_decoder.py:60 
    with urllib.request.urlopen(url) as source, open(download_target, "wb") as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c91e74efc57ed56d — Filesystem access.
repo/scripts/convert_consistency_decoder.py:76 
    if insecure_hashlib.sha256(open(download_target, "rb").read()).hexdigest() != expected_sha256:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0eba5cc68c56e56 — Filesystem access.
repo/scripts/convert_cosmos3_to_diffusers.py:113 
    with open(selected_config_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd28b4c15c8585b4 — Filesystem access.
repo/scripts/convert_dance_diffusion_to_diffusers.py:81 
    with open(local_filename, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c5b9b39dff78fd8 — Filesystem access.
repo/scripts/convert_ddpm_original_checkpoint_to_diffusers.py:403 
    with open(args.config_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f32ed1024ba47e1 — Filesystem access.
repo/scripts/convert_hunyuan_video1_5_to_diffusers.py:703 
    with open(font_ann_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49aa694329008634 — Filesystem access.
repo/scripts/convert_hunyuan_video1_5_to_diffusers.py:705 
    with open(color_ann_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e18ce1f3b7ddaf7d — Filesystem access.
repo/scripts/convert_k_upscaler_to_diffusers.py:280 
    orig_config = K.config.load_config(open(orig_config_path))["model"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b3d42a63e76bbdd — Filesystem access.
repo/scripts/convert_ldm_original_checkpoint_to_diffusers.py:341 
    with open(args.config_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fbe993f4c382bb8 — Filesystem access.
repo/scripts/convert_longcat_audio_dit_to_diffusers.py:45 
        with open(index_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7610045bb4b53848 — Filesystem access.
repo/scripts/convert_longcat_audio_dit_to_diffusers.py:58 
                with open(index_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbdbcb9a07f984e4 — Filesystem access.
repo/scripts/convert_longcat_audio_dit_to_diffusers.py:103 
    with open(config_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #562328e39e8b811b — Filesystem access.
repo/scripts/convert_models_diffuser_to_diffusers.py:55 
    with open(f"hub/hopper-medium-v2/unet/hor{hor}/config.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a733a4a1b78ad4b — Filesystem access.
repo/scripts/convert_models_diffuser_to_diffusers.py:93 
    with open("hub/hopper-medium-v2/value_function/config.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #765d9a21792ee16f — Filesystem access.
repo/scripts/convert_ncsnpp_original_checkpoint_to_diffusers.py:165 
    with open(args.config_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37f175334bdab411 — Environment-variable access.
repo/scripts/convert_omnigen_to_diffusers.py:17 
        cache_folder = os.getenv("HF_HUB_CACHE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fe81435dfba90ac — Filesystem access.
repo/scripts/convert_prx_to_diffusers.py:216 
    with open(os.path.join(scheduler_path, "scheduler_config.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b4abf2a39b7ec5d — Filesystem access.
repo/scripts/convert_prx_to_diffusers.py:317 
    with open(os.path.join(output_path, "model_index.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2165f85f95c5028 — Filesystem access.
repo/scripts/convert_prx_to_diffusers.py:332 
    with open(os.path.join(transformer_path, "config.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2590e5619bcb618 — Filesystem access.
repo/scripts/convert_stable_audio.py:171 
with open(config_path) as f_in:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a2ce55badb3e20a — Filesystem access.
repo/scripts/convert_stable_diffusion_controlnet_to_tensorrt.py:97 
    with open(output_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58a705b1df5b91c8 — Filesystem access.
repo/scripts/convert_vq_diffusion_to_diffusers.py:686 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f84f12b2676afabd — Filesystem access.
repo/setup.py:219 
        with open(target, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0acb399c8c3e6589 — Filesystem access.
repo/setup.py:287 
    long_description=open("README.md", "r", encoding="utf-8").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5141e2b70a69d9a7 — Filesystem access.
repo/src/diffusers/commands/custom_blocks.py:100 
        source = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f798063c7bec6cc — Filesystem access.
repo/src/diffusers/commands/fp16_safetensors.py:90 
        with open(model_index, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6514e9a590cb297 — Filesystem access.
repo/src/diffusers/configuration_utils.py:600 
            text = dduf_entries[json_file].read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f23a0f35fb72b94 — Filesystem access.
repo/src/diffusers/configuration_utils.py:602 
            with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #808bcf9947ef5947 — Filesystem access.
repo/src/diffusers/configuration_utils.py:672 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53611632495a98f0 — Filesystem access.
repo/src/diffusers/loaders/single_file_utils.py:498 
        with open(original_config_file, "r") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b3cde963c8f496a — Filesystem access.
repo/src/diffusers/models/model_loading_utils.py:175 
                return safetensors.torch.load(open(checkpoint_file, "rb").read())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb0ad2ba4c45da7f — Filesystem access.
repo/src/diffusers/models/model_loading_utils.py:195 
            with open(checkpoint_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #520756016608041d — Filesystem access.
repo/src/diffusers/models/modeling_flax_utils.py:419 
                with open(model_file, "rb") as state_f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f6897dae47b3694 — Filesystem access.
repo/src/diffusers/models/modeling_flax_utils.py:423 
                    with open(model_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4d205149c552779 — Filesystem access.
repo/src/diffusers/models/modeling_flax_utils.py:545 
        with open(output_model_file, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6fc9635147a9e5f7 — Filesystem access.
repo/src/diffusers/models/modeling_pytorch_flax_utils.py:39 
        with open(model_file, "rb") as flax_state_f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65ab1b0e4f7a7a97 — Filesystem access.
repo/src/diffusers/models/modeling_pytorch_flax_utils.py:43 
            with open(model_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6f00cafd739a68c — Filesystem access.
repo/src/diffusers/models/modeling_utils.py:836 
                with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da3a96dc5e76dd32 — Filesystem access.
repo/src/diffusers/modular_pipelines/mellon_node_utils.py:821 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6db7f0ccfbf9da8d — Filesystem access.
repo/src/diffusers/modular_pipelines/mellon_node_utils.py:827 
        with open(json_file_path, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27094cf3ce8712d5 — Environment-variable access.
repo/src/diffusers/modular_pipelines/modular_pipeline.py:2583 
            os.environ["PT_HPU_GPU_MIGRATION"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed93edf07c71c8be — Environment-variable access.
repo/src/diffusers/modular_pipelines/modular_pipeline.py:2592 
            os.environ["PT_HPU_MAX_COMPOUND_OP_SIZE"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50020da4410081ff — Filesystem access.
repo/src/diffusers/pipelines/deprecated/spectrogram_diffusion/midi_utils.py:637 
            with open(midi, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #355a5c9c40bba691 — Filesystem access.
repo/src/diffusers/pipelines/kolors/tokenizer.py:223 
        with open(self.vocab_file, "rb") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0185fbf2c9235c83 — Filesystem access.
repo/src/diffusers/pipelines/kolors/tokenizer.py:226 
        with open(vocab_file, "wb") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #655d64527d1fbe32 — Environment-variable access.
repo/src/diffusers/pipelines/pipeline_utils.py:507 
            os.environ["PT_HPU_GPU_MIGRATION"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #291a656dc3036b5c — Environment-variable access.
repo/src/diffusers/pipelines/pipeline_utils.py:516 
            os.environ["PT_HPU_MAX_COMPOUND_OP_SIZE"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa2690394b3a83b7 — Filesystem access.
repo/src/diffusers/pipelines/stable_diffusion/convert_from_ckpt.py:1336 
            with open(original_config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2773c92bbe702d3c — Filesystem access.
repo/src/diffusers/pipelines/stable_diffusion/convert_from_ckpt.py:1339 
        with open(original_config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62c03ed6396e9932 — Filesystem access.
repo/src/diffusers/pipelines/stable_diffusion/convert_from_ckpt.py:1855 
    with open(original_config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d824c9f3c6a4950a — Filesystem access.
repo/src/diffusers/pipelines/transformers_loading_utils.py:53 
                with open(tmp_entry_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6b207c80f2cc9a0 — Filesystem access.
repo/src/diffusers/pipelines/transformers_loading_utils.py:98 
        with open(tmp_config_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f069188635f4d98f — Filesystem access.
repo/src/diffusers/pipelines/transformers_loading_utils.py:99 
            f.write(config_file.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce1e6e4ad5a4b0bc — Filesystem access.
repo/src/diffusers/pipelines/transformers_loading_utils.py:103 
            with open(tmp_generation_config_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #351eb523c27d0ad1 — Filesystem access.
repo/src/diffusers/pipelines/transformers_loading_utils.py:104 
                f.write(generation_config.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #010fe927df5ddc98 — Environment-variable access.
repo/src/diffusers/quantizers/gguf/utils.py:33 
    os.getenv("DIFFUSERS_GGUF_CUDA_KERNELS", "false").lower() in ["1", "true", "yes"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84b07e2d08b80355 — Filesystem access.
repo/src/diffusers/quantizers/quantization_config.py:107 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5b2db152a38e555 — Environment-variable access.
repo/src/diffusers/utils/constants.py:26 
_CHECK_PEFT = os.environ.get("_CHECK_PEFT", "1") in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51a5a2c1aad0f6b8 — Environment-variable access.
repo/src/diffusers/utils/constants.py:41 
HUGGINGFACE_CO_RESOLVE_ENDPOINT = os.environ.get("HF_ENDPOINT", "https://huggingface.co")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #414e559d3c47979d — Environment-variable access.
repo/src/diffusers/utils/constants.py:43 
HF_MODULES_CACHE = os.getenv("HF_MODULES_CACHE", os.path.join(HF_HOME, "modules"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #161adcfe2ad624f7 — Environment-variable access.
repo/src/diffusers/utils/constants.py:46 
DIFFUSERS_ATTN_BACKEND = os.getenv("DIFFUSERS_ATTN_BACKEND", "native")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #551e05426fa3bd6a — Environment-variable access.
repo/src/diffusers/utils/constants.py:47 
DIFFUSERS_ATTN_CHECKS = os.getenv("DIFFUSERS_ATTN_CHECKS", "0").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b71537ebd019217e — Environment-variable access.
repo/src/diffusers/utils/constants.py:49 
HF_ENABLE_PARALLEL_LOADING = os.environ.get("HF_ENABLE_PARALLEL_LOADING", "").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a8d1f204d01dcd2 — Environment-variable access.
repo/src/diffusers/utils/constants.py:50 
DIFFUSERS_DISABLE_REMOTE_CODE = os.getenv("DIFFUSERS_DISABLE_REMOTE_CODE", "false").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6b2daf86ec30ed6 — Environment-variable access.
repo/src/diffusers/utils/dynamic_modules_utils.py:42 
TIME_OUT_REMOTE_CODE = int(os.getenv("DIFFUSERS_TIMEOUT_REMOTE_CODE", 15))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #3f0c9f0ab7953176 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/diffusers/utils/dynamic_modules_utils.py:48 
    releases = json.loads(request.urlopen(url).read())["releases"].keys()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7ce66075456d63ae — Filesystem access.
repo/src/diffusers/utils/dynamic_modules_utils.py:89 
    with open(module_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00ea90634d5fd576 — Filesystem access.
repo/src/diffusers/utils/dynamic_modules_utils.py:133 
    with open(filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08e420cd8600b00b — Filesystem access.
repo/src/diffusers/utils/export_utils.py:63 
    with buffered_writer(open(output_ply_path, "wb")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4596c400cb2de2e — Filesystem access.
repo/src/diffusers/utils/export_utils.py:120 
    with open(output_obj_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #885444b38dc9b940 — Environment-variable access.
repo/src/diffusers/utils/hub_utils.py:89 
    if os.environ.get("DIFFUSERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adb79fabd3bf7a33 — Filesystem access.
repo/src/diffusers/utils/hub_utils.py:389 
        index = json.loads(dduf_entries[index_filename].read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b10836c0a70b91af — Filesystem access.
repo/src/diffusers/utils/hub_utils.py:391 
        with open(index_filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f05ff8e2b8ac0112 — Environment-variable access.
repo/src/diffusers/utils/import_utils.py:50 
USE_TF = os.environ.get("USE_TF", "AUTO").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #485e9d8766923b0c — Environment-variable access.
repo/src/diffusers/utils/import_utils.py:51 
USE_TORCH = os.environ.get("USE_TORCH", "AUTO").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98efa5b134423e7d — Environment-variable access.
repo/src/diffusers/utils/import_utils.py:52 
USE_JAX = os.environ.get("USE_FLAX", "AUTO").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c067780d4e1f164b — Environment-variable access.
repo/src/diffusers/utils/import_utils.py:53 
USE_SAFETENSORS = os.environ.get("USE_SAFETENSORS", "AUTO").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14673a81ebf1245e — Environment-variable access.
repo/src/diffusers/utils/import_utils.py:54 
DIFFUSERS_SLOW_IMPORT = os.environ.get("DIFFUSERS_SLOW_IMPORT", "FALSE").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d33f954201b868c — Environment-variable access.
repo/src/diffusers/utils/import_utils.py:59 
_is_google_colab = "google.colab" in sys.modules or any(k.startswith("COLAB_") for k in os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6b399d4f383ffe6 — Filesystem access.
repo/src/diffusers/utils/import_utils.py:73 
                    _top_level_declared = (dist.read_text("top_level.txt") or "").split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4670645837f3c43f — Filesystem access.
repo/src/diffusers/utils/loading_utils.py:98 
        with open(video_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24659d9c0238c396 — Environment-variable access.
repo/src/diffusers/utils/logging.py:75 
    env_level_str = os.getenv("DIFFUSERS_VERBOSITY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7446eb6333df0349 — Environment-variable access.
repo/src/diffusers/utils/logging.py:293 
    no_advisory_warnings = os.getenv("DIFFUSERS_NO_ADVISORY_WARNINGS", False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98ad533c870a1fba — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:86 
BIG_GPU_MEMORY = int(os.getenv("BIG_GPU_MEMORY", 40))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28fb97cbde2082e0 — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:92 
    if "DIFFUSERS_TEST_BACKEND" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #568f0e8eef54faed — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:93 
        backend = os.environ["DIFFUSERS_TEST_BACKEND"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56cb4a95f33a5e55 — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:102 
    if "DIFFUSERS_TEST_DEVICE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87ae1de46fdb1bb6 — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:103 
        torch_device = os.environ["DIFFUSERS_TEST_DEVICE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5afb8a4d3c886cf1 — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:181 
    test_name = os.environ.get("PYTEST_CURRENT_TEST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29aaf72206e6d639 — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:193 
    with open(filename, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31b07fea8f26cfae — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:236 
        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2927fdf00eabdff8 — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:792 
    with buffered_writer(open(output_ply_path, "wb")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7500c951d9c0c30d — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:848 
    with open(output_obj_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6119c2d62d9c49a4 — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:960 
        with open(report_files["durations"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67ceccdfd5026d1f — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:990 
    with open(report_files["failures_long"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1cd8bcf1a2de676 — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:995 
    with open(report_files["failures_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5acaf517cf838bc — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:1000 
    with open(report_files["failures_line"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69f2f225a6566cc3 — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:1004 
    with open(report_files["errors"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f57f9938af742922 — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:1008 
    with open(report_files["warnings"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ced62d04943e6342 — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:1014 
    with open(report_files["passes"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3707643868b0f11c — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:1018 
    with open(report_files["summary_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6d00d3afb2f8aab — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:1022 
    with open(report_files["stats"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #456fa8d0625b6bfe — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:1097 
        timeout = int(os.environ.get("PYTEST_TIMEOUT", 600))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92383921c8282ab7 — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:1402 
    if "DIFFUSERS_TEST_DEVICE_SPEC" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af7e4fa3f24ac839 — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:1403 
        device_spec_path = os.environ["DIFFUSERS_TEST_DEVICE_SPEC"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0fc775df4d1bf1d — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:1419 
        if "DIFFUSERS_TEST_DEVICE" in os.environ and torch_device != device_name:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0f68d8482441ea2 — Environment-variable access.
repo/src/diffusers/utils/torch_utils.py:364 
    os.environ["CUDA_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3735247784a08a93 — Environment-variable access.
repo/src/diffusers/utils/torch_utils.py:365 
    os.environ["CUBLAS_WORKSPACE_CONFIG"] = ":16:8"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86aba98e721fc6b7 — Environment-variable access.
repo/src/diffusers/utils/torch_utils.py:375 
    os.environ["CUDA_LAUNCH_BLOCKING"] = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fc1b77b40f5e81d — Environment-variable access.
repo/src/diffusers/utils/torch_utils.py:376 
    os.environ["CUBLAS_WORKSPACE_CONFIG"] = ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1e333bc3ada2f60 — Filesystem access.
repo/utils/check_copies.py:47 
    with open(
        os.path.join(DIFFUSERS_PATH, f"{module}.py"),
        "r",
        encoding="utf-8",
        newline="\n",
    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b60a33748fc8d8d2 — Filesystem access.
repo/utils/check_copies.py:126 
    with open(filename, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db121e60281a0de4 — Filesystem access.
repo/utils/check_copies.py:193 
        with open(filename, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6ad3a5c271eb946 — Filesystem access.
repo/utils/check_doc_toc.py:73 
    with open(PATH_TO_TOC, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e155b616d0f6ef5 — Filesystem access.
repo/utils/check_doc_toc.py:99 
            with open(PATH_TO_TOC, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #968580528cc608d0 — Filesystem access.
repo/utils/check_doc_toc.py:108 
    with open(PATH_TO_TOC, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0914446953aef55 — Filesystem access.
repo/utils/check_doc_toc.py:148 
            with open(PATH_TO_TOC, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed35a55e6b722681 — Filesystem access.
repo/utils/check_doc_toc.py:157 
    with open(PATH_TO_TOC, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2255a12f1d40cef7 — Filesystem access.
repo/utils/check_doc_toc.py:197 
            with open(PATH_TO_TOC, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5876e9e2cbebcc8f — Filesystem access.
repo/utils/check_dummies.py:69 
    with open(os.path.join(PATH_TO_DIFFUSERS, "__init__.py"), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8dbacf46d759535 — Filesystem access.
repo/utils/check_dummies.py:148 
            with open(file_path, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6099fa3fd0f3a13d — Filesystem access.
repo/utils/check_dummies.py:160 
                with open(dummy_file_paths[backend], "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #318a950ea911e8fe — Filesystem access.
repo/utils/check_forward_call_docstrings.py:207 
        tree = ast.parse(path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6563d5dd40ad3b56 — Filesystem access.
repo/utils/check_forward_call_docstrings.py:264 
    source = path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b15c35cbaabeb613 — Filesystem access.
repo/utils/check_forward_call_docstrings.py:367 
    path.write_text("".join(new_lines), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7096d5456d7f21e9 — Filesystem access.
repo/utils/check_inits.py:64 
    with open(init_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d67d9074ec472ad8 — Filesystem access.
repo/utils/check_repo.py:357 
    with open(os.path.join(PATH_TO_TESTS, test_file), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d56f2cef6b00e3e3 — Environment-variable access.
repo/utils/check_repo.py:465 
        if os.getenv("TRANSFORMERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5edeb1e077406ee — Filesystem access.
repo/utils/check_repo.py:493 
    with open(filename, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6a9dd5678489f2b — Filesystem access.
repo/utils/check_repo.py:529 
        with open(doc_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0358db546a7e8a0 — Filesystem access.
repo/utils/check_repo.py:534 
        with open(doc_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24c924ab31049fc9 — Filesystem access.
repo/utils/check_repo.py:720 
        with open(file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92da45d4c397d87b — Filesystem access.
repo/utils/check_support_list.py:33 
    with open(os.path.join(REPO_PATH, doc_path), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53710c352cd5ea5d — Filesystem access.
repo/utils/check_support_list.py:46 
    with open(os.path.join(REPO_PATH, src_path), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #302f25e50f0b148e — Filesystem access.
repo/utils/check_table.py:35 
    with open(filename, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #862e0d883ff57523 — Filesystem access.
repo/utils/check_table.py:172 
            with open(os.path.join(PATH_TO_DOCS, "index.md"), "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ba88289cc6e8d44 — Filesystem access.
repo/utils/check_test_missing.py:11 
    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ecdc1e6409278e3 — Filesystem access.
repo/utils/check_test_missing.py:31 
    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e383a32f54ebf61c — Filesystem access.
repo/utils/consolidated_test_report.py:27 
        with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1a5901bd7c7fad3 — Filesystem access.
repo/utils/consolidated_test_report.py:98 
            with open(durations_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #509b1b2b088cae13 — Filesystem access.
repo/utils/consolidated_test_report.py:140 
        with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a289bff9477f23e — Filesystem access.
repo/utils/consolidated_test_report.py:161 
                                    with open(line_file, "r") as lf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #595c98faaae0bd3a — Filesystem access.
repo/utils/consolidated_test_report.py:287 
                    with open(summary_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bed2feaa882fb1d — Environment-variable access.
repo/utils/consolidated_test_report.py:326 
    num_slowest_tests = int(os.environ.get("SHOW_SLOWEST_TESTS", "10"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #baa589f4f3ebf205 — Environment-variable access.
repo/utils/consolidated_test_report.py:628 
    if os.environ.get("GITHUB_RUN_ID"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f012158643de35fc — Environment-variable access.
repo/utils/consolidated_test_report.py:629 
        run_id = os.environ["GITHUB_RUN_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33f58e3c8d1d953f — Filesystem access.
repo/utils/consolidated_test_report.py:747 
        with open(args.output_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a8227b5f91bcaba — Environment-variable access.
repo/utils/consolidated_test_report.py:754 
    slack_token = os.environ.get("SLACK_API_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2edf33406a383c36 — Filesystem access.
repo/utils/custom_init_isort.py:243 
    with open(file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #133e81c8bdec8a90 — Filesystem access.
repo/utils/custom_init_isort.py:304 
            with open(file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9727c52af6c8d3d4 — Environment-variable access.
repo/utils/fetch_torch_cuda_pipeline_test_matrix.py:24 
PIPELINE_USAGE_CUTOFF = int(os.getenv("PIPELINE_USAGE_CUTOFF", 50000))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f02c5a4c20948c69 — Filesystem access.
repo/utils/fetch_torch_cuda_pipeline_test_matrix.py:94 
    with open(f"{save_path}/test-pipelines.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70dba3c32f3439fd — Filesystem access.
repo/utils/generate_model_tests.py:198 
    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #411676b7d66a1c37 — Filesystem access.
repo/utils/generate_model_tests.py:594 
        with open(output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5f5987d161e358d — Environment-variable access.
repo/utils/label_issues.py:88 
        title = os.environ.get("ISSUE_TITLE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #276392574194e418 — Environment-variable access.
repo/utils/label_issues.py:89 
        body = os.environ.get("ISSUE_BODY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8d2377ea6e05769 — Environment-variable access.
repo/utils/label_issues.py:91 
        client = InferenceClient(api_key=os.environ["HF_TOKEN"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a51b7b36ef21dce5 — Environment-variable access.
repo/utils/label_issues.py:94 
            model=os.environ.get("HF_MODEL", "Qwen/Qwen3.5-35B-A3B"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #680e7f514cb1d65f — Filesystem access.
repo/utils/log_reports.py:31 
        with open(log) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0785f164561c53a1 — Environment-variable access.
repo/utils/log_reports.py:115 
                "url": f"https://github.com/huggingface/diffusers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ccd4626d623aa70 — Environment-variable access.
repo/utils/log_reports.py:133 
    client = WebClient(token=os.environ.get("SLACK_API_TOKEN"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59173cc656273974 — Filesystem access.
repo/utils/modular_auto_docstring.py:122 
    with open(filepath, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a3711b253133f1c — Filesystem access.
repo/utils/modular_auto_docstring.py:266 
    with open(filepath, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc16fdd76b58c09b — Filesystem access.
repo/utils/modular_auto_docstring.py:298 
        with open(filepath, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfbbe8209b252ca6 — Environment-variable access.
repo/utils/notify_benchmarking_status.py:24 
GITHUB_RUN_ID = os.getenv("GITHUB_RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2755ffb7e060adb9 — Environment-variable access.
repo/utils/notify_benchmarking_status.py:25 
SLACK_WEBHOOK_URL = os.getenv("SLACK_WEBHOOK_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e5bef09fa4a6840 — Environment-variable access.
repo/utils/notify_community_pipelines_mirror.py:24 
GITHUB_RUN_ID = os.getenv("GITHUB_RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da9c97bad00132a6 — Environment-variable access.
repo/utils/notify_community_pipelines_mirror.py:25 
SLACK_WEBHOOK_URL = os.getenv("SLACK_WEBHOOK_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0be6269d75776ce6 — Environment-variable access.
repo/utils/notify_community_pipelines_mirror.py:26 
PATH_IN_REPO = os.getenv("PATH_IN_REPO")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4efd0b1e6342c72 — Environment-variable access.
repo/utils/notify_slack_about_release.py:24 
SLACK_WEBHOOK_URL = os.getenv("SLACK_WEBHOOK_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57cb26313e950162 — Filesystem access.
repo/utils/overwrite_expected_slice.py:23 
    with open(file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf327f28ca60bd04 — Filesystem access.
repo/utils/overwrite_expected_slice.py:62 
    with open(file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e587b3bad15fdc7 — Filesystem access.
repo/utils/overwrite_expected_slice.py:69 
        with open(fail, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #862e211187f41727 — Filesystem access.
repo/utils/overwrite_expected_slice.py:74 
    with open(correct, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3aa276bf3f35d6fa — Environment-variable access.
repo/utils/print_env.py:25 
os.environ["TF_CPP_MIN_LOG_LEVEL"] = "3"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28c2188cda3cb1ff — Filesystem access.
repo/utils/release.py:39 
    with open(fname, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1ad1a4c64996e1e — Filesystem access.
repo/utils/release.py:44 
    with open(fname, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9834a64d9443ecdc — Filesystem access.
repo/utils/release.py:74 
    with open(README_FILE, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf480b78f9298d9d — Filesystem access.
repo/utils/release.py:93 
    with open(README_FILE, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c3adc64a9db45f5 — Filesystem access.
repo/utils/release.py:99 
    with open(REPLACE_FILES["init"], "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #c3e5e0c2236115c3 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/utils/remind_link_issue.py:74 
    response = requests.post(
        GRAPHQL_URL,
        json={"query": GRAPHQL_QUERY, "variables": {"owner": owner, "name": name, "number": number}},
        headers={"Authorization": f"Bearer {token}"},
        timeout=30,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #4a9e460a24b55d7a — Environment-variable access.
repo/utils/remind_link_issue.py:126 
    token = os.environ["GITHUB_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3af27959bbe2a51e — Environment-variable access.
repo/utils/stale.py:39 
    g = Github(os.environ["GITHUB_TOKEN"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc335302b0ca59ae — Filesystem access.
repo/utils/tests_fetcher.py:197 
        with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db0480bee6a9afc3 — Filesystem access.
repo/utils/tests_fetcher.py:200 
    with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4830cd5b90533f8c — Filesystem access.
repo/utils/tests_fetcher.py:223 
        with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1532cee513e893d9 — Filesystem access.
repo/utils/tests_fetcher.py:226 
    with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62fe7a062414e2e8 — Filesystem access.
repo/utils/tests_fetcher.py:370 
    with open("utils/not_doctested.txt") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccff5cc56e296cb6 — Filesystem access.
repo/utils/tests_fetcher.py:394 
            with open(folder / "utils/not_doctested.txt", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f7ba062a605d0e3 — Filesystem access.
repo/utils/tests_fetcher.py:396 
        with open(folder / "utils/not_doctested.txt", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9264538ac1e78cd2 — Filesystem access.
repo/utils/tests_fetcher.py:443 
    with open("utils/slow_documentation_tests.txt") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85d54219d7ae53de — Filesystem access.
repo/utils/tests_fetcher.py:495 
    with open(PATH_TO_REPO / module_fname, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff887e5cadfdc58b — Filesystem access.
repo/utils/tests_fetcher.py:716 
            with open(test_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b22f254b6214ef5 — Filesystem access.
repo/utils/tests_fetcher.py:837 
    with open(json_output_file, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b508f51fdb15a0c0 — Filesystem access.
repo/utils/tests_fetcher.py:847 
        with open(json_output_file, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7f49a61d0a6a559 — Filesystem access.
repo/utils/tests_fetcher.py:863 
    with open(json_output_file, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44905a18f0fac89b — Filesystem access.
repo/utils/tests_fetcher.py:905 
    with open(json_output_file, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e37d7d551545170b — Filesystem access.
repo/utils/tests_fetcher.py:977 
        with open(output_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d09856a8da0e7a63 — Filesystem access.
repo/utils/tests_fetcher.py:995 
        with open(example_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd8ca3806bd74228 — Filesystem access.
repo/utils/tests_fetcher.py:1010 
    with open(output_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6745fcce503f6e9d — Filesystem access.
repo/utils/tests_fetcher.py:1022 
    with open(output_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f652b6aa0ffd879 — Filesystem access.
repo/utils/tests_fetcher.py:1120 
            with open(args.output_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6689b20a326bd82f — Filesystem access.
repo/utils/tests_fetcher.py:1123 
            with open(example_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f509650ae412f04 — Filesystem access.
repo/utils/update_metadata.py:91 
    with open(hub_pipeline_tags_json) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #010772e7786d4dbd — Filesystem access.
repo/utils/update_metadata.py:97 
        with open(os.path.join(tmp_dir, PIPELINE_TAG_JSON)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.