Close Open Privacy Scan
App Privacy Score
High risk · 1107 finding(s)
Based on: 1 first-party package(s) · 0/0 deps analyzed
Dependency score: 100 (Low risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz Potential data exfiltration in application code
External domains:
app.neptune.aiarxiv.orgaxtkn4xl5cip.objectstorage.us-phoenix-1.oci.customer-oci.combugs.python.orgcdn-datasets.huggingface.cocdn-media.huggingface.cocdn.britannica.comcircleci.comclear.mlclip-cn-beijing.oss-cn-beijing.aliyuncs.comconversationhub.blob.core.windows.netdagshub.comdiscuss.huggingface.codiscuss.pytorch.orgdl.fbaipublicfiles.comdocs.neptune.aidocs.nvidia.comdocs.python.orgdocs.pytorch.orgdocs.ray.iodocs.swanlab.cndocs.wandb.aidownload.openmmlab.comdvc.orgen.wikipedia.orgessentia.upf.edufarm4.staticflickr.comflyte.orggiou.stanford.edugist.github.comgithub.comguillaumejaume.github.iohf.cohips.hearstapps.comhub-ci.huggingface.cohuggingface.coi.postimg.ccimages.cocodataset.orgimages.pexels.comlayoutlm.blob.core.windows.netmistralai.github.ionineplanets.orgnlp.stanford.eduobject.pouta.csc.fioptuna.readthedocs.iopaddle-model-ecology.bj.bcebos.compbs.twimg.compraeclarumjj3.github.ioproceedings.neurips.ccprojects4jw.blob.core.windows.netpublicgit.blob.core.windows.netpypi.orgpytorch.orgqwenlm.github.ioraw.githubusercontent.comrrc.cvc.uab.essafetensors-convert.hf.spacestorage.googleapis.comsuno-ai.notion.siteswanlab.cnthumbs.dreamstime.comtwitter.comuploads4.wikiart.orgwww.comet.comwww.cs.cmu.eduwww.deepmind.comwww.dropbox.comwww.dvc.orgwww.ilankelman.orgwww.kxan.comwww.mlflow.orgwww.nature.comwww.tensorflow.orgwww.wandb.com
- 1source
repo/src/transformers/integrations/integration_utils.py:2515 - 2sink
repo/src/transformers/integrations/integration_utils.py:2517
- 1source
repo/src/transformers/models/regnet/convert_regnet_seer_10b_to_pytorch.py:236 - 2sink
repo/src/transformers/models/regnet/convert_regnet_seer_10b_to_pytorch.py:236
- 1source
repo/utils/notification_service.py:1079 - 2sink
repo/utils/notification_service.py:1084
- 1source
repo/utils/notification_service.py:1079 - 2sink
repo/utils/notification_service.py:1098
- 1source
repo/utils/process_bad_commit_report.py:37 - 2sink
repo/utils/process_bad_commit_report.py:151
- 1source
repo/utils/update_pr_ci_dashboard_recap.py:331 - 2sink
repo/utils/update_pr_ci_dashboard_recap.py:350
</> First-Party Code
first-party (python)
python first-party logger.debug(f"[Kubeflow] Token file not found: {token_path}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
logger.info(f"Token is {os.environ['HF_TOKEN']}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
ci_details = requests.get(ci_detail_url, headers=github_headers).json()A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.
Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
ci_details = requests.get(ci_detail_url, headers=github_headers).json()A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.
Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
print(report)PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
print(f"Matched PR #{pr['number']}: {pr['html_url']}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
expand_more 1101 low-confidence finding(s)
low env_fs — Environment-variable access. 293 locations
low env_fs — Filesystem access. 765 locations
repo/src/transformers/models/dab_detr/convert_dab_detr_original_pytorch_checkpoint_to_pytorch.py:140
repo/src/transformers/models/nllb_moe/convert_nllb_moe_sharded_original_checkpoint_to_pytorch.py:122