Close Open Privacy Scan

link https://github.com/huggingface/diffusers
bolt Snapshot: commit 5cfbf05
science engine v1.22
schedule 2026-07-20T12:13:26.149721+00:00

verified_user Possible application data leak

Potential data exfiltration identified in application code.

App Privacy Score

67 /100
Medium privacy risk — possible application leak

Medium risk · 392 finding(s)

Dependency score: 100 (Low risk)

bar_chart Score Breakdown

egress −15
pii_flow −15
env_fs −3

list Scan Summary

0 high 1 medium 391 low
First-party packages: 1
Dependency packages: 0
Ecosystem: python

swap_horiz Potential data exfiltration in application code

External domains: api.github.comarxiv.orgawsdocs-neuron.readthedocs-hosted.combfl.aiblackforestlabs.aiblog.fal.aicivitai.comd2drjpuinn46lb.cloudfront.netdiscuss.pytorch.orgdocs.pytorch.orgen.wikipedia.orgencrypted-tbn0.gstatic.comfacebookresearch.github.ioflax.readthedocs.iogithub.comhf.cohuggingface.coi2vgen-xl.github.ioimages.cocodataset.orgimages.pexels.comjax.readthedocs.iolaion.ailh3.googleusercontent.comlibrosa.orgmarigoldcomputervision.github.iomarigoldmonodepth.github.iomedia.githubusercontent.como7ywnmrahorts457.us-east-1.aws.endpoints.huggingface.cloudpillow.readthedocs.ioptccx55jz97f9zgo.us-east-1.aws.endpoints.huggingface.cloudpypi.orgpytorch.orgq1bj3bpq6kzilnsu.us-east-1.aws.endpoints.huggingface.cloudqc6479g0aac6qwy9.us-east-1.aws.endpoints.huggingface.cloudraw.githubusercontent.comremote-text-encoder-flux-2.huggingface.cotest.pypi.orgtestpypi.python.orguser-images.githubusercontent.comwhhx50ex1aryqvw6.us-east-1.aws.endpoints.huggingface.cloudwww.aiml.informatik.tu-darmstadt.dewww.nvidia.comx2dmsqunjd6k9prw.us-east-1.aws.endpoints.huggingface.cloudxjqqhmyn62rog84g.us-east-1.aws.endpoints.huggingface.cloud

medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/utils/label_issues.py:91 → repo/utils/label_issues.py:117

</> First-Party Code

first-party (python)

python first-party
medium pii_flow production #df5a8b3a55f67256 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/utils/label_issues.py:117 · flow /tmp/closeopen-pah8e0fb/repo/utils/label_issues.py:91 → /tmp/closeopen-pah8e0fb/repo/utils/label_issues.py:117 
        print(json.dumps(labels))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
expand_more 391 low-confidence finding(s)
low env_fs test-only Excluded from app score #3558d9fda755ad36 — Environment-variable access.
repo/benchmarks/run_all.py:14 
GITHUB_SHA = os.getenv("GITHUB_SHA", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9314c2e99d6d0c7d — Environment-variable access.
repo/examples/advanced_diffusion_training/train_dreambooth_lora_flux_advanced.py:848 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2ace8e8132c854ae — Environment-variable access.
repo/examples/advanced_diffusion_training/train_dreambooth_lora_sd15_advanced.py:721 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f4354e1c5f71c992 — Filesystem access.
repo/examples/advanced_diffusion_training/train_dreambooth_lora_sdxl_advanced.py:112 
    with open(model_index, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #dca966368480127d — Environment-variable access.
repo/examples/advanced_diffusion_training/train_dreambooth_lora_sdxl_advanced.py:853 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #dcc771a08ac58402 — Filesystem access.
repo/examples/cogvideo/train_cogvideox_image_to_video_lora.py:549 
        with open(prompt_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7226b0b2990c84f6 — Filesystem access.
repo/examples/cogvideo/train_cogvideox_image_to_video_lora.py:551 
        with open(video_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #81857fab8bf30e5d — Filesystem access.
repo/examples/cogvideo/train_cogvideox_lora.py:533 
        with open(prompt_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5eb307c9dcffc849 — Filesystem access.
repo/examples/cogvideo/train_cogvideox_lora.py:535 
        with open(video_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #0a19200ef542e126 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/examples/community/adaptive_mask_inpainting.py:153 
    response = requests.get(url, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #ca048d6ef52540b0 — Filesystem access.
repo/examples/community/adaptive_mask_inpainting.py:155 
    with open(output_file, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1817d99e02c7d87a — Filesystem access.
repo/examples/community/run_tensorrt_controlnet.py:41 
    with open(engine_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #45f0c3377a281430 — Filesystem access.
repo/examples/community/wildcard_stable_diffusion.py:31 
    with open(path, encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #941a70ec04fe33e1 — Environment-variable access.
repo/examples/consistency_distillation/train_lcm_distill_lora_sd_wds.py:841 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8392583dc3c36879 — Environment-variable access.
repo/examples/consistency_distillation/train_lcm_distill_lora_sdxl.py:663 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #53435c9c86d4c9b6 — Environment-variable access.
repo/examples/consistency_distillation/train_lcm_distill_lora_sdxl_wds.py:821 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b3f234aefc6165af — Environment-variable access.
repo/examples/consistency_distillation/train_lcm_distill_sd_wds.py:806 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f1c00c78e2ff0195 — Environment-variable access.
repo/examples/consistency_distillation/train_lcm_distill_sdxl_wds.py:831 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #90cd64126d1d5c7a — Environment-variable access.
repo/examples/controlnet/train_controlnet_flax.py:467 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #01d1ceacdcf9cd61 — Filesystem access.
repo/examples/cosmos/create_prompts_for_gr1_dataset.py:43 
    meta_lines = open(meta_csv).readlines()[1:]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c5bb90ef3d3fe078 — Filesystem access.
repo/examples/cosmos/create_prompts_for_gr1_dataset.py:55 
        with open(meta_txt_filename, "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b553bf27b6654ebd — Filesystem access.
repo/examples/cosmos/eval_cosmos_predict25_lora.py:51 
        with open(txt_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1fd019bbbdbed40d — Environment-variable access.
repo/examples/cosmos/train_cosmos_predict25_lora.py:255 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bfd04482bedc6533 — Filesystem access.
repo/examples/cosmos/train_cosmos_predict25_lora.py:347 
            return text_source.read_text().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4807957bc3c3ef72 — Filesystem access.
repo/examples/cosmos/train_cosmos_predict25_lora.py:355 
            with open(json_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #c74ca525bf8e000a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/examples/cosmos3/inference_cosmos3.py:50 
        with urllib.request.urlopen(path) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #3dd1712133a7f87f — Filesystem access.
repo/examples/cosmos3/inference_cosmos3.py:53 
        action = json.loads(pathlib.Path(path).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9f61145d4ce57473 — Filesystem access.
repo/examples/cosmos3/inference_cosmos3.py:292 
            with open(action_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0721af15bdf1dab0 — Filesystem access.
repo/examples/custom_diffusion/retrieve.py:54 
        open(f"{class_data_dir}/caption.txt", "w") as f1,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #71c740a826f97460 — Filesystem access.
repo/examples/custom_diffusion/retrieve.py:55 
        open(f"{class_data_dir}/urls.txt", "w") as f2,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #85f6d16a3197b985 — Filesystem access.
repo/examples/custom_diffusion/retrieve.py:56 
        open(f"{class_data_dir}/images.txt", "w") as f3,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #11192e92af8bb2ce — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/examples/custom_diffusion/retrieve.py:62 
                img = requests.get(images["url"], timeout=30)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #dc1c056fb2c8d0f9 — Filesystem access.
repo/examples/custom_diffusion/retrieve.py:65 
                    with open(f"{class_data_dir}/images/{total}.jpg", "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #721c66b6217141d4 — Filesystem access.
repo/examples/custom_diffusion/train_custom_diffusion.py:212 
                    with open(class_data_root, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f31327da6f790164 — Filesystem access.
repo/examples/custom_diffusion/train_custom_diffusion.py:214 
                    with open(concept["class_prompt"], "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bb5f80b78cc2cdab — Environment-variable access.
repo/examples/custom_diffusion/train_custom_diffusion.py:643 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c63fabf39f939be9 — Filesystem access.
repo/examples/custom_diffusion/train_custom_diffusion.py:725 
        with open(args.concepts_list, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #71b170e327ed0569 — Filesystem access.
repo/examples/dreambooth/convert_to_imagefolder.py:30 
        caption_text = caption.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9eb7847a99d894bd — Environment-variable access.
repo/examples/dreambooth/train_dreambooth.py:589 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1e884a68d40080eb — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_flax.py:204 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9802fbdd0fea7e66 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_flux.py:658 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cc6488fcfef30400 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora.py:550 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c3264390c35e50e5 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_flux.py:707 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #07a32eb9fd57264d — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_flux2.py:747 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #93622878f0be71ae — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_flux2.py:1192 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #88dca9a8711acfed — Hardcoded external endpoint. Review what data is sent to this destination.
repo/examples/dreambooth/train_dreambooth_lora_flux2.py:1517 
            response = requests.post(
                "https://remote-text-encoder-flux-2.huggingface.co/predict",
                json={"prompt": prompt},
                headers={"Authorization": f"Bearer {hf_token}", "Content-Type": "application/json"},
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #ade1387f97cbf95b — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_flux2_img2img.py:722 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3b88b127464061ea — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_flux2_img2img.py:1143 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #527fb70c549bdc51 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/examples/dreambooth/train_dreambooth_lora_flux2_img2img.py:1470 
            response = requests.post(
                "https://remote-text-encoder-flux-2.huggingface.co/predict",
                json={"prompt": prompt},
                headers={"Authorization": f"Bearer {hf_token}", "Content-Type": "application/json"},
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #78a8b99eb53c2ea6 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_flux2_klein.py:742 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ff7e29ff753e99ef — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_flux2_klein.py:1187 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a430272de7351dd2 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_flux2_klein_img2img.py:718 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #456b425e9602a6f5 — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_flux2_klein_img2img.py:1139 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d8b7e392002dfd41 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_flux_kontext.py:741 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e8fcf2b3a5f5078f — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_hidream.py:714 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cbeae28d5ebe1d0c — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_hidream.py:1095 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #855eda352526b04a — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_ideogram4.py:840 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #14e0daef10c23885 — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_ideogram4.py:1333 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6cef4ed97d693b60 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_krea2.py:792 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #08c23ed611b8e503 — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_krea2.py:1168 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6291805ad72f34f4 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_lumina2.py:633 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b74b3e445e02cfcb — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_qwen_image.py:684 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f0eafa30e852e996 — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_qwen_image.py:1106 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3c2a2e55ee079d87 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_sana.py:648 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #84ca3e90ba0d90e2 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_sd3.py:701 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9321810245b9eaee — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_sdxl.py:97 
    with open(model_index, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #11afe9de2f566049 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_sdxl.py:697 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #538f5d4c0e453d26 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_lora_z_image.py:736 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b6999887ddb4567e — Filesystem access.
repo/examples/dreambooth/train_dreambooth_lora_z_image.py:1180 
        with open(args.bnb_quantization_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d2440ea9779c47c0 — Environment-variable access.
repo/examples/dreambooth/train_dreambooth_sd3.py:633 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #903c74cb923ad800 — Environment-variable access.
repo/examples/instruct_pix2pix/train_instruct_pix2pix.py:401 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #8dc58a866dcc951a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/examples/instruct_pix2pix/train_instruct_pix2pix.py:422 
    image = PIL.Image.open(requests.get(url, stream=True, timeout=DIFFUSERS_REQUEST_TIMEOUT).raw)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #47f4e9522c1bb86d — Environment-variable access.
repo/examples/instruct_pix2pix/train_instruct_pix2pix_sdxl.py:458 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #51eab4894613591e — Filesystem access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_decoder.py:134 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #111d9067d3f21105 — Environment-variable access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_decoder.py:431 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7bde0d7c2c6a67a9 — Filesystem access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_lora_decoder.py:78 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #afb280175e32209c — Environment-variable access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_lora_decoder.py:316 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4b36a759a202888b — Filesystem access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_lora_prior.py:78 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a324093c2e788b29 — Environment-variable access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_lora_prior.py:323 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1bd2d71ee7838c35 — Filesystem access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_prior.py:137 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6ecd5fe6253a7e7a — Environment-variable access.
repo/examples/kandinsky2_2/text_to_image/train_text_to_image_prior.py:432 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #99b622b2adbb41d3 — Filesystem access.
repo/examples/model_search/pipeline_easy.py:539 
    with open(save_path, mode) as model_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #a4adf0175ca993ba — Hardcoded external endpoint. Review what data is sent to this destination.
repo/examples/model_search/pipeline_easy.py:817 
        response = requests.get("https://civitai.com/api/v1/models", params=params, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #17def175530b4862 — Filesystem access.
repo/examples/research_projects/anytext/anytext.py:485 
        with open(character_dict_path, "rb") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d877507012023606 — Environment-variable access.
repo/examples/research_projects/colossalai/train_dreambooth_colossalai.py:232 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a71ab6505dca9d02 — Environment-variable access.
repo/examples/research_projects/consistency_training/train_cm_ct_unconditional.py:776 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #98db4ca5c8fc3118 — Filesystem access.
repo/examples/research_projects/controlnet/train_controlnet_webdataset.py:473 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #072256a43c69a088 — Environment-variable access.
repo/examples/research_projects/diffusion_dpo/train_diffusion_dpo.py:439 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #08d2c0f7cd62e1fc — Environment-variable access.
repo/examples/research_projects/diffusion_dpo/train_diffusion_dpo_sdxl.py:466 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9eead4defbdf1fa7 — Environment-variable access.
repo/examples/research_projects/diffusion_orpo/train_diffusion_orpo_sdxl_lora.py:456 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #92386c35ac695673 — Environment-variable access.
repo/examples/research_projects/diffusion_orpo/train_diffusion_orpo_sdxl_lora_wds.py:437 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c79bd9c9fba6e543 — Environment-variable access.
repo/examples/research_projects/dreambooth_inpaint/train_dreambooth_inpaint.py:281 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d01fc79a7c500fee — Environment-variable access.
repo/examples/research_projects/dreambooth_inpaint/train_dreambooth_inpaint_lora.py:280 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #21752b24c3ed390d — Environment-variable access.
repo/examples/research_projects/flux_lora_quantization/train_dreambooth_lora_flux_miniature.py:455 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6ce191774c28a7c6 — Environment-variable access.
repo/examples/research_projects/instructpix2pix_lora/train_instruct_pix2pix_lora.py:458 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #c38786485a2281b6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/examples/research_projects/instructpix2pix_lora/train_instruct_pix2pix_lora.py:479 
    image = PIL.Image.open(requests.get(url, stream=True, timeout=DIFFUSERS_REQUEST_TIMEOUT).raw)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #18590e03d22780c3 — Environment-variable access.
repo/examples/research_projects/intel_opts/textual_inversion/textual_inversion_bf16.py:209 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b56711af2d7c960d — Environment-variable access.
repo/examples/research_projects/intel_opts/textual_inversion_dfq/textual_inversion.py:206 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f0957b09ee524409 — Filesystem access.
repo/examples/research_projects/ip_adapter/tutorial_train_faceid.py:37 
            open(json_file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #27799e171b5a8657 — Environment-variable access.
repo/examples/research_projects/ip_adapter/tutorial_train_faceid.py:253 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b7797d549bb4f6bf — Filesystem access.
repo/examples/research_projects/ip_adapter/tutorial_train_ip-adapter.py:43 
        self.data = json.load(open(json_file))  # list of dict: [{"image_file": "1.png", "text": "A dog"}]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b3d690d83f5e9045 — Environment-variable access.
repo/examples/research_projects/ip_adapter/tutorial_train_ip-adapter.py:255 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8938566240b48c7d — Filesystem access.
repo/examples/research_projects/ip_adapter/tutorial_train_plus.py:43 
        self.data = json.load(open(json_file))  # list of dict: [{"image_file": "1.png", "text": "A dog"}]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5ed9f747f83c51ad — Environment-variable access.
repo/examples/research_projects/ip_adapter/tutorial_train_plus.py:271 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e0a9b5655d52f07b — Filesystem access.
repo/examples/research_projects/ip_adapter/tutorial_train_sdxl.py:61 
        self.data = json.load(open(json_file))  # list of dict: [{"image_file": "1.png", "text": "A dog"}]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f104244322379238 — Environment-variable access.
repo/examples/research_projects/ip_adapter/tutorial_train_sdxl.py:316 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bbc72e2b9c79e353 — Filesystem access.
repo/examples/research_projects/lora/train_text_to_image_lora.py:82 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #25f42801724821f2 — Environment-variable access.
repo/examples/research_projects/lora/train_text_to_image_lora.py:378 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ce1c038c8594d462 — Filesystem access.
repo/examples/research_projects/lora/train_text_to_image_lora.py:934 
            with open(os.path.join(args.output_dir, f"{global_step}_lora_config.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a5b23b3e45278fc9 — Filesystem access.
repo/examples/research_projects/lora/train_text_to_image_lora.py:964 
            with open(os.path.join(args.output_dir, f"{global_step}_lora_config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #37cb1890f964071a — Environment-variable access.
repo/examples/research_projects/lpl/train_sdxl_lpl.py:604 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f03fcc036325e6d4 — Environment-variable access.
repo/examples/research_projects/multi_subject_dreambooth/train_multi_subject_dreambooth.py:512 
    env_local_rank = int(environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f165eaf2bdf82610 — Filesystem access.
repo/examples/research_projects/multi_subject_dreambooth/train_multi_subject_dreambooth.py:723 
        with open(args.concepts_list, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6ae46f538b0b7209 — Environment-variable access.
repo/examples/research_projects/multi_token_textual_inversion/textual_inversion.py:394 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1ec358e168d27017 — Environment-variable access.
repo/examples/research_projects/multi_token_textual_inversion/textual_inversion_flax.py:179 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #21a975b23fc56051 — Environment-variable access.
repo/examples/research_projects/onnxruntime/text_to_image/train_text_to_image.py:398 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #debdfb34b7d66b57 — Filesystem access.
repo/examples/research_projects/onnxruntime/textual_inversion/textual_inversion.py:114 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #90bf292d4d0d8d1d — Environment-variable access.
repo/examples/research_projects/onnxruntime/textual_inversion/textual_inversion.py:416 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d94d44015aca920d — Environment-variable access.
repo/examples/research_projects/onnxruntime/unconditional_image_generation/train_unconditional.py:269 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #04de430b3f0bafd4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/examples/research_projects/promptdiffusion/convert_original_promptdiffusion_to_diffusers.py:1439 
            original_config_file = BytesIO(requests.get(config_url, timeout=DIFFUSERS_REQUEST_TIMEOUT).content)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #58d703ecddfbd4c1 — Filesystem access.
repo/examples/research_projects/promptdiffusion/convert_original_promptdiffusion_to_diffusers.py:1441 
            with open(original_config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #adfefb9ceb06b191 — Filesystem access.
repo/examples/research_projects/promptdiffusion/convert_original_promptdiffusion_to_diffusers.py:2011 
    original_config = yaml.safe_load(open(original_config_file))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4a722ad0d06e8813 — Filesystem access.
repo/examples/research_projects/pytorch_xla/inference/flux/flux_inference.py:113 
        with open(metrics_filepath, "w+") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2995210decf23da1 — Filesystem access.
repo/examples/research_projects/pytorch_xla/inference/flux/flux_inference_spmd.py:177 
    with open(metrics_filepath, "w+") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7c39ddc0c2d4d673 — Environment-variable access.
repo/examples/research_projects/pytorch_xla/training/text_to_image/train_text_to_image_xla.py:35 
PROFILE_DIR = os.environ.get("PROFILE_DIR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cb5c74bdc058f641 — Environment-variable access.
repo/examples/research_projects/pytorch_xla/training/text_to_image/train_text_to_image_xla.py:36 
CACHE_DIR = os.environ.get("CACHE_DIR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c72264e0d8b781af — Filesystem access.
repo/examples/research_projects/realfill/train_realfill.py:101 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0f3f92d564b3e107 — Environment-variable access.
repo/examples/research_projects/realfill/train_realfill.py:419 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #286b8d4ca3560f1d — Environment-variable access.
repo/examples/research_projects/sana/train_sana_sprint_diffusers.py:690 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6619d63fa55a58fe — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/dreambooth/train_dreambooth.py:609 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2db4d4a7450d0594 — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/dreambooth/train_dreambooth_lora.py:549 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #404f0877f60f7d89 — Filesystem access.
repo/examples/research_projects/scheduled_huber_loss_training/dreambooth/train_dreambooth_lora_sdxl.py:97 
    with open(model_index, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ad4abcaa929e8cbb — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/dreambooth/train_dreambooth_lora_sdxl.py:701 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b014da3c0dc5f941 — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/text_to_image/train_text_to_image.py:502 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #81d14a5b87a469e7 — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/text_to_image/train_text_to_image_lora.py:397 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #33d94e3ec0d2f191 — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/text_to_image/train_text_to_image_lora_sdxl.py:459 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9f9f89dfbb8ea72c — Environment-variable access.
repo/examples/research_projects/scheduled_huber_loss_training/text_to_image/train_text_to_image_sdxl.py:492 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8006cd6533b210b0 — Filesystem access.
repo/examples/research_projects/sd3_lora_colab/compute_embeddings.py:39 
    with open(image_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2e1018651fb3875b — Environment-variable access.
repo/examples/research_projects/sd3_lora_colab/train_dreambooth_lora_sd3_miniature.py:490 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #70d5eee7464d5035 — Filesystem access.
repo/examples/research_projects/sd3_lora_colab/train_dreambooth_lora_sd3_miniature.py:599 
        with open(image_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bb0cf04bd3d7c94d — Filesystem access.
repo/examples/research_projects/wuerstchen/text_to_image/train_text_to_image_lora_prior.py:140 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #197ab48b51c3e419 — Environment-variable access.
repo/examples/research_projects/wuerstchen/text_to_image/train_text_to_image_lora_prior.py:434 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #466e5362059c548b — Filesystem access.
repo/examples/research_projects/wuerstchen/text_to_image/train_text_to_image_prior.py:137 
    with open(os.path.join(repo_folder, "README.md"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #32ee1670fb846d82 — Environment-variable access.
repo/examples/research_projects/wuerstchen/text_to_image/train_text_to_image_prior.py:432 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a0c1f330eb7ef450 — Environment-variable access.
repo/examples/server-async/Pipelines.py:36 
        self.model_path = model_path or os.getenv("MODEL_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #73d79245f6187cfc — Environment-variable access.
repo/examples/server-async/serverasync.py:41 
    os.environ["PYTORCH_CUDA_ALLOC_CONF"] = "max_split_size_mb:128,expandable_segments:True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cb5942a12ab64184 — Environment-variable access.
repo/examples/server-async/serverasync.py:42 
    os.environ["CUDA_LAUNCH_BLOCKING"] = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #b1f529c331d73591 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/examples/server-async/test.py:22 
    resp = requests.get(direct, timeout=60)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #e17e5748ebeff918 — Filesystem access.
repo/examples/server-async/test.py:26 
    with open(path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #dc8a2400bede571c — Environment-variable access.
repo/examples/server/server.py:50 
            model_path = os.getenv("MODEL_PATH", "stabilityai/stable-diffusion-3.5-large")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6a3110f9fd1bd579 — Environment-variable access.
repo/examples/server/server.py:58 
            model_path = os.getenv("MODEL_PATH", "stabilityai/stable-diffusion-3.5-medium")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8c4db60ba646d14d — Environment-variable access.
repo/examples/server/server.py:70 
service_url = os.getenv("SERVICE_URL", "http://localhost:8000")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a75a39f969e01cc3 — Environment-variable access.
repo/examples/text_to_image/train_text_to_image.py:513 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #357368146fb07dcd — Environment-variable access.
repo/examples/text_to_image/train_text_to_image_flax.py:241 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #343ced89660081e2 — Environment-variable access.
repo/examples/text_to_image/train_text_to_image_lora.py:437 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9f015679fa53f4f1 — Environment-variable access.
repo/examples/text_to_image/train_text_to_image_lora_sdxl.py:498 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2294c17645539e94 — Environment-variable access.
repo/examples/text_to_image/train_text_to_image_sdxl.py:488 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #013a229de25745b6 — Environment-variable access.
repo/examples/textual_inversion/textual_inversion.py:444 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c9e20f7caf499538 — Environment-variable access.
repo/examples/textual_inversion/textual_inversion_flax.py:192 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c6fe7a787e0733cb — Environment-variable access.
repo/examples/textual_inversion/textual_inversion_sdxl.py:430 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #78d39221faf88900 — Environment-variable access.
repo/examples/unconditional_image_generation/train_unconditional.py:288 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #af8186b51c058a1c — Filesystem access.
repo/examples/vqgan/test_vqgan.py:90 
        with open(vqmodel_config_path, "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #75a4572cc31e6159 — Filesystem access.
repo/examples/vqgan/test_vqgan.py:92 
        with open(discriminator_config_path, "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9e5509089b84d106 — Environment-variable access.
repo/examples/vqgan/train_vqgan.py:533 
    env_local_rank = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ac01e3ed55109f29 — Filesystem access.
repo/scripts/change_naming_configs_and_checkpoints.py:69 
    with open(os.path.join(args.repo_path, subfolder, "config.json"), "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #753bd65532e01cd5 — Filesystem access.
repo/scripts/convert_ace_step_to_diffusers.py:92 
        with open(sharded_index_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b06b25dad2f5c1a7 — Filesystem access.
repo/scripts/convert_ace_step_to_diffusers.py:119 
    with open(config_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #919a1f4946423c9b — Environment-variable access.
repo/scripts/convert_amused.py:22 
os.environ["CUDA_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c049abf4356a09e4 — Environment-variable access.
repo/scripts/convert_amused.py:23 
os.environ["CUBLAS_WORKSPACE_CONFIG"] = ":16:8"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #893c3ac956efc11f — Filesystem access.
repo/scripts/convert_consistency_decoder.py:55 
        if insecure_hashlib.sha256(open(download_target, "rb").read()).hexdigest() == expected_sha256:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #fa48d19f631876f1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/scripts/convert_consistency_decoder.py:60 
    with urllib.request.urlopen(url) as source, open(download_target, "wb") as output:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #4f8a3368122b9821 — Filesystem access.
repo/scripts/convert_consistency_decoder.py:60 
    with urllib.request.urlopen(url) as source, open(download_target, "wb") as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7d904399f3a3b9d7 — Filesystem access.
repo/scripts/convert_consistency_decoder.py:76 
    if insecure_hashlib.sha256(open(download_target, "rb").read()).hexdigest() != expected_sha256:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #e793f1f2e4917033 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/scripts/convert_dance_diffusion_to_diffusers.py:78 
    r = requests.get(url, stream=True, timeout=DIFFUSERS_REQUEST_TIMEOUT)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #430d18bf09052e3b — Filesystem access.
repo/scripts/convert_dance_diffusion_to_diffusers.py:81 
    with open(local_filename, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6d022e84905b827e — Filesystem access.
repo/scripts/convert_ddpm_original_checkpoint_to_diffusers.py:403 
    with open(args.config_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #fba3f26362968e7f — Filesystem access.
repo/scripts/convert_hunyuan_video1_5_to_diffusers.py:703 
    with open(font_ann_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #87958789ec153f50 — Filesystem access.
repo/scripts/convert_hunyuan_video1_5_to_diffusers.py:705 
    with open(color_ann_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2a603732fb7b1337 — Filesystem access.
repo/scripts/convert_k_upscaler_to_diffusers.py:280 
    orig_config = K.config.load_config(open(orig_config_path))["model"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3905f58e46101bb7 — Filesystem access.
repo/scripts/convert_ldm_original_checkpoint_to_diffusers.py:341 
    with open(args.config_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9323cd5cff84ca7c — Filesystem access.
repo/scripts/convert_longcat_audio_dit_to_diffusers.py:45 
        with open(index_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #aec640f2fa0fcc78 — Filesystem access.
repo/scripts/convert_longcat_audio_dit_to_diffusers.py:58 
                with open(index_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8f7cd73f3366dad0 — Filesystem access.
repo/scripts/convert_longcat_audio_dit_to_diffusers.py:103 
    with open(config_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #aebdc9acb368ef8b — Filesystem access.
repo/scripts/convert_models_diffuser_to_diffusers.py:55 
    with open(f"hub/hopper-medium-v2/unet/hor{hor}/config.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0603dcaefaafb6e9 — Filesystem access.
repo/scripts/convert_models_diffuser_to_diffusers.py:93 
    with open("hub/hopper-medium-v2/value_function/config.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d4eb616c16ca9077 — Filesystem access.
repo/scripts/convert_ncsnpp_original_checkpoint_to_diffusers.py:165 
    with open(args.config_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8a3d51a6b8dde5e1 — Environment-variable access.
repo/scripts/convert_omnigen_to_diffusers.py:17 
        cache_folder = os.getenv("HF_HUB_CACHE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #21854fe0b1692696 — Filesystem access.
repo/scripts/convert_prx_to_diffusers.py:216 
    with open(os.path.join(scheduler_path, "scheduler_config.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #832a06e02099315b — Filesystem access.
repo/scripts/convert_prx_to_diffusers.py:317 
    with open(os.path.join(output_path, "model_index.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c519817dc4357b14 — Filesystem access.
repo/scripts/convert_prx_to_diffusers.py:332 
    with open(os.path.join(transformer_path, "config.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8b2bf3a5ed1375c2 — Filesystem access.
repo/scripts/convert_stable_audio.py:171 
with open(config_path) as f_in:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #185adef954c9c561 — Filesystem access.
repo/scripts/convert_stable_diffusion_controlnet_to_tensorrt.py:97 
    with open(output_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ebb57a134525dc6a — Filesystem access.
repo/scripts/convert_vq_diffusion_to_diffusers.py:686 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96ae7bfa9a7889c1 — Filesystem access.
repo/setup.py:219 
        with open(target, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59377cf461f4fcc3 — Filesystem access.
repo/setup.py:287 
    long_description=open("README.md", "r", encoding="utf-8").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1e571177ddcc985 — Filesystem access.
repo/src/diffusers/commands/custom_blocks.py:100 
        source = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a116ff9bae9a1a7 — Filesystem access.
repo/src/diffusers/commands/fp16_safetensors.py:90 
        with open(model_index, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e8ca0707fb2fca7 — Filesystem access.
repo/src/diffusers/configuration_utils.py:600 
            text = dduf_entries[json_file].read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a8e8ae9d2e3b624 — Filesystem access.
repo/src/diffusers/configuration_utils.py:602 
            with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c022473ce6bca60 — Filesystem access.
repo/src/diffusers/configuration_utils.py:672 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c6dda3858051db4 — Filesystem access.
repo/src/diffusers/loaders/single_file_utils.py:498 
        with open(original_config_file, "r") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #d14a55b6afa06836 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/diffusers/loaders/single_file_utils.py:508 
        original_config_file = BytesIO(requests.get(original_config_file, timeout=DIFFUSERS_REQUEST_TIMEOUT).content)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #96a2a90629a299e0 — Filesystem access.
repo/src/diffusers/models/model_loading_utils.py:175 
                return safetensors.torch.load(open(checkpoint_file, "rb").read())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2024d13c72e590d3 — Filesystem access.
repo/src/diffusers/models/model_loading_utils.py:195 
            with open(checkpoint_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c700095864488dd — Filesystem access.
repo/src/diffusers/models/modeling_flax_utils.py:419 
                with open(model_file, "rb") as state_f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #446bb3ed0e0b10be — Filesystem access.
repo/src/diffusers/models/modeling_flax_utils.py:423 
                    with open(model_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69f6b12a1d65c948 — Filesystem access.
repo/src/diffusers/models/modeling_flax_utils.py:545 
        with open(output_model_file, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e184eecfd418f203 — Filesystem access.
repo/src/diffusers/models/modeling_pytorch_flax_utils.py:39 
        with open(model_file, "rb") as flax_state_f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc4c272db284d6f1 — Filesystem access.
repo/src/diffusers/models/modeling_pytorch_flax_utils.py:43 
            with open(model_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d9d13188b280ea0 — Filesystem access.
repo/src/diffusers/models/modeling_utils.py:836 
                with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #a2518753ce0d9008 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/diffusers/modular_pipelines/flux2/encoders.py:232 
        response = requests.post(
            self.REMOTE_URL,
            json={"prompt": prompt},
            headers={
                "Authorization": f"Bearer {get_token()}",
                "Content-Type": "application/json",
            },
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #5c6d9ea43f8f487d — Filesystem access.
repo/src/diffusers/modular_pipelines/mellon_node_utils.py:821 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2355e431184fa038 — Filesystem access.
repo/src/diffusers/modular_pipelines/mellon_node_utils.py:827 
        with open(json_file_path, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f528c4c15fca7b69 — Environment-variable access.
repo/src/diffusers/modular_pipelines/modular_pipeline.py:2583 
            os.environ["PT_HPU_GPU_MIGRATION"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbebc3c557857d9d — Environment-variable access.
repo/src/diffusers/modular_pipelines/modular_pipeline.py:2592 
            os.environ["PT_HPU_MAX_COMPOUND_OP_SIZE"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78cbc4eb53a5c074 — Filesystem access.
repo/src/diffusers/pipelines/deprecated/spectrogram_diffusion/midi_utils.py:637 
            with open(midi, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a50b4de6449e6672 — Filesystem access.
repo/src/diffusers/pipelines/kolors/tokenizer.py:223 
        with open(self.vocab_file, "rb") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f420e5f17866436a — Filesystem access.
repo/src/diffusers/pipelines/kolors/tokenizer.py:226 
        with open(vocab_file, "wb") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #686641a8f5c08de1 — Environment-variable access.
repo/src/diffusers/pipelines/pipeline_utils.py:520 
            os.environ["PT_HPU_GPU_MIGRATION"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #265aec7947226f58 — Environment-variable access.
repo/src/diffusers/pipelines/pipeline_utils.py:529 
            os.environ["PT_HPU_MAX_COMPOUND_OP_SIZE"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #cd1320a46c8233ed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/diffusers/pipelines/stable_diffusion/convert_from_ckpt.py:1334 
            original_config_file = BytesIO(requests.get(config_url, timeout=DIFFUSERS_REQUEST_TIMEOUT).content)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #c8aa38f2ef10b11b — Filesystem access.
repo/src/diffusers/pipelines/stable_diffusion/convert_from_ckpt.py:1336 
            with open(original_config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81c4430c5d5b6df5 — Filesystem access.
repo/src/diffusers/pipelines/stable_diffusion/convert_from_ckpt.py:1339 
        with open(original_config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #227508fed2ad6d84 — Filesystem access.
repo/src/diffusers/pipelines/stable_diffusion/convert_from_ckpt.py:1855 
    with open(original_config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e04b41b5f74027f2 — Filesystem access.
repo/src/diffusers/pipelines/transformers_loading_utils.py:53 
                with open(tmp_entry_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0f704a3b06855e9 — Filesystem access.
repo/src/diffusers/pipelines/transformers_loading_utils.py:98 
        with open(tmp_config_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90fc186bcfa8f95a — Filesystem access.
repo/src/diffusers/pipelines/transformers_loading_utils.py:99 
            f.write(config_file.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a7bc136b727933c — Filesystem access.
repo/src/diffusers/pipelines/transformers_loading_utils.py:103 
            with open(tmp_generation_config_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8af0ee07c5eb81a0 — Filesystem access.
repo/src/diffusers/pipelines/transformers_loading_utils.py:104 
                f.write(generation_config.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ac0aff4e923a78e — Environment-variable access.
repo/src/diffusers/quantizers/gguf/utils.py:33 
    os.getenv("DIFFUSERS_GGUF_CUDA_KERNELS", "false").lower() in ["1", "true", "yes"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2c09fed94d32ca5 — Filesystem access.
repo/src/diffusers/quantizers/quantization_config.py:108 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0379906e4e82a57d — Environment-variable access.
repo/src/diffusers/utils/constants.py:26 
_CHECK_PEFT = os.environ.get("_CHECK_PEFT", "1") in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36f455dc28203695 — Environment-variable access.
repo/src/diffusers/utils/constants.py:41 
HUGGINGFACE_CO_RESOLVE_ENDPOINT = os.environ.get("HF_ENDPOINT", "https://huggingface.co")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f85c5a82e8dc5ed0 — Environment-variable access.
repo/src/diffusers/utils/constants.py:43 
HF_MODULES_CACHE = os.getenv("HF_MODULES_CACHE", os.path.join(HF_HOME, "modules"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f473c3006454007 — Environment-variable access.
repo/src/diffusers/utils/constants.py:46 
DIFFUSERS_ATTN_BACKEND = os.getenv("DIFFUSERS_ATTN_BACKEND", "native")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c3e491ca5f0d445 — Environment-variable access.
repo/src/diffusers/utils/constants.py:47 
DIFFUSERS_ATTN_CHECKS = os.getenv("DIFFUSERS_ATTN_CHECKS", "0").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cc539b40c5ff8c4 — Environment-variable access.
repo/src/diffusers/utils/constants.py:49 
HF_ENABLE_PARALLEL_LOADING = os.environ.get("HF_ENABLE_PARALLEL_LOADING", "").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5e1e661900626b7 — Environment-variable access.
repo/src/diffusers/utils/constants.py:50 
DIFFUSERS_DISABLE_REMOTE_CODE = os.getenv("DIFFUSERS_DISABLE_REMOTE_CODE", "false").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c051b1759c6fdea6 — Environment-variable access.
repo/src/diffusers/utils/dynamic_modules_utils.py:42 
TIME_OUT_REMOTE_CODE = int(os.getenv("DIFFUSERS_TIMEOUT_REMOTE_CODE", 15))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #7f8c76455aea7962 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/diffusers/utils/dynamic_modules_utils.py:48 
    releases = json.loads(request.urlopen(url).read())["releases"].keys()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #ecf5abc86d505bb9 — Filesystem access.
repo/src/diffusers/utils/dynamic_modules_utils.py:89 
    with open(module_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e96b0020e80752cb — Filesystem access.
repo/src/diffusers/utils/dynamic_modules_utils.py:133 
    with open(filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76b503ffde39e442 — Filesystem access.
repo/src/diffusers/utils/export_utils.py:63 
    with buffered_writer(open(output_ply_path, "wb")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e9dbce50bbfd095 — Filesystem access.
repo/src/diffusers/utils/export_utils.py:120 
    with open(output_obj_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac2817d8e1f47699 — Environment-variable access.
repo/src/diffusers/utils/hub_utils.py:89 
    if os.environ.get("DIFFUSERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6887da1710f02864 — Filesystem access.
repo/src/diffusers/utils/hub_utils.py:389 
        index = json.loads(dduf_entries[index_filename].read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2790a6b887afd6b4 — Filesystem access.
repo/src/diffusers/utils/hub_utils.py:391 
        with open(index_filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d43ee8484a8bd2d — Environment-variable access.
repo/src/diffusers/utils/import_utils.py:50 
USE_TF = os.environ.get("USE_TF", "AUTO").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57342fb9269591e4 — Environment-variable access.
repo/src/diffusers/utils/import_utils.py:51 
USE_TORCH = os.environ.get("USE_TORCH", "AUTO").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a162c8509e06151 — Environment-variable access.
repo/src/diffusers/utils/import_utils.py:52 
USE_JAX = os.environ.get("USE_FLAX", "AUTO").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd00fa9cf5f23818 — Environment-variable access.
repo/src/diffusers/utils/import_utils.py:53 
USE_SAFETENSORS = os.environ.get("USE_SAFETENSORS", "AUTO").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9efc2b59d11345be — Environment-variable access.
repo/src/diffusers/utils/import_utils.py:54 
DIFFUSERS_SLOW_IMPORT = os.environ.get("DIFFUSERS_SLOW_IMPORT", "FALSE").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe124d47a17f6d24 — Environment-variable access.
repo/src/diffusers/utils/import_utils.py:59 
_is_google_colab = "google.colab" in sys.modules or any(k.startswith("COLAB_") for k in os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5615ddd902c68663 — Filesystem access.
repo/src/diffusers/utils/import_utils.py:73 
                    _top_level_declared = (dist.read_text("top_level.txt") or "").split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #7148eb6a1573bbe6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/diffusers/utils/loading_utils.py:33 
            image = PIL.Image.open(requests.get(image, stream=True, timeout=DIFFUSERS_REQUEST_TIMEOUT).raw)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ac289a3f17bc8d32 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/diffusers/utils/loading_utils.py:85 
        response = requests.get(video, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #804105eec01bf70b — Filesystem access.
repo/src/diffusers/utils/loading_utils.py:98 
        with open(video_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfa7686b9c1502db — Environment-variable access.
repo/src/diffusers/utils/logging.py:75 
    env_level_str = os.getenv("DIFFUSERS_VERBOSITY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e869c727cbd34cf2 — Environment-variable access.
repo/src/diffusers/utils/logging.py:293 
    no_advisory_warnings = os.getenv("DIFFUSERS_NO_ADVISORY_WARNINGS", False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #805155624db7d3c6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/diffusers/utils/remote_utils.py:326 
    response = requests.post(endpoint, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #d9f8dd7b6d4c7af2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/diffusers/utils/remote_utils.py:421 
    response = requests.post(endpoint, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #c5a9f5e33e420ff2 — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:86 
BIG_GPU_MEMORY = int(os.getenv("BIG_GPU_MEMORY", 40))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f66a893bd338ce3 — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:92 
    if "DIFFUSERS_TEST_BACKEND" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8f69840bc5f4fe8 — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:93 
        backend = os.environ["DIFFUSERS_TEST_BACKEND"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18496ccaedcc5db4 — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:102 
    if "DIFFUSERS_TEST_DEVICE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f8c0f48982347c3 — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:103 
        torch_device = os.environ["DIFFUSERS_TEST_DEVICE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab7459eb82588bcc — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:181 
    test_name = os.environ.get("PYTEST_CURRENT_TEST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de67b3b2f555543d — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:193 
    with open(filename, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42bd6b73c5173577 — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:236 
        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #cf081cf9828bf0f2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/diffusers/utils/testing_utils.py:691 
            response = requests.get(arry, timeout=DIFFUSERS_REQUEST_TIMEOUT)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #8f36836768b3edb6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/diffusers/utils/testing_utils.py:712 
    response = requests.get(url, timeout=DIFFUSERS_REQUEST_TIMEOUT)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #847b284e281e9988 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/diffusers/utils/testing_utils.py:731 
            image = PIL.Image.open(requests.get(image, stream=True, timeout=DIFFUSERS_REQUEST_TIMEOUT).raw)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #71ebce6877bd55db — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:792 
    with buffered_writer(open(output_ply_path, "wb")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cfffb75e86ae4d1 — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:848 
    with open(output_obj_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efa0eee882a725b9 — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:960 
        with open(report_files["durations"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bfaa4c8f5dd860c — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:990 
    with open(report_files["failures_long"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f027380fa38e4e1 — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:995 
    with open(report_files["failures_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9ba8a347638c49b — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:1000 
    with open(report_files["failures_line"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04b999870c9c2680 — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:1004 
    with open(report_files["errors"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9dbfb079997c3ea — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:1008 
    with open(report_files["warnings"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e79dc994a07bf222 — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:1014 
    with open(report_files["passes"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #883b77a3cc0db8bb — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:1018 
    with open(report_files["summary_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ed9d9498dc061a4 — Filesystem access.
repo/src/diffusers/utils/testing_utils.py:1022 
    with open(report_files["stats"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84c587bcf65bac8c — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:1097 
        timeout = int(os.environ.get("PYTEST_TIMEOUT", 600))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cce460b824feefba — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:1402 
    if "DIFFUSERS_TEST_DEVICE_SPEC" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3514d15c8d377dce — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:1403 
        device_spec_path = os.environ["DIFFUSERS_TEST_DEVICE_SPEC"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #920acfd24d36057a — Environment-variable access.
repo/src/diffusers/utils/testing_utils.py:1419 
        if "DIFFUSERS_TEST_DEVICE" in os.environ and torch_device != device_name:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1fb50c0b2d917d4 — Environment-variable access.
repo/src/diffusers/utils/torch_utils.py:364 
    os.environ["CUDA_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb54e991425fc25a — Environment-variable access.
repo/src/diffusers/utils/torch_utils.py:365 
    os.environ["CUBLAS_WORKSPACE_CONFIG"] = ":16:8"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6bf276797fffe1e1 — Environment-variable access.
repo/src/diffusers/utils/torch_utils.py:375 
    os.environ["CUDA_LAUNCH_BLOCKING"] = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bc88e68dc035d66 — Environment-variable access.
repo/src/diffusers/utils/torch_utils.py:376 
    os.environ["CUBLAS_WORKSPACE_CONFIG"] = ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46e3454d5df77404 — Filesystem access.
repo/utils/check_copies.py:47 
    with open(
        os.path.join(DIFFUSERS_PATH, f"{module}.py"),
        "r",
        encoding="utf-8",
        newline="\n",
    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ac6f2b52dac6687 — Filesystem access.
repo/utils/check_copies.py:126 
    with open(filename, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2537d1320f30c983 — Filesystem access.
repo/utils/check_copies.py:193 
        with open(filename, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e81f754006011ef — Filesystem access.
repo/utils/check_doc_toc.py:73 
    with open(PATH_TO_TOC, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cbf93e309aa54261 — Filesystem access.
repo/utils/check_doc_toc.py:99 
            with open(PATH_TO_TOC, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b042ab9dbe11f42 — Filesystem access.
repo/utils/check_doc_toc.py:108 
    with open(PATH_TO_TOC, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37eea69c465596dd — Filesystem access.
repo/utils/check_doc_toc.py:148 
            with open(PATH_TO_TOC, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9222a2beecb31c87 — Filesystem access.
repo/utils/check_doc_toc.py:157 
    with open(PATH_TO_TOC, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8626b88d8c6ecf5 — Filesystem access.
repo/utils/check_doc_toc.py:197 
            with open(PATH_TO_TOC, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf21c50d78b03d39 — Filesystem access.
repo/utils/check_dummies.py:69 
    with open(os.path.join(PATH_TO_DIFFUSERS, "__init__.py"), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc9d36a5b16877d1 — Filesystem access.
repo/utils/check_dummies.py:148 
            with open(file_path, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2aaf6002c9ce0a61 — Filesystem access.
repo/utils/check_dummies.py:160 
                with open(dummy_file_paths[backend], "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9538cc12d95df081 — Filesystem access.
repo/utils/check_forward_call_docstrings.py:207 
        tree = ast.parse(path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c1d4b717f4bdcf9 — Filesystem access.
repo/utils/check_forward_call_docstrings.py:264 
    source = path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a15b6e0684e8cba — Filesystem access.
repo/utils/check_forward_call_docstrings.py:367 
    path.write_text("".join(new_lines), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b74c1a1cbef66e67 — Filesystem access.
repo/utils/check_inits.py:64 
    with open(init_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e95ba4fada6230d — Filesystem access.
repo/utils/check_repo.py:357 
    with open(os.path.join(PATH_TO_TESTS, test_file), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37668016c549aa8e — Environment-variable access.
repo/utils/check_repo.py:465 
        if os.getenv("TRANSFORMERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf6a2341add694b8 — Filesystem access.
repo/utils/check_repo.py:493 
    with open(filename, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #112bb9be704b3f39 — Filesystem access.
repo/utils/check_repo.py:529 
        with open(doc_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60b386549765cf1c — Filesystem access.
repo/utils/check_repo.py:534 
        with open(doc_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0edea5f96c4746a3 — Filesystem access.
repo/utils/check_repo.py:720 
        with open(file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97e2d3bd0f977e5b — Filesystem access.
repo/utils/check_support_list.py:33 
    with open(os.path.join(REPO_PATH, doc_path), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd70b28da2aa1f66 — Filesystem access.
repo/utils/check_support_list.py:46 
    with open(os.path.join(REPO_PATH, src_path), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98bc2214d2c5e545 — Filesystem access.
repo/utils/check_table.py:35 
    with open(filename, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5961ed565516bf8 — Filesystem access.
repo/utils/check_table.py:172 
            with open(os.path.join(PATH_TO_DOCS, "index.md"), "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8726a508d1d2f59c — Filesystem access.
repo/utils/check_test_missing.py:11 
    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #027a9a9a9e1f61ab — Filesystem access.
repo/utils/check_test_missing.py:31 
    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bd66f44dc80698b — Filesystem access.
repo/utils/consolidated_test_report.py:27 
        with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c677c3bd440d115 — Filesystem access.
repo/utils/consolidated_test_report.py:98 
            with open(durations_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56f3b7e736f76df8 — Filesystem access.
repo/utils/consolidated_test_report.py:140 
        with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d91390b681f38e03 — Filesystem access.
repo/utils/consolidated_test_report.py:161 
                                    with open(line_file, "r") as lf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1117e712a0b800b — Filesystem access.
repo/utils/consolidated_test_report.py:287 
                    with open(summary_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5ffbccafee74e0f — Environment-variable access.
repo/utils/consolidated_test_report.py:326 
    num_slowest_tests = int(os.environ.get("SHOW_SLOWEST_TESTS", "10"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac35d7cdff9fe516 — Environment-variable access.
repo/utils/consolidated_test_report.py:628 
    if os.environ.get("GITHUB_RUN_ID"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e14d26c31fb0b913 — Environment-variable access.
repo/utils/consolidated_test_report.py:629 
        run_id = os.environ["GITHUB_RUN_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #885cc8f9d86ba4f7 — Filesystem access.
repo/utils/consolidated_test_report.py:747 
        with open(args.output_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a99d0752e91f0be4 — Environment-variable access.
repo/utils/consolidated_test_report.py:754 
    slack_token = os.environ.get("SLACK_API_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2327641e71070464 — Filesystem access.
repo/utils/custom_init_isort.py:243 
    with open(file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a0e0cc0c7d7ef8c — Filesystem access.
repo/utils/custom_init_isort.py:304 
            with open(file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #163f15e7f48da7a8 — Environment-variable access.
repo/utils/fetch_torch_cuda_pipeline_test_matrix.py:24 
PIPELINE_USAGE_CUTOFF = int(os.getenv("PIPELINE_USAGE_CUTOFF", 50000))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49a29373f85979c4 — Filesystem access.
repo/utils/fetch_torch_cuda_pipeline_test_matrix.py:94 
    with open(f"{save_path}/test-pipelines.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b20e717c7b48d5ba — Filesystem access.
repo/utils/generate_model_tests.py:198 
    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #735ff72ed186666a — Filesystem access.
repo/utils/generate_model_tests.py:594 
        with open(output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de749c74d42afe5e — Environment-variable access.
repo/utils/label_issues.py:88 
        title = os.environ.get("ISSUE_TITLE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07aa24a8007612fa — Environment-variable access.
repo/utils/label_issues.py:89 
        body = os.environ.get("ISSUE_BODY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d8bbb8b3e126962 — Environment-variable access.
repo/utils/label_issues.py:91 
        client = InferenceClient(api_key=os.environ["HF_TOKEN"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6b7980a3817fa75 — Environment-variable access.
repo/utils/label_issues.py:94 
            model=os.environ.get("HF_MODEL", "Qwen/Qwen3.5-35B-A3B"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #104f0468efa1d5c2 — Filesystem access.
repo/utils/log_reports.py:31 
        with open(log) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a81bbfbae0da4bfb — Environment-variable access.
repo/utils/log_reports.py:115 
                "url": f"https://github.com/huggingface/diffusers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be5bf5f5492ebe6e — Environment-variable access.
repo/utils/log_reports.py:133 
    client = WebClient(token=os.environ.get("SLACK_API_TOKEN"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec30eb4520c1a5d9 — Filesystem access.
repo/utils/modular_auto_docstring.py:122 
    with open(filepath, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f559b2bbac5a335 — Filesystem access.
repo/utils/modular_auto_docstring.py:266 
    with open(filepath, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55d18d3f6c583f5e — Filesystem access.
repo/utils/modular_auto_docstring.py:298 
        with open(filepath, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dccc1a72bc3da01a — Environment-variable access.
repo/utils/notify_benchmarking_status.py:24 
GITHUB_RUN_ID = os.getenv("GITHUB_RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5529cbca2622a78 — Environment-variable access.
repo/utils/notify_benchmarking_status.py:25 
SLACK_WEBHOOK_URL = os.getenv("SLACK_WEBHOOK_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #c691f4f6ca0ef2de — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/utils/notify_benchmarking_status.py:44 
    response = requests.post(SLACK_WEBHOOK_URL, json=payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #e8bfc1b5cd04597d — Environment-variable access.
repo/utils/notify_community_pipelines_mirror.py:24 
GITHUB_RUN_ID = os.getenv("GITHUB_RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ab2ec7a2474c6fc — Environment-variable access.
repo/utils/notify_community_pipelines_mirror.py:25 
SLACK_WEBHOOK_URL = os.getenv("SLACK_WEBHOOK_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5693586d31372dd — Environment-variable access.
repo/utils/notify_community_pipelines_mirror.py:26 
PATH_IN_REPO = os.getenv("PATH_IN_REPO")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #bc801513041cebc1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/utils/notify_community_pipelines_mirror.py:42 
    response = requests.post(SLACK_WEBHOOK_URL, json=payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #ce32e814f2c8ea77 — Environment-variable access.
repo/utils/notify_slack_about_release.py:24 
SLACK_WEBHOOK_URL = os.getenv("SLACK_WEBHOOK_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #352d8fd5dd5938b3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/utils/notify_slack_about_release.py:29 
    response = requests.get(f"https://pypi.org/pypi/{library_name}/json", timeout=60)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #be3f938cf4e2fb8a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/utils/notify_slack_about_release.py:41 
    response = requests.get(url, timeout=60)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #7cb8335c06f2ce1a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/utils/notify_slack_about_release.py:60 
    response = requests.post(webhook_url, json=payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #b6ade8ea1d73688b — Filesystem access.
repo/utils/overwrite_expected_slice.py:23 
    with open(file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c59fb10443751012 — Filesystem access.
repo/utils/overwrite_expected_slice.py:62 
    with open(file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d5d98a4cfc609cf — Filesystem access.
repo/utils/overwrite_expected_slice.py:69 
        with open(fail, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2a4b04edbf448af — Filesystem access.
repo/utils/overwrite_expected_slice.py:74 
    with open(correct, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07f0ccca931cd79f — Environment-variable access.
repo/utils/print_env.py:25 
os.environ["TF_CPP_MIN_LOG_LEVEL"] = "3"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #676a6cd02fb14729 — Filesystem access.
repo/utils/release.py:39 
    with open(fname, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd1880353331bb59 — Filesystem access.
repo/utils/release.py:44 
    with open(fname, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee0f80fb387b7420 — Filesystem access.
repo/utils/release.py:74 
    with open(README_FILE, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3192f5306223c305 — Filesystem access.
repo/utils/release.py:93 
    with open(README_FILE, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4b1f3a44b2ef0b2 — Filesystem access.
repo/utils/release.py:99 
    with open(REPLACE_FILES["init"], "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #2110a2f611fc39b8 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/utils/remind_link_issue.py:74 
    response = requests.post(
        GRAPHQL_URL,
        json={"query": GRAPHQL_QUERY, "variables": {"owner": owner, "name": name, "number": number}},
        headers={"Authorization": f"Bearer {token}"},
        timeout=30,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #1c44af55e4c0ec4c — Environment-variable access.
repo/utils/remind_link_issue.py:126 
    token = os.environ["GITHUB_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc76bb85ccc5df67 — Environment-variable access.
repo/utils/stale.py:39 
    g = Github(os.environ["GITHUB_TOKEN"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b92311c5b9684a2c — Filesystem access.
repo/utils/tests_fetcher.py:197 
        with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42c5d726ed71b5c8 — Filesystem access.
repo/utils/tests_fetcher.py:200 
    with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6174ae12d465e429 — Filesystem access.
repo/utils/tests_fetcher.py:223 
        with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4b2ef56259ba701 — Filesystem access.
repo/utils/tests_fetcher.py:226 
    with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #771f3a8c91da3f94 — Filesystem access.
repo/utils/tests_fetcher.py:370 
    with open("utils/not_doctested.txt") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb54071e2bcad56a — Filesystem access.
repo/utils/tests_fetcher.py:394 
            with open(folder / "utils/not_doctested.txt", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5c84371ad7b69be — Filesystem access.
repo/utils/tests_fetcher.py:396 
        with open(folder / "utils/not_doctested.txt", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b02b83587859cf9a — Filesystem access.
repo/utils/tests_fetcher.py:443 
    with open("utils/slow_documentation_tests.txt") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #797d218bf60ff80c — Filesystem access.
repo/utils/tests_fetcher.py:495 
    with open(PATH_TO_REPO / module_fname, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #942542e63d0c9848 — Filesystem access.
repo/utils/tests_fetcher.py:716 
            with open(test_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16c04d08d11d8fbd — Filesystem access.
repo/utils/tests_fetcher.py:837 
    with open(json_output_file, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06f6bcde64f1bf83 — Filesystem access.
repo/utils/tests_fetcher.py:847 
        with open(json_output_file, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d38093ea903ba2c — Filesystem access.
repo/utils/tests_fetcher.py:863 
    with open(json_output_file, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ca49009b13b8f23 — Filesystem access.
repo/utils/tests_fetcher.py:905 
    with open(json_output_file, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #391d0e139b491e3c — Filesystem access.
repo/utils/tests_fetcher.py:977 
        with open(output_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f51186012ef281a — Filesystem access.
repo/utils/tests_fetcher.py:995 
        with open(example_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd4135a6684806cb — Filesystem access.
repo/utils/tests_fetcher.py:1010 
    with open(output_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #503a1f3511bd7cc4 — Filesystem access.
repo/utils/tests_fetcher.py:1022 
    with open(output_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f89131dbb71de29 — Filesystem access.
repo/utils/tests_fetcher.py:1120 
            with open(args.output_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00b9603d36e925b2 — Filesystem access.
repo/utils/tests_fetcher.py:1123 
            with open(example_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac252d35e6b5f576 — Filesystem access.
repo/utils/update_metadata.py:91 
    with open(hub_pipeline_tags_json) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b6324dbca807aea — Filesystem access.
repo/utils/update_metadata.py:97 
        with open(os.path.join(tmp_dir, PIPELINE_TAG_JSON)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.