Close Open Privacy Scan

link https://github.com/microsoft/DeepSpeed
bolt Snapshot: commit 195255e
science engine v3
schedule 2026-07-11T16:06:27.039331+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

App Privacy Score

97 /100
Low privacy risk

Low risk · 302 finding(s)

Dependency score: 100 (Low risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 0 medium 302 low
First-party packages: 1
Dependency packages: 0
Ecosystem: python

swap_horiz Application data flows

No high- or medium-confidence application data-flow findings in this scan.

</> First-Party Code

first-party (python)

python first-party
expand_more 302 low-confidence finding(s)
low env_fs production #0cf4da20349b1848 — Environment-variable access.
repo/accelerator/cpu_accelerator.py:65 
        return os.environ.get('LOCAL_RANK', 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81310e24dc8042a8 — Environment-variable access.
repo/accelerator/cpu_accelerator.py:71 
        device_count = int(os.environ.get('LOCAL_SIZE', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48934ecd36f39002 — Environment-variable access.
repo/accelerator/cuda_accelerator.py:187 
        if "CUDA_VISIBLE_DEVICES" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02ae56e37d17a6f2 — Environment-variable access.
repo/accelerator/cuda_accelerator.py:188 
            ids = list(map(int, os.environ.get("CUDA_VISIBLE_DEVICES", "").split(",")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f6d64a78da32392 — Environment-variable access.
repo/accelerator/cuda_accelerator.py:214 
        allow_deprecated_fp16 = os.environ.get('DS_ALLOW_DEPRECATED_FP16', '0') == '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b75aba097716c65 — Environment-variable access.
repo/accelerator/hpu_accelerator.py:37 
            if key not in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe27891e2e1bbb9b — Environment-variable access.
repo/accelerator/hpu_accelerator.py:38 
                os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #032b3aae31e4b4ae — Environment-variable access.
repo/accelerator/real_accelerator.py:59 
    if "DS_ACCELERATOR" in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29b79166582714cb — Environment-variable access.
repo/accelerator/real_accelerator.py:60 
        accelerator_name = os.environ["DS_ACCELERATOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77b942f63dabff08 — Environment-variable access.
repo/bin/ds_bench:11 
if not all(map(lambda v: v in os.environ, required_env)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9140d6064b8d5f7b — Filesystem access.
repo/bin/ds_elastic:14 
    ds_config = json.load(open(args.config, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b057270f91604ace — Filesystem access.
repo/ci/test_tests_fetcher.py:91 
        p.write_text(content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3085d0ed58f31d75 — Filesystem access.
repo/ci/tests_fetcher.py:351 
            tree = ast.parse(path.read_text(encoding="utf-8"), filename=str(path))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29f13da7d9b57f18 — Environment-variable access.
repo/ci/tests_fetcher.py:622 
    gh_out = os.environ.get("GITHUB_OUTPUT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26cc6b263c47595b — Filesystem access.
repo/ci/tests_fetcher.py:625 
    with open(gh_out, "a", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd6c4b64c0afd5c0 — Environment-variable access.
repo/ci/tests_fetcher.py:633 
    path = os.environ.get("GITHUB_STEP_SUMMARY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9dad60753b55bca — Filesystem access.
repo/ci/tests_fetcher.py:661 
        with open(path, "a", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8395760de9ac72f2 — Filesystem access.
repo/ci/tests_fetcher.py:725 
    out_path.write_text("\n".join(targets) + ("\n" if targets else ""), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22a15400c3f0099f — Environment-variable access.
repo/ci/torch_latest.py:56 
    selected_preset = os.environ.get("MODAL_TORCH_PRESET") or DEFAULT_MODAL_TORCH_PRESET

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed8fbb8ae938b8b9 — Environment-variable access.
repo/ci/torch_latest.py:70 
    transformers_source = os.environ.get("MODAL_TRANSFORMERS_SOURCE") or DEFAULT_MODAL_TRANSFORMERS_SOURCE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c1efc89163d4400 — Environment-variable access.
repo/ci/torch_latest.py:77 
    transformers_ref = os.environ.get("MODAL_TRANSFORMERS_REF") or ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52a5c1cb158d9b2f — Environment-variable access.
repo/ci/torch_latest.py:139 
    env_path = os.environ.get("DS_TEST_LIST_FILE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd7f0cc4a7f5945e — Filesystem access.
repo/ci/torch_latest.py:144 
        targets = [line.strip() for line in list_file.read_text().splitlines() if line.strip()]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c126c015b6d626d — Environment-variable access.
repo/ci/torch_latest.py:206 
    selected_tests = os.environ.get("DS_SELECTED_TESTS", DEFAULT_TEST_TARGET).split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fb5511d3898f05d — Filesystem access.
repo/csrc/aio/py_test/aio_bench_perf_sweep.py:107 
    with open(sweep_config_json) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7fba0ed2d7acbd9 — Filesystem access.
repo/csrc/aio/py_test/ds_aio_job.py:34 
            self.output_fd = open(self.output_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e411cd07b796116a — Filesystem access.
repo/csrc/aio/py_test/parse_aio_stats.py:90 
    with open(file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b9cffcc37b74fdd — Environment-variable access.
repo/deepspeed/__init__.py:14 
os.environ.setdefault("PYTORCH_NVML_BASED_CUDA_CHECK", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05ca7016169c20de — Filesystem access.
repo/deepspeed/__init__.py:386 
        with open(config, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3305bffb30b383f — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:136 
            with open(os.path.join(self.results_dir, 'summary.txt'), 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18877056d667b7e6 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:152 
            with open(os.path.join(self.results_dir, 'summary.txt'), 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9e0059c3b48d7ea — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:184 
                return json.load(open(user_config_file, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d67b1acc904a68a — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:332 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f58358003b73bb48 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:337 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #748c3874a8b9734d — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:342 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #361196c9261d814d — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:347 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2975f3b94078820 — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:408 
            self.mlflow_parent_id = os.environ['MLFLOW_RUN_ID']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36890e64630e38e0 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:689 
        with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d73d015178da42f9 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:704 
            with open(model_info_path, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a778878a391403bb — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:768 
            with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92c0163bcbb521a9 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:782 
                    with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6868305ddcd550ae — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:789 
                            os.environ.pop('MLFLOW_RUN_ID')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c705c8f75a6878df — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:794 
                            os.environ['MLFLOW_RUN_ID'] = self.mlflow_parent_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51ffb770f6c5a284 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:828 
                with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #587dbfc684ed6919 — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:832 
                        os.environ.pop('MLFLOW_RUN_ID')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ec455a53b8e9fa3 — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:837 
                        os.environ['MLFLOW_RUN_ID'] = self.mlflow_parent_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea60806a4d5a2104 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1065 
        with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e54502c8b506276 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1083 
            with open(os.path.join(exp_dir, "cmd.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #420accfc88f305c9 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1086 
            ds_config = hjson.load(open(os.path.join(exp_dir, "ds_config.json"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7819b3b223e0aa3 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1090 
            json.dump(ds_config, open(ds_config_path, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81bbfba248e94eba — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1093 
            with open(cmd_path, "w") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e72fd13b9be19722 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:64 
                with open(exp_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3914cd16f4c19f7f — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:207 
            with open(path, 'a') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9442fa735d51c7ff — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:232 
                with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b324462a8c8bfc0 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:291 
    if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b44a3d067bf08a99 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:292 
        infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69be49240a145d39 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:293 
    elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aeeda39eb92a4c43 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:294 
        infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd95e6d0d8676b3c — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:303 
    if "USER" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee88b58f415aada6 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:304 
        user = os.environ["USER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04e5f4941b290980 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:341 
    with open(exp["ds_config_path"], "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1393bb6b60d196a — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:348 
    with open(os.path.join(exp_dir, "exp.json"), "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4e68383b39209f6 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:374 
    with open(os.path.join(exp_dir, "cmd.txt"), "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb50f2fb781f3e5c — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:384 
    with open(os.path.join(exp_dir, "stdout.log"), "wb") as out, open(os.path.join(exp_dir, "stderr.log"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46bb7d0122e353c7 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:384 
    with open(os.path.join(exp_dir, "stdout.log"), "wb") as out, open(os.path.join(exp_dir, "stderr.log"),
                                                                      "wb") as err:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c24b7811224909ff — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:402 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a5f49bd03d0c83f — Filesystem access.
repo/deepspeed/autotuning/tuner/model_based_tuner.py:136 
            with open(p, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e613c86c72db160 — Filesystem access.
repo/deepspeed/autotuning/utils.py:20 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c5f37fc283e28c8 — Filesystem access.
repo/deepspeed/autotuning/utils.py:32 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ec66be5388e68d7 — Filesystem access.
repo/deepspeed/autotuning/utils.py:157 
    with open(hostfile_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cf870bee54ee439 — Filesystem access.
repo/deepspeed/autotuning/utils.py:409 
        with open(exp_path, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #196970b2811575d2 — Filesystem access.
repo/deepspeed/checkpoint/ds_to_universal.py:904 
    with open(latest_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c181da514d6bda9b — Environment-variable access.
repo/deepspeed/comm/comm.py:151 
    rank = int(os.getenv('RANK', '-1'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eec45b88504e8581 — Environment-variable access.
repo/deepspeed/comm/comm.py:152 
    size = int(os.getenv('WORLD_SIZE', '-1'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da1d899a3702ca24 — Environment-variable access.
repo/deepspeed/comm/comm.py:834 
        if auto_mpi_discovery and not all(map(lambda v: v in os.environ, required_env)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3bcf41b14bd1034 — Environment-variable access.
repo/deepspeed/comm/comm.py:845 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #977d55129fcf3c22 — Environment-variable access.
repo/deepspeed/comm/comm.py:851 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a0ae9cd37cdac84 — Environment-variable access.
repo/deepspeed/comm/comm.py:884 
    os.environ['RANK'] = str(rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e07ac5460439151 — Environment-variable access.
repo/deepspeed/comm/comm.py:885 
    os.environ['WORLD_SIZE'] = str(world_size)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adf9638bf16b03cd — Environment-variable access.
repo/deepspeed/comm/comm.py:886 
    os.environ['LOCAL_RANK'] = str(local_rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1bb7c0a9328303ce — Environment-variable access.
repo/deepspeed/comm/comm.py:887 
    os.environ['MASTER_ADDR'] = master_addr

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #119037e5ae844477 — Environment-variable access.
repo/deepspeed/comm/comm.py:888 
    os.environ['MASTER_PORT'] = str(distributed_port)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b067a0869e6b1bcb — Environment-variable access.
repo/deepspeed/comm/comm.py:893 
            format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e85cfa3728e5ce4 — Environment-variable access.
repo/deepspeed/comm/comm.py:894 
                   os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d1a1f021871308b — Environment-variable access.
repo/deepspeed/comm/comm.py:904 
    return 'AZUREML_EXPERIMENT_ID' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3717bbdaff6fd2c5 — Environment-variable access.
repo/deepspeed/comm/comm.py:909 
    return 'SM_TRAINING_ENV' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c499c34afe23d8cf — Environment-variable access.
repo/deepspeed/comm/comm.py:914 
    return 'DLTS_JOB_ID' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #901155410248e1ef — Environment-variable access.
repo/deepspeed/comm/comm.py:922 
    os.environ["RANK"] = os.environ["OMPI_COMM_WORLD_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ef0fea5b9af805b — Environment-variable access.
repo/deepspeed/comm/comm.py:923 
    os.environ["WORLD_SIZE"] = os.environ["OMPI_COMM_WORLD_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #160dc6d59b8e8a08 — Environment-variable access.
repo/deepspeed/comm/comm.py:924 
    single_node = int(os.environ["OMPI_COMM_WORLD_LOCAL_SIZE"]) == int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #313c0ca4d3cae5ca — Environment-variable access.
repo/deepspeed/comm/comm.py:927 
        master_node_params = os.environ["AZ_BATCH_MASTER_NODE"].split(":")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #414e82a53ce16179 — Environment-variable access.
repo/deepspeed/comm/comm.py:928 
        os.environ["MASTER_ADDR"] = master_node_params[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce97392d5c87eb30 — Environment-variable access.
repo/deepspeed/comm/comm.py:930 
        if "MASTER_PORT" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e88c5138a9b8da1 — Environment-variable access.
repo/deepspeed/comm/comm.py:931 
            os.environ["MASTER_PORT"] = str(master_port)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9a6bf46196998ad — Environment-variable access.
repo/deepspeed/comm/comm.py:933 
        os.environ["MASTER_ADDR"] = os.environ["AZ_BATCHAI_MPI_MASTER_NODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e74f6971f11499c0 — Environment-variable access.
repo/deepspeed/comm/comm.py:934 
        os.environ["MASTER_PORT"] = DEFAULT_AML_MASTER_PORT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16e4298b409f8a1f — Environment-variable access.
repo/deepspeed/comm/comm.py:937 
        utils.logger.info("NCCL_SOCKET_IFNAME original value = {}".format(os.environ["NCCL_SOCKET_IFNAME"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eaea5f8fad544eec — Environment-variable access.
repo/deepspeed/comm/comm.py:939 
    os.environ["NCCL_SOCKET_IFNAME"] = DEFAULT_AML_NCCL_SOCKET_IFNAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0a9351f0a091b22 — Environment-variable access.
repo/deepspeed/comm/comm.py:940 
    os.environ['LOCAL_RANK'] = os.environ["OMPI_COMM_WORLD_LOCAL_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f488d8caf37e2ef2 — Environment-variable access.
repo/deepspeed/comm/comm.py:945 
            .format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b21f13acd69dd06b — Environment-variable access.
repo/deepspeed/comm/comm.py:946 
                    os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #795bb6b32722be0f — Environment-variable access.
repo/deepspeed/comm/comm.py:952 
    os.environ["RANK"] = os.environ["OMPI_COMM_WORLD_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #088407ab083bed8c — Environment-variable access.
repo/deepspeed/comm/comm.py:953 
    os.environ['LOCAL_RANK'] = os.environ["OMPI_COMM_WORLD_LOCAL_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c94216979c06351 — Environment-variable access.
repo/deepspeed/comm/comm.py:954 
    os.environ["WORLD_SIZE"] = os.environ["OMPI_COMM_WORLD_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53b1bdea7ae09e61 — Environment-variable access.
repo/deepspeed/comm/comm.py:959 
            .format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a61ddfb74aafcaf9 — Environment-variable access.
repo/deepspeed/comm/comm.py:960 
                    os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d2d2152fd394590 — Environment-variable access.
repo/deepspeed/comm/mori.py:103 
    return os.environ.get("DS_SDMA_ALLGATHER", "0") in _TRUTHY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff73477112284b5d — Environment-variable access.
repo/deepspeed/comm/mori.py:107 
    raw = os.environ.get("DS_SDMA_ALLGATHER_MAX_NUMEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e276d70440d4a4e0 — Environment-variable access.
repo/deepspeed/comm/mori.py:142 
    os.environ.setdefault("MORI_ENABLE_SDMA", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70705c9b385c6b1c — Environment-variable access.
repo/deepspeed/comm/torch.py:175 
                local_rank = int(os.environ.get('LOCAL_RANK', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6dc311075894ab4 — Environment-variable access.
repo/deepspeed/comm/torch.py:211 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #217bb6cdbba9914d — Environment-variable access.
repo/deepspeed/comm/torch.py:219 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5cd421ee8d8ad0b7 — Environment-variable access.
repo/deepspeed/comm/torch.py:232 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #278801991482f53d — Environment-variable access.
repo/deepspeed/comm/torch.py:245 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb7c521c9f790d3c — Environment-variable access.
repo/deepspeed/comm/torch.py:271 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ebeb806965afe51 — Environment-variable access.
repo/deepspeed/comm/utils.py:14 
    rank = os.environ.get('LOCAL_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92108b49caf71011 — Environment-variable access.
repo/deepspeed/comm/utils.py:17 
        rank = os.environ.get('OMPI_COMM_WORLD_LOCAL_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef36c08f9b5a8eaa — Environment-variable access.
repo/deepspeed/comm/utils.py:29 
    rank = os.environ.get('RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d677abb4164f15ca — Environment-variable access.
repo/deepspeed/comm/utils.py:32 
        rank = os.environ.get('OMPI_COMM_WORLD_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5123e44665a8e77b — Environment-variable access.
repo/deepspeed/comm/utils.py:43 
    size = os.environ.get('WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31aca06cd1f15c82 — Environment-variable access.
repo/deepspeed/comm/utils.py:44 
    rank = os.environ.get('RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db20f9a4581f676e — Environment-variable access.
repo/deepspeed/comm/utils.py:47 
        size = os.environ.get('OMPI_COMM_WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e35cfdc7162ed2d1 — Environment-variable access.
repo/deepspeed/compile/profilers/comm_profile.py:157 
    local_rank = int(os.environ['LOCAL_RANK'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d24eee52877e0d4 — Filesystem access.
repo/deepspeed/compile/util.py:358 
    with open(csv_filename, mode='w', newline='') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8743c5707a440f6d — Filesystem access.
repo/deepspeed/compression/compress.py:24 
        return json.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed96f524c633da04 — Environment-variable access.
repo/deepspeed/constants.py:19 
default_pg_timeout = timedelta(minutes=int(os.getenv("DEEPSPEED_TIMEOUT", default=30)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9618c536d98e70e0 — Environment-variable access.
repo/deepspeed/elasticity/elastic_agent.py:96 
                "NCCL_ASYNC_ERROR_HANDLING": os.getenv("NCCL_ASYNC_ERROR_HANDLING", str(1)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64059a749d7146a5 — Environment-variable access.
repo/deepspeed/elasticity/elastic_agent.py:99 
            if "OMP_NUM_THREADS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16e3fb48c7ce1fe3 — Environment-variable access.
repo/deepspeed/elasticity/elastic_agent.py:100 
                worker_env_ds["OMP_NUM_THREADS"] = os.environ["OMP_NUM_THREADS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a60d4fac4f4e829b — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:212 
    if DEEPSPEED_ELASTICITY_CONFIG in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3cbf83ccf8849ae — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:213 
        scheduler_elastic_config_dict = json.loads(os.environ[DEEPSPEED_ELASTICITY_CONFIG])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49d75112598f8e2d — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:319 
            if "WORLD_SIZE" in os.environ and \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #627013d60ec15c1a — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:320 
                os.getenv('WORLD_SIZE').isnumeric():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #849f60710957e044 — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:321 
                current_num_gpus = int(os.getenv('WORLD_SIZE'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2f82605a22a0d33 — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:323 
                WORLD_SIZE = os.getenv('WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac9da0b7ba90682a — Environment-variable access.
repo/deepspeed/env_report.py:78 
    if "ASCEND_HOME_PATH" in os.environ or os.path.exists(os.environ["ASCEND_HOME_PATH"]):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec1a30cb294c596c — Environment-variable access.
repo/deepspeed/env_report.py:79 
        return os.environ["ASCEND_HOME_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fad5c51d9a167014 — Filesystem access.
repo/deepspeed/env_report.py:95 
            with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14f6331be2d32df7 — Filesystem access.
repo/deepspeed/git_version_info.py:13 
        version = open('version.txt', 'r').read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44da9679a260e99b — Environment-variable access.
repo/deepspeed/inference/engine.py:251 
            local_rank = int(os.getenv('LOCAL_RANK', '0'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b1b058784023b75 — Filesystem access.
repo/deepspeed/inference/engine.py:421 
                    with open(latest_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #907fa50847f334dd — Filesystem access.
repo/deepspeed/inference/v2/checkpoint/huggingface_engine.py:91 
            param_map = json.load(open(model_param_json, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4680786fa78b922e — Filesystem access.
repo/deepspeed/inference/v2/engine_factory.py:54 
    metadata = json.load(open(metadata_filename, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8548bc895efce3d4 — Filesystem access.
repo/deepspeed/inference/v2/engine_factory.py:64 
    model_config = pickle.load(open(os.path.join(path, "ds_model_config.pkl"), "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fca8e731c541e8b — Environment-variable access.
repo/deepspeed/inference/v2/engine_v2.py:98 
        local_rank = int(os.getenv("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d72beb2801905f5e — Filesystem access.
repo/deepspeed/inference/v2/engine_v2.py:265 
        json.dump(self._model.flattened_param_metadata.json(), open(metadata_file_name, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43f15f862d069fae — Filesystem access.
repo/deepspeed/inference/v2/engine_v2.py:268 
            pickle.dump(self._model._config, open(os.path.join(save_path, "ds_model_config.pkl"), "wb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f72c30d550a1ad8f — Filesystem access.
repo/deepspeed/inference/v2/model_implementations/inference_policy_base.py:209 
            metadata = json.load(open(metadata_path, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65815eb8ddc15984 — Filesystem access.
repo/deepspeed/io/fast_file_writer.py:166 
        fp = open(self._file_path, 'ab')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #070722cc4ea1a031 — Filesystem access.
repo/deepspeed/io/mock_file_writer.py:15 
        self._fp = open(file_path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #386b51c9b9d482c1 — Filesystem access.
repo/deepspeed/io/py_file_writer.py:15 
        self._fp = open(file_path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9dedcedf9260c42 — Environment-variable access.
repo/deepspeed/launcher/launch.py:147 
    current_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #09d5e14446319324 — Filesystem access.
repo/deepspeed/launcher/launch.py:202 
        with open(pid_file, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94657272be988a98 — Filesystem access.
repo/deepspeed/launcher/launch.py:212 
        with open(DLTS_POD_ENV_PATH) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b833118ca42a7d9 — Filesystem access.
repo/deepspeed/launcher/launch.py:267 
                log_fd = open(log_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ab5f7259306ff61 — Environment-variable access.
repo/deepspeed/launcher/launch.py:304 
        run_id = os.environ.get("ELASTIC_RUN_ID", ELASTIC_TRAINING_ID_DEFAULT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85490452d5c53007 — Environment-variable access.
repo/deepspeed/launcher/launcher_helper.py:84 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3f6452ff9663a69 — Filesystem access.
repo/deepspeed/launcher/multinode_runner.py:453 
        with open(MVAPICH_TMP_HOSTFILE, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14e8a89962068627 — Environment-variable access.
repo/deepspeed/launcher/runner.py:39 
DEEPSPEED_ENVIRONMENT_NAME = os.getenv("DS_ENV_FILE", ".deepspeed_env")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c740fc43d600dffe — Filesystem access.
repo/deepspeed/launcher/runner.py:237 
    with open(hostfile_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccad41375449f319 — Environment-variable access.
repo/deepspeed/launcher/runner.py:450 
    visible_devices = os.environ.get(visible_devices_env, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5cc501b133e6a10 — Environment-variable access.
repo/deepspeed/launcher/runner.py:460 
        del os.environ[visible_devices_env]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9975a428d8e1fa14 — Environment-variable access.
repo/deepspeed/launcher/runner.py:480 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4034d92723e22fe8 — Filesystem access.
repo/deepspeed/launcher/runner.py:620 
                with open(environ_file, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47643ce9d6087939 — Filesystem access.
repo/deepspeed/module_inject/replace_module.py:542 
            with open(f"{config.save_mp_checkpoint_path}/ds_inference_config.json", "w") as cfg:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08b8ad921ef2b620 — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:28 
                if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6dcec774fa36f85f — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:29 
                    infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1de6cf2984c885b — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:30 
                elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d87223a05312602 — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:31 
                    infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81e469ddc192f187 — Filesystem access.
repo/deepspeed/monitor/csv_monitor.py:62 
                with open(fname, 'a+') as csv_monitor_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #afdc925816dd7b10 — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:34 
                if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3baf0623a5159340 — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:35 
                    infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5a72e4c4cba5b9c — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:36 
                elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6456226ae0b47f9f — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:37 
                    infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d833dfd9c7e80b3d — Filesystem access.
repo/deepspeed/nvme/ds_aio_job.py:34 
            self.output_fd = open(self.output_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #634b40c9b9966cfc — Filesystem access.
repo/deepspeed/nvme/parse_nvme_stats.py:90 
    with open(file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bceb5235251818e9 — Filesystem access.
repo/deepspeed/nvme/perf_run_sweep.py:130 
    with open(sweep_config_json) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc9276d5cc6fda61 — Filesystem access.
repo/deepspeed/ops/sparse_attention/trsrc/__init__.py:36 
    with open(fname, 'r') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fd7e79465b2d356 — Filesystem access.
repo/deepspeed/ops/transformer/inference/config.py:131 
        with open(json_file, "r", encoding='utf-8') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c5835f01ad08ab8 — Filesystem access.
repo/deepspeed/ops/transformer/inference/moe_inference.py:104 
        with open(json_file, "r", encoding='utf-8') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #012ed3fbae10c294 — Environment-variable access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:64 
        tt_home = os.environ.get('TRITON_HOME') or os.path.join(Path.home(), ".triton")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #194de6a1b5bbe53a — Environment-variable access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:98 
        self.cache_dir = os.environ.get('TRITON_CACHE_DIR', TritonCacheDir.default_cache_dir())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5fc7e1aaa562a46 — Filesystem access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:112 
                with open(self.file_path + ".tmp", 'wb') as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f6e51ec528165c5 — Filesystem access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:118 
            with open(self.file_path, 'rb') as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85788302ca3ef8a3 — Filesystem access.
repo/deepspeed/ops/transformer/transformer.py:138 
        with open(json_file, "r", encoding='utf-16') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de07f14184a39c66 — Filesystem access.
repo/deepspeed/profiling/flops_profiler/profiler.py:307 
            f = open(output_file, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #911713a06c470435 — Filesystem access.
repo/deepspeed/runtime/config.py:669 
        self.data = json.load(open(filename, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b50c5c3ad142fa37 — Filesystem access.
repo/deepspeed/runtime/config.py:672 
        with open(filename, "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #451dff5eeffff57a — Filesystem access.
repo/deepspeed/runtime/config.py:683 
            self._param_dict = hjson.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c86ebf738bbd1c93 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:122 
                        with open(f"{metric_fname}_{m_value}.csv", 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e59e36cbcdeb7a2 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:142 
                        with open(f"{metric_fname}_{m_value}.csv", 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43f251d6528dfeff — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:271 
                        with open(w_metric_to_sample_fname, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d42522f1acdcee49 — Environment-variable access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:828 
        worker_id=int(os.environ['RANK']),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6474c0d6635d3a55 — Environment-variable access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:829 
        num_workers=int(os.environ['WORLD_SIZE']),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce18d34eaf970a66 — Environment-variable access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:838 
        device=f"cuda:{int(os.environ['LOCAL_RANK'])}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32a65cc369fc97c8 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:865 
            with open(os.path.join(da.save_path, path), 'rb') as f1, \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0653624993f62962 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:866 
                open(os.path.join(dda.save_path, path), 'rb') as f2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b8ffb07f83aa9b8 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:46 
        with open(index_file_path(path), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ecd9ed15d27789ca — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:150 
        with open(index_file_path(path), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #09a3c9074946411c — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:166 
        self.data_file = open(data_file_path(path), 'rb', buffering=0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76dbccf80c47fd57 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:275 
        self.out_file = open(out_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06d10c755d4493b0 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:308 
        with open(data_file_path(another_file), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5efc222801c045f5 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:318 
        index = open(index_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23ef43b56073a826 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:332 
    with open(path, 'rb') as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4078df3fbc63f93 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:380 
                    self._file = open(path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4de9ead25dcf2c45 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:422 
            with open(path, 'rb') as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1750928db1ab07f — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:578 
        self._data_file = open(out_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7390e90688cfd5cc — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:618 
        with open(data_file_path(another_file), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af963ec0d35bfd95 — Environment-variable access.
repo/deepspeed/runtime/engine.py:1488 
        if "OMPI_COMM_WORLD_LOCAL_RANK" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a398d89fb078f951 — Environment-variable access.
repo/deepspeed/runtime/engine.py:1489 
            ompi_local_rank = os.environ.get("OMPI_COMM_WORLD_LOCAL_RANK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aab57f7c3765424f — Environment-variable access.
repo/deepspeed/runtime/engine.py:1490 
            local_rank = os.environ.get('LOCAL_RANK', ompi_local_rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84c5efd75721844f — Environment-variable access.
repo/deepspeed/runtime/engine.py:1493 
            os.environ['LOCAL_RANK'] = local_rank

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26134121247d8f9e — Environment-variable access.
repo/deepspeed/runtime/engine.py:1495 
        self.local_rank = int(os.environ['LOCAL_RANK'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4492cee388884a71 — Environment-variable access.
repo/deepspeed/runtime/engine.py:1501 
        assert "LOCAL_RANK" in os.environ or "OMPI_COMM_WORLD_LOCAL_RANK" in os.environ, "DeepSpeed requires the LOCAL_RANK environment " \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca6a7da99cfd60a3 — Environment-variable access.
repo/deepspeed/runtime/engine.py:1509 
                env_local_rank = int(os.environ.get("LOCAL_RANK"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3ff59714bdcf0f5 — Filesystem access.
repo/deepspeed/runtime/engine.py:3908 
                with open(latest_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0e5f6cdc453d0e3 — Filesystem access.
repo/deepspeed/runtime/engine.py:4406 
                with open(os.path.join(save_dir, 'latest'), 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90d56481ef5a647b — Filesystem access.
repo/deepspeed/runtime/engine.py:4424 
            with open(os.path.join(commit_info.save_dir, 'latest'), 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2114d3a1fa0795fc — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:71 
                                 local_rank=int(os.environ[LOCAL_RANK]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c58ac64ac1c35e2 — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:76 
                                 num_machines=int(os.environ[CROSS_SIZE]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c7b3b74b05b693f — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:77 
                                 machine_rank=int(os.environ[CROSS_RANK]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27ef09d7eb6307c3 — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:78 
                                 num_sockets=int(os.environ[CROSS_SIZE]) * SOCKETS_PER_MACHINE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba6918c6af32e3e9 — Environment-variable access.
repo/deepspeed/runtime/pipe/module.py:166 
        self.local_rank = int(os.environ.get("LOCAL_RANK", None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de8633ee24ba88b1 — Filesystem access.
repo/deepspeed/runtime/state_dict_factory.py:26 
            with open(json_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1af9f374212cf154 — Filesystem access.
repo/deepspeed/runtime/tensor_parallel/init_utils.py:24 
            return hjson.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0c105dd90ddadbd — Environment-variable access.
repo/deepspeed/runtime/zenflow/zenflow_utils.py:119 
    os.environ['OMP_NUM_THREADS'] = str(len(zf_affinity))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a441986492c971b — Environment-variable access.
repo/deepspeed/runtime/zenflow/zenflow_utils.py:188 
    os.environ['OMP_NUM_THREADS'] = str(len(pt_affinity))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60f545dc6e6465e9 — Environment-variable access.
repo/deepspeed/runtime/zero/mics_utils.py:62 
    ndevices_per_node = int(os.environ.get("NDEV_PER_NODE", get_accelerator().device_count()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5210753daf3ccc52 — Environment-variable access.
repo/deepspeed/runtime/zero/partition_parameters.py:1059 
        self.local_device = torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85afb5d2a8641387 — Environment-variable access.
repo/deepspeed/runtime/zero/utils.py:77 
        device=torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"])),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa60e15ede1d7714 — Environment-variable access.
repo/deepspeed/runtime/zero/utils.py:97 
        device=torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"])),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa73a7616870cf58 — Filesystem access.
repo/deepspeed/utils/debug.py:112 
    with open(__file__, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #972ffa40d96697e5 — Filesystem access.
repo/deepspeed/utils/debug.py:149 
        fh = open(f"log_rank_{rank}.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f76ed977b1bfb63b — Environment-variable access.
repo/deepspeed/utils/logging.py:49 
        if required_torch_version(min_version=2.6) and os.getenv("DISABLE_LOGS_WHILE_COMPILING", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79468a812474aa74 — Environment-variable access.
repo/deepspeed/utils/logging.py:52 
                for item in os.getenv("LOGGER_METHODS_TO_EXCLUDE_FROM_DISABLE", "").split(",")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #acf81811abdb0b00 — Filesystem access.
repo/deepspeed/utils/logging.py:178 
        with open(path, 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb040995a5253c3c — Environment-variable access.
repo/deepspeed/utils/numa.py:107 
    if 'KMP_AFFINITY' in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85f7bb339db7d266 — Filesystem access.
repo/deepspeed/utils/zero_to_fp32.py:611 
            with open(latest_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #232745c970b07a92 — Filesystem access.
repo/deepspeed/utils/zero_to_fp32.py:708 
        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da6aa2cf0d012383 — Filesystem access.
repo/docs/code-docs/source/conf.py:28 
with open("../../../version.txt", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa2b7fe60270f18a — Environment-variable access.
repo/examples/sdma_allgather/test_sdma_allgather_zero3.py:105 
    parser.add_argument("--local_rank", type=int, default=int(os.environ.get("LOCAL_RANK", 0)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb520db920283fef — Environment-variable access.
repo/examples/sdma_allgather/train_qwen3_zero3.py:123 
    max_chunks = int(os.environ.get("QWEN3_MAX_CHUNKS", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #812f5825eba940e1 — Environment-variable access.
repo/op_builder/builder.py:102 
        elif os.getenv("DS_SKIP_CUDA_CHECK", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c7f5ef2b034c651 — Filesystem access.
repo/op_builder/builder.py:231 
                with open(rocm_ver_file, 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c31f32df9234f95b — Filesystem access.
repo/op_builder/builder.py:242 
                    with open(rocm_ver_file, 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2dfd6320501bd367 — Filesystem access.
repo/op_builder/builder.py:347 
            with open(filename, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f7f0234aee30f31 — Filesystem access.
repo/op_builder/builder.py:352 
                filestderr = open(os.path.join(tempdir, 'stderr.txt'), 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed6f8c98720831be — Environment-variable access.
repo/op_builder/builder.py:363 
            cflags = shlex.split(os.environ.get('CFLAGS', ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f81655b3ba999377 — Environment-variable access.
repo/op_builder/builder.py:368 
            ldflags = shlex.split(os.environ.get('LDFLAGS', ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c1d86c3169b24f9 — Environment-variable access.
repo/op_builder/builder.py:561 
        torch_arch_list_present = "TORCH_CUDA_ARCH_LIST" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30cb99c70864f839 — Environment-variable access.
repo/op_builder/builder.py:562 
        torch_arch_list = os.environ.get("TORCH_CUDA_ARCH_LIST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe6815c4fa985e2c — Environment-variable access.
repo/op_builder/builder.py:587 
                os.environ["PYTORCH_ROCM_ARCH"] = self.get_rocm_gpu_arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d2b15a86a8b1a27 — Environment-variable access.
repo/op_builder/builder.py:608 
                os.environ["TORCH_CUDA_ARCH_LIST"] = torch_arch_list

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab3941c93486e9c2 — Environment-variable access.
repo/op_builder/builder.py:610 
                os.environ.pop("TORCH_CUDA_ARCH_LIST", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c7ff9fe664dd132 — Environment-variable access.
repo/op_builder/builder.py:668 
                arch_string = os.environ.get('TORCH_CUDA_ARCH_LIST', '').strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3261b141d7207288 — Environment-variable access.
repo/op_builder/builder.py:693 
            cross_compile_archs_env = os.environ.get('TORCH_CUDA_ARCH_LIST', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c3dd54adc5d6d1f — Environment-variable access.
repo/op_builder/builder.py:737 
        os.environ["TORCH_CUDA_ARCH_LIST"] = ";".join(arch_tokens)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7bfd38ca0f1de28 — Environment-variable access.
repo/op_builder/builder.py:806 
                os.environ["PYTORCH_ROCM_ARCH"] = self.get_rocm_gpu_arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a55fe98750ed9c1e — Environment-variable access.
repo/op_builder/builder.py:863 
                nvcc_threads = int(os.getenv("DS_NVCC_THREADS", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf2cd694c72a5623 — Environment-variable access.
repo/op_builder/builder.py:882 
            if os.environ.get('DS_DEBUG_CUDA_BUILD', '0') == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce1dea6b665fdefd — Environment-variable access.
repo/op_builder/cpu/comm.py:37 
        ccl_root_path = os.environ.get("CCL_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdb07233940b735f — Environment-variable access.
repo/op_builder/evoformer_attn.py:22 
        self.cutlass_path = os.environ.get("CUTLASS_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #870288c264f17e22 — Environment-variable access.
repo/op_builder/evoformer_attn.py:39 
        if os.environ.get("DS_EVOFORMER_GPU_ARCH"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #656a16755b0cc0dd — Filesystem access.
repo/op_builder/evoformer_attn.py:78 
                with open(changelog_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8787bd17576443c — Environment-variable access.
repo/op_builder/evoformer_attn.py:86 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0a9cae709548447 — Environment-variable access.
repo/op_builder/evoformer_attn.py:121 
            value = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #445de5e0ab4f4530 — Environment-variable access.
repo/op_builder/fp_quantizer.py:35 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f339016bc24757de — Environment-variable access.
repo/op_builder/inference_core_ops.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d727d6593787166 — Environment-variable access.
repo/op_builder/inference_cutlass_builder.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76642e5c5d6b0058 — Environment-variable access.
repo/op_builder/npu/builder.py:42 
        if "ASCEND_HOME_PATH" in os.environ or os.path.exists(os.environ["ASCEND_HOME_PATH"]):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #743e5b337b84050b — Environment-variable access.
repo/op_builder/npu/builder.py:43 
            return os.environ["ASCEND_HOME_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9293bb133aab555 — Filesystem access.
repo/op_builder/npu/builder.py:56 
                with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8c979300e374647 — Environment-variable access.
repo/op_builder/ragged_ops.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f76a58e8575f894 — Environment-variable access.
repo/op_builder/ragged_utils.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #557270f1c2a99ed5 — Environment-variable access.
repo/op_builder/spatial_inference.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38751afa635ebc48 — Environment-variable access.
repo/op_builder/transformer_inference.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b091200403b777ab — Environment-variable access.
repo/op_builder/xpu/builder.py:89 
        if os.environ.get('USE_MKL_GEMM'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a8f172247c82da4 — Environment-variable access.
repo/op_builder/xpu/builder.py:152 
            saved_env[var] = os.environ.get(var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4481cd674b19bcb7 — Environment-variable access.
repo/op_builder/xpu/builder.py:153 
        os.environ['CXX'] = 'icpx'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #587e1204bb062916 — Environment-variable access.
repo/op_builder/xpu/builder.py:159 
            lib_path = os.environ.get('LIBRARY_PATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37a6e9bfc196bc53 — Environment-variable access.
repo/op_builder/xpu/builder.py:160 
            os.environ['LIBRARY_PATH'] = f'{sycl_lib}:{lib_path}' if lib_path else sycl_lib

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06b1dee69c1e8a29 — Environment-variable access.
repo/op_builder/xpu/builder.py:162 
            cpath = os.environ.get('CPATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b487f2e23fe2c4de — Environment-variable access.
repo/op_builder/xpu/builder.py:163 
            os.environ['CPATH'] = f'{sycl_inc}:{cpath}' if cpath else sycl_inc

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d40f21028dab567e — Environment-variable access.
repo/op_builder/xpu/builder.py:176 
                    os.environ.pop(var, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a155766de17b37a8 — Environment-variable access.
repo/op_builder/xpu/builder.py:178 
                    os.environ[var] = val

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c3eae072016f0fd — Filesystem access.
repo/release/bump_patch_version.py:19 
with open('./version.txt', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88f3fa4724ea5fd3 — Filesystem access.
repo/release/check_release_version.py:17 
with open('./version.txt') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ae7bb17cf129341 — Filesystem access.
repo/scripts/replace_copyright.py:66 
    with open(fp, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #113a50dd6bedddff — Filesystem access.
repo/scripts/replace_copyright.py:103 
    with open(fp, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #676f8bc2b028264d — Filesystem access.
repo/scripts/replace_copyright.py:132 
    with open(fp, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65c328c7afc44f11 — Filesystem access.
repo/scripts/replace_copyright.py:203 
    with open(fp, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #060b6c95bbc3b49d — Filesystem access.
repo/setup.py:61 
    with open(path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1115923d94c15c04 — Environment-variable access.
repo/setup.py:69 
    return bool(os.environ.get(key, None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be2c9cd69d762d9f — Environment-variable access.
repo/setup.py:78 
    return os.environ.get(key, None) or default

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8dec775da6ef61d7 — Environment-variable access.
repo/setup.py:148 
        os.environ["TORCH_CUDA_ARCH_LIST"] = get_default_compute_capabilities()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53fc83d67a588fb3 — Filesystem access.
repo/setup.py:239 
version_str = open('version.txt', 'r').read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1faa7330ad591a69 — Filesystem access.
repo/setup.py:247 
    with open('build.txt', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48f76dc71e0219e2 — Environment-variable access.
repo/setup.py:248 
        fd.write(os.environ['DS_BUILD_STRING'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4023c29ced4b3135 — Environment-variable access.
repo/setup.py:249 
    version_str += os.environ['DS_BUILD_STRING']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1455c04353b9c9e9 — Filesystem access.
repo/setup.py:252 
    with open('build.txt', 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60fca51b53fc3687 — Filesystem access.
repo/setup.py:286 
with open('deepspeed/git_version_info_installed.py', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7ee81a8a0485d8e — Filesystem access.
repo/setup.py:299 
with open(os.path.join(thisdir, 'README.md'), encoding='utf-8') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.