Close Open: huggingface/transformers

low env_fs production #e2f444a951e09b9c — Environment-variable access.

repo/.circleci/create_circleci_config.py:117

            print(os.environ.get("GIT_COMMIT_MESSAGE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6b73d860fba0da8e — Environment-variable access.

repo/.circleci/create_circleci_config.py:119

                "[build-ci-image]" in os.environ.get("GIT_COMMIT_MESSAGE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5d58386e1d967884 — Environment-variable access.

repo/.circleci/create_circleci_config.py:120

                or os.environ.get("GIT_COMMIT_MESSAGE", "") == "dev-ci"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b7c6de63e64a38f — Filesystem access.

repo/.circleci/create_circleci_config.py:138

                with open(test_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4611da2dace547b — Environment-variable access.

repo/.circleci/create_circleci_config.py:154

        env["RUN_FLAKY"] = os.environ.get("CIRCLE_PULL_REQUEST", "") == ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8a073cd4123be9e1 — Environment-variable access.

repo/.circleci/create_circleci_config.py:444

    os.environ["test_preparation_dir"] = folder

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55a57e80baaa5c24 — Environment-variable access.

repo/.circleci/create_circleci_config.py:476

    if "CIRCLE_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5541b511bc296cb — Filesystem access.

repo/.circleci/create_circleci_config.py:485

    with open(os.path.join(folder, "generated_config.yml"), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e098308848938553 — Filesystem access.

repo/.circleci/parse_test_outputs.py:8

    with open(file_path, 'r', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6bf2fe1b42ea2249 — Filesystem access.

repo/.circleci/parse_test_outputs.py:22

    with open(file_path, 'r', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #604f626198b231f6 — Filesystem access.

repo/.circleci/parse_test_outputs.py:39

    with open(file_path, 'r', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d0de1d2fa95a9c90 — Filesystem access.

repo/.github/scripts/assign_reviewers.py:76

    with open(script_dir / "codeowners_for_review_action") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #65acb0a3d7fb8edd — Environment-variable access.

repo/.github/scripts/assign_reviewers.py:79

    g = Github(os.environ['GITHUB_TOKEN'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #dce9f07eb7e6b9d6 — Filesystem access.

repo/.github/scripts/assign_reviewers.py:81

    with open(os.environ['GITHUB_EVENT_PATH']) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #721c914e46e2fd6e — Environment-variable access.

repo/.github/scripts/assign_reviewers.py:81

    with open(os.environ['GITHUB_EVENT_PATH']) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c7700c1c20bc2e96 — Environment-variable access.

repo/benchmark/benches/llama.py:44

os.environ["HF_XET_HIGH_PERFORMANCE"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9af14c08a8e870f7 — Environment-variable access.

repo/benchmark/benches/llama.py:45

os.environ["TOKENIZERS_PARALLELISM"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a4dc364fc507b78e — Environment-variable access.

repo/benchmark/benches/llama.py:111

        os.environ["TOKENIZERS_PARALLELISM"] = "false"  # silence warnings when compiling

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2acb394af0082ae7 — Filesystem access.

repo/benchmark/benchmark.py:143

        with open(os.path.join(report_dir, "summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #34fa147b085a43b3 — Filesystem access.

repo/benchmark/benchmark.py:190

    with open(os.path.join(exp_run_dir, "summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d41a55f14ef2adad — Filesystem access.

repo/benchmark/benchmark.py:310

        with open(os.path.join(exp_run_dir, "summaries.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ffc2ed676a6d618 — Environment-variable access.

repo/benchmark_v2/benchmark_scripts/continuous_batching_overall.py:176

        self.global_rank = int(os.environ.get("RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76e7af59f391a070 — Environment-variable access.

repo/benchmark_v2/benchmark_scripts/continuous_batching_overall.py:177

        self.local_rank = int(os.environ.get("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47c5f854ccf25e44 — Filesystem access.

repo/benchmark_v2/benchmark_scripts/continuous_batching_overall.py:287

        with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #25725a27c0931c8e — Filesystem access.

repo/benchmark_v2/benchmark_scripts/continuous_batching_overall.py:298

        data = json.loads(candidates[-1].read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40b5164023e5cb92 — Environment-variable access.

repo/benchmark_v2/framework/benchmark_runner.py:56

PUSH_TO_HUB_TOKEN = os.getenv("PUSH_TO_HUB_TOKEN", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8969d7399886209e — Filesystem access.

repo/benchmark_v2/framework/benchmark_runner.py:437

        with open(filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8239f3c0cd2269a7 — Filesystem access.

repo/benchmark_v2/framework/benchmark_runner.py:467

                with open(jsonl_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c485a7b48445a058 — Filesystem access.

repo/benchmark_v2/run_benchmarks.py:99

            with open(args.config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #289893d921d29885 — Filesystem access.

repo/benchmark_v2/run_benchmarks.py:102

            with open(args.config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eb38c9c5a62d1f73 — Environment-variable access.

repo/conftest.py:56

    worker = os.environ.get("PYTEST_XDIST_WORKER", "main")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1134d7f370a5aea6 — Filesystem access.

repo/conftest.py:58

        with open(os.path.join(_ci_fallback_events_dir, f"{worker}-{os.getpid()}.log"), "a", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #efca72df4a2d72b1 — Filesystem access.

repo/conftest.py:70

                with open(os.path.join(_ci_fallback_events_dir, name), encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c60f0345bd35178d — Environment-variable access.

repo/conftest.py:147

                mock.patch.dict(os.environ, {"HF_HUB_DISABLE_XET": "1"}),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ad15c672227a59b — Environment-variable access.

repo/conftest.py:149

                mock.patch.dict(os.environ, {"HF_XET_CACHE": _ci_fallback_cache_dir}),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4435be135b47a004 — Environment-variable access.

repo/conftest.py:209

    _ci_fallback_events_dir = os.environ.get("CI_FALLBACK_EVENTS_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #032df027999d8e16 — Environment-variable access.

repo/conftest.py:212

        os.environ["CI_FALLBACK_EVENTS_DIR"] = _ci_fallback_events_dir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1aa1ab9402a7a93d — Environment-variable access.

repo/conftest.py:259

    os.environ["DISABLE_SAFETENSORS_CONVERSION"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8f84a64f5a6ee92 — Environment-variable access.

repo/conftest.py:353

if os.environ.get("PATCH_TESTING_METHODS_TO_COLLECT_OUTPUTS", "").lower() in ("yes", "true", "on", "y", "1"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d18447bb0b2ef8f3 — Environment-variable access.

repo/examples/3D_parallel.py:75

    tp_size = int(os.environ.get("TP_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #31bdd880d6dca51d — Environment-variable access.

repo/examples/3D_parallel.py:76

    dp_size = int(os.environ.get("DP_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d771868bc54ad91a — Environment-variable access.

repo/examples/3D_parallel.py:77

    cp_size = int(os.environ.get("CP_SIZE", "1"))  # Add CP size configuration

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6dfeb37c6be13f21 — Environment-variable access.

repo/examples/3D_parallel.py:90

    if "RANK" in os.environ and "WORLD_SIZE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b05de0ab1df9782f — Environment-variable access.

repo/examples/3D_parallel.py:94

        local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #46c419ac37eb3c8c — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:58

ignore_sanity_checks = int(os.environ.get("IGNORE_SANITY", "0")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #21ff6dcd4e2fd352 — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:76

    tp_size = int(os.environ.get("TP_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1968e3488bc2dcd7 — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:77

    dp_size = int(os.environ.get("DP_SIZE", "4"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d533315dcb0b6353 — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:78

    cp_size = int(os.environ.get("CP_SIZE", "1"))  # Add CP size configuration

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #004698307b14240b — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:91

    if "RANK" in os.environ and "WORLD_SIZE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ea6fde60a4836387 — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:95

        local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4e4e968ae7e77ceb — Environment-variable access.

repo/examples/pytorch/context_parallel.py:27

world_size = int(os.environ.get("WORLD_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3b0827198b4b1f0a — Filesystem access.

repo/examples/pytorch/continuous_batching.py:131

        with open(output_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1abf45814c19276e — Filesystem access.

repo/examples/pytorch/image-classification/run_image_classification.py:78

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #423351ed324a5591 — Filesystem access.

repo/examples/pytorch/image-classification/run_image_classification_no_trainer.py:280

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4b12f906462bb050 — Filesystem access.

repo/examples/pytorch/image-classification/run_image_classification_no_trainer.py:650

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a4abcdcc95fd8a46 — Filesystem access.

repo/examples/pytorch/image-pretraining/run_mim_no_trainer.py:432

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #88914e8c4f454bcb — Filesystem access.

repo/examples/pytorch/instance-segmentation/run_instance_segmentation_no_trainer.py:401

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5b03745113d12817 — Filesystem access.

repo/examples/pytorch/instance-segmentation/run_instance_segmentation_no_trainer.py:731

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f1b8bf0bfcc147d0 — Filesystem access.

repo/examples/pytorch/language-modeling/run_clm_no_trainer.py:317

                with open(gitignore_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #706bc5c78f925996 — Filesystem access.

repo/examples/pytorch/language-modeling/run_clm_no_trainer.py:319

            with open(gitignore_path, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f5ed4e78b4f62562 — Filesystem access.

repo/examples/pytorch/language-modeling/run_clm_no_trainer.py:729

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3fc376f834c638b4 — Filesystem access.

repo/examples/pytorch/language-modeling/run_fim_no_trainer.py:379

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ece4f4257f6b97d4 — Filesystem access.

repo/examples/pytorch/language-modeling/run_fim_no_trainer.py:910

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9451453025439dc0 — Filesystem access.

repo/examples/pytorch/language-modeling/run_mlm_no_trainer.py:320

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a25236c6e6548f76 — Filesystem access.

repo/examples/pytorch/language-modeling/run_mlm_no_trainer.py:759

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #dfbfa5b72be7347b — Filesystem access.

repo/examples/pytorch/multiple-choice/run_swag_no_trainer.py:283

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8e7cc9c6b73c3a6b — Filesystem access.

repo/examples/pytorch/multiple-choice/run_swag_no_trainer.py:653

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #568a144fb86db2f2 — Filesystem access.

repo/examples/pytorch/object-detection/run_object_detection_no_trainer.py:444

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7b726095558c8b2d — Filesystem access.

repo/examples/pytorch/object-detection/run_object_detection_no_trainer.py:775

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #609ad359f2ede01a — Filesystem access.

repo/examples/pytorch/old_test_xla_examples.py:35

        with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b082454db3b940b1 — Filesystem access.

repo/examples/pytorch/question-answering/run_qa_beam_search_no_trainer.py:85

    with open(os.path.join(output_dir, file_name), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #98126d6b5f191760 — Filesystem access.

repo/examples/pytorch/question-answering/run_qa_beam_search_no_trainer.py:344

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #70d8976f70642ac6 — Filesystem access.

repo/examples/pytorch/question-answering/run_qa_no_trainer.py:90

    with open(os.path.join(output_dir, file_name), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #80c52f22f5eae8ef — Filesystem access.

repo/examples/pytorch/question-answering/run_qa_no_trainer.py:383

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #19ed58f13ee8d7b4 — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:238

        with open(prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #93d26cb7da9ddb46 — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:241

        with open(nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #80cc5430c03f770b — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:245

            with open(null_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #357c70602e1828e2 — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:432

        with open(prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #045405b59594009d — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:435

        with open(nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2a70274d1218aed9 — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:439

            with open(null_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #45803d039dd18be9 — Filesystem access.

repo/examples/pytorch/semantic-segmentation/run_semantic_segmentation.py:240

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #efb661511b8bd25d — Filesystem access.

repo/examples/pytorch/semantic-segmentation/run_semantic_segmentation_no_trainer.py:272

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8adf820ea61ff459 — Filesystem access.

repo/examples/pytorch/semantic-segmentation/run_semantic_segmentation_no_trainer.py:308

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1eae4a4185a9bf70 — Filesystem access.

repo/examples/pytorch/semantic-segmentation/run_semantic_segmentation_no_trainer.py:614

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #25cff4ebdee379ae — Filesystem access.

repo/examples/pytorch/speech-pretraining/run_wav2vec2_pretraining_no_trainer.py:442

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e4548d5e4560279e — Filesystem access.

repo/examples/pytorch/speech-recognition/run_speech_recognition_ctc.py:562

                with open(vocab_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b5b8bae816f3c2be — Filesystem access.

repo/examples/pytorch/speech-recognition/run_speech_recognition_ctc_adapter.py:566

                with open(vocab_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a93132f116396afb — Filesystem access.

repo/examples/pytorch/summarization/run_summarization.py:737

                with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c3ad9e8e0d3327f1 — Filesystem access.

repo/examples/pytorch/summarization/run_summarization_no_trainer.py:392

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7cfd2b33d67c8550 — Filesystem access.

repo/examples/pytorch/summarization/run_summarization_no_trainer.py:808

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d447fed9c17c43a6 — Filesystem access.

repo/examples/pytorch/test_accelerate_examples.py:53

        with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #22543940a5933ef1 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:78

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2e7163d3860c557e — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:103

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #360c1ebf8b3d7e50 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:131

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #898bf861f80f32bb — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:152

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #19de89fb0bb2ce0a — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:181

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #747267571f628282 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:210

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c779174e6eb7dfa4 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:233

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #73cce2152e65a9be — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:261

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a2adc7a1d4110ddb — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:313

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a9b5579be88898b1 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:340

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #106a96c37b03e01a — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:364

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #26dfc31eebc8361a — Filesystem access.

repo/examples/pytorch/test_pytorch_examples.py:89

        with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #014561b011b056f8 — Environment-variable access.

repo/examples/pytorch/test_pytorch_examples.py:604

    @patch.dict(os.environ, {"WANDB_DISABLED": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #480da9c92e9de5c2 — Environment-variable access.

repo/examples/pytorch/test_pytorch_examples.py:632

    @patch.dict(os.environ, {"WANDB_DISABLED": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0b599610eb5dbf94 — Filesystem access.

repo/examples/pytorch/text-classification/run_classification.py:716

            with open(output_predict_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b8ef7c425372c60d — Filesystem access.

repo/examples/pytorch/text-classification/run_glue.py:615

                with open(output_predict_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2a9c327a78ff2e2d — Filesystem access.

repo/examples/pytorch/text-classification/run_glue_no_trainer.py:275

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #52d81e2fdc44c058 — Filesystem access.

repo/examples/pytorch/text-classification/run_glue_no_trainer.py:691

        with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8c7ee1d9841b4ff4 — Filesystem access.

repo/examples/pytorch/text-classification/run_xnli.py:438

            with open(output_predict_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4d2baca68ac485b2 — Filesystem access.

repo/examples/pytorch/token-classification/run_ner.py:617

            with open(output_predictions_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9716f98f00baf1d4 — Filesystem access.

repo/examples/pytorch/token-classification/run_ner_no_trainer.py:324

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8d87690c65bfd4bc — Filesystem access.

repo/examples/pytorch/token-classification/run_ner_no_trainer.py:828

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bad8b0046d7b521e — Filesystem access.

repo/examples/pytorch/translation/run_translation.py:661

                with open(output_prediction_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #487cb16b5c64ca2a — Filesystem access.

repo/examples/pytorch/translation/run_translation_no_trainer.py:369

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f05d66faef957b23 — Filesystem access.

repo/examples/pytorch/translation/run_translation_no_trainer.py:792

        with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cfbfeef57df999f5 — Environment-variable access.

repo/examples/training/distributed_training.py:9

LOCAL_RANK = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #dae45069d4ef9b07 — Environment-variable access.

repo/examples/training/distributed_training.py:10

WORLD_SIZE = int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #664500f24768c78b — Environment-variable access.

repo/examples/training/distributed_training.py:11

WORLD_RANK = int(os.environ["RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d02c0910ebf96339 — Environment-variable access.

repo/examples/training/distributed_training.py:13

LOCAL_RANK = int(os.environ["OMPI_COMM_WORLD_LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bfbec986e547c9de — Environment-variable access.

repo/examples/training/distributed_training.py:14

WORLD_SIZE = int(os.environ["OMPI_COMM_WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #78e2a8f423b90cdb — Environment-variable access.

repo/examples/training/distributed_training.py:15

WORLD_RANK = int(os.environ["OMPI_COMM_WORLD_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2dbea3072237972e — Filesystem access.

repo/scripts/distributed/torch-distributed-gpu-test.py:55

    with open(__file__, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #59776d4996576d25 — Environment-variable access.

repo/scripts/distributed/torch-distributed-gpu-test.py:63

local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8201f68d07942178 — Environment-variable access.

repo/scripts/stale.py:37

    g = Github(os.environ["GITHUB_TOKEN"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c46fee7275c51564 — Filesystem access.

repo/setup.py:311

        with open(target, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ee9ac8ea66ce7c2 — Filesystem access.

repo/setup.py:331

        long_description=open("README.md", "r", encoding="utf-8").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed24aea69af93d33 — Filesystem access.

repo/src/transformers/audio_utils.py:320

            with open(audio, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #28e9f9cf15e5de58 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:176

    with open(file_name, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #987b4da43989ec16 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:182

    with open(file_name, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #15c68a267c6e2e12 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:228

    autofile = (repo_path / "src" / "transformers" / "models" / "auto" / "auto_mappings.py").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02657347b0baf2d9 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:246

                file = (repo_path / "src" / "transformers" / "models" / "auto" / filename).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #461a9d3cac9e31fa — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:333

    with open(toc_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d00a7601c1250d36 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:392

    with open(module_name, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fda2f92583d34dff — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:517

            with open(original_test_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #681533cb4779a415 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:567

    with open(new_module_folder / f"modular_{new_lowercase_name}.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04a9d3bdc604a050 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:572

    with open(new_module_folder / "__init__.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1192a7c16d086ec8 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:589

    with open(tests_folder / "__init__.py", "w"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cb5a41a839e0b3fe — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:593

        with open(tests_folder / filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e605e72cee89801 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:598

    with open(repo_path / "docs" / "source" / "en" / "model_doc" / f"{new_lowercase_name}.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e23c8a33744781f — Filesystem access.

repo/src/transformers/cli/chat.py:363

            with open(examples_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f9c7a82ae61dc95 — Filesystem access.

repo/src/transformers/cli/chat.py:659

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #675c4ca717f01cb0 — Filesystem access.

repo/src/transformers/configuration_utils.py:921

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #addad071744a706b — Filesystem access.

repo/src/transformers/configuration_utils.py:1136

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11344e030a744248 — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:159

        with open(model, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #067ab840d335d323 — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:706

        with open(self.original_tokenizer.vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5caaeb8280038d0a — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:1713

        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #42cfbc2a490fbfe3 — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:1753

        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05748701311b5aa9 — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:1843

        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0796a292db7a7e7d — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:2003

        with open(self.vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bab7143cdf279c67 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:576

        with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e15c52ea5f0a0e3c — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:580

        with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf99a5d7a59efa84 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:584

        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a3bab3e027d5cd9 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:769

    with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c534d6ad32360a82 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:772

    with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a1e3ca3c965ff3aa — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:776

        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f79cb7c021e76f8e — Filesystem access.

repo/src/transformers/data/processors/squad.py:515

        with open(
            os.path.join(data_dir, self.train_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c0b5ebdcc40c704 — Filesystem access.

repo/src/transformers/data/processors/squad.py:536

        with open(
            os.path.join(data_dir, self.dev_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ccaa7f90d247fda — Filesystem access.

repo/src/transformers/data/processors/utils.py:119

        with open(input_file, "r", encoding="utf-8-sig") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea1060c1fe686030 — Filesystem access.

repo/src/transformers/distributed/configuration_utils.py:86

        with open(json_file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e3893e7ef24a29e — Environment-variable access.

repo/src/transformers/distributed/fsdp.py:48

        and strtobool(os.environ.get("ACCELERATE_USE_FSDP", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #110d5df1345b0f6f — Environment-variable access.

repo/src/transformers/distributed/fsdp.py:49

        and strtobool(os.environ.get("FSDP_CPU_RAM_EFFICIENT_LOADING", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #31964b07cd97a6a8 — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:133

    with open(module_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c51f086db82a145d — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:186

    with open(filename, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #81b8c15aa46ba901 — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:298

        module_hash: str = hashlib.sha256(b"".join(bytes(f) + f.read_bytes() for f in module_files)).hexdigest()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #24b51392a2b3d95a — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:341

        source_files_hash.update(file_path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1779d7a05c05c0a2 — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:813

        with open(requirements, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11a6be35cd0e833c — Filesystem access.

repo/src/transformers/feature_extraction_utils.py:611

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0214e716776b9ada — Filesystem access.

repo/src/transformers/feature_extraction_utils.py:639

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef48e9a577733635 — Filesystem access.

repo/src/transformers/generation/configuration_utils.py:1088

        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30959cf474b2b5bd — Filesystem access.

repo/src/transformers/generation/configuration_utils.py:1251

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0395f340290f6a0c — Filesystem access.

repo/src/transformers/generation/configuration_utils.py:1372

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0cbde2e6ce80b22 — Environment-variable access.

repo/src/transformers/generation/configuration_utils.py:1818

        graph_mixing_supported = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT", "1") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea754ecfca285f3b — Environment-variable access.

repo/src/transformers/generation/configuration_utils.py:1819

        distributed = int(os.environ.get("WORLD_SIZE", "1")) > 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4821196f6f18dd2d — Environment-variable access.

repo/src/transformers/generation/configuration_utils.py:1824

            os.environ.setdefault("NCCL_GRAPH_MIXING_SUPPORT", "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6b47a9872c7b1788 — Environment-variable access.

repo/src/transformers/generation/continuous_batching/distributed.py:160

        graph_mixing_not_disabled = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT") != "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87ff3bd637898484 — Environment-variable access.

repo/src/transformers/generation/utils.py:2157

            os.environ["TOKENIZERS_PARALLELISM"] = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2d0573c01c633f0 — Filesystem access.

repo/src/transformers/hf_argparser.py:333

                    file_args += args_file.read_text().split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd64d87550428ee8 — Filesystem access.

repo/src/transformers/hf_argparser.py:403

        with open(Path(json_file), encoding="utf-8") as open_json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e102c64217c591af — Filesystem access.

repo/src/transformers/hf_argparser.py:425

        outputs = self.parse_dict(yaml.safe_load(Path(yaml_file).read_text()), allow_extra_keys=allow_extra_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0eece3143b4337d8 — Filesystem access.

repo/src/transformers/image_processing_base.py:417

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff6fad278df1fc1b — Filesystem access.

repo/src/transformers/image_processing_base.py:445

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9e1953400240c598 — Environment-variable access.

repo/src/transformers/integrations/accelerate.py:115

                local_rank = int(os.environ.get("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #67e52b0a821bdb4b — Environment-variable access.

repo/src/transformers/integrations/deepgemm.py:87

    cuda_home = os.environ.get("CUDA_HOME") or os.environ.get("CUDA_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dc9c029d16628018 — Filesystem access.

repo/src/transformers/integrations/deepgemm.py:112

            with open(version_json) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1786da3f5866513d — Filesystem access.

repo/src/transformers/integrations/deepgemm.py:123

            with open(version_txt) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea0cc7d3ad4a8d24 — Filesystem access.

repo/src/transformers/integrations/deepgemm.py:134

            with open(cuda_h) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a10457a09790006 — Environment-variable access.

repo/src/transformers/integrations/finegrained_fp8.py:254

        and os.environ.get("TRANSFORMERS_DISABLE_DEEPGEMM_LINEAR", "0") != "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12a25d0fd800cb89 — Environment-variable access.

repo/src/transformers/integrations/hub_kernels.py:80

    _TRANSFORMERS_USE_HUB_KERNELS = os.environ.get("USE_HUB_KERNELS", "YES").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33581fd081bbb696 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:40

if os.getenv("WANDB_MODE") == "offline":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10b21893f1c418fd — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:176

    if os.getenv("DISABLE_MLFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #caedf7f3770b84e3 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:212

    if os.getenv("DISABLE_KUBEFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #962f4e9c17eb66c7 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:214

    return os.getenv("KUBEFLOW_TRAINER_SERVER_URL") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec0d2d961c2dd56f — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:436

    ray_scope = os.getenv("RAY_SCOPE", "last")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01cd5c1d9f40eeb0 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:602

        self.logging_dir = os.getenv("TENSORBOARD_LOGGING_DIR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b0b63d4763d56f4 — Filesystem access.

repo/src/transformers/integrations/integration_utils.py:664

    with open(f"{output_dir}/model_architecture.txt", "w+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3aeb06ca964ee73e — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:709

        self._log_model = WandbLogModel(os.getenv("WANDB_LOG_MODEL", "false"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2793be3e8348d0bf — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:763

                    project=os.getenv("WANDB_PROJECT", "huggingface"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad79a2d0c4f5118f — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:775

            _watch_model = os.getenv("WANDB_WATCH", "false")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #429b166bf3a94738 — Filesystem access.

repo/src/transformers/integrations/integration_utils.py:815

                                fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fac1c8b28953365d — Filesystem access.

repo/src/transformers/integrations/integration_utils.py:878

                            fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84e58523225cc2a5 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1170

        log_assets = os.getenv("COMET_LOG_ASSETS", "FALSE").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd30dfccae842318 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1174

            comet_old_mode = os.getenv("COMET_MODE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #39df42274b129643 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1334

        self._log_artifacts = os.getenv("HF_MLFLOW_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f93cdad4cedf02f — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1335

        self._nested_run = os.getenv("MLFLOW_NESTED_RUN", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2c994d5876e75170 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1336

        self._tracking_uri = os.getenv("MLFLOW_TRACKING_URI", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2827c90df64c8350 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1337

        self._experiment_name = os.getenv("MLFLOW_EXPERIMENT_NAME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5943ed436facaf00 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1338

        self._flatten_params = os.getenv("MLFLOW_FLATTEN_PARAMS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5fe860b86084e9d — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1339

        self._run_id = os.getenv("MLFLOW_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e602c06ffe2a27b7 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1340

        self._max_log_params = os.getenv("MLFLOW_MAX_LOG_PARAMS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50c1a0970cc3b11c — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1403

            mlflow_tags = os.getenv("MLFLOW_TAGS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c9cef8da4578280 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1487

        self.log_artifacts = os.getenv("HF_DAGSHUB_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3692a9355578b983 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1488

        self.name = os.getenv("HF_DAGSHUB_MODEL_NAME") or "main"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b353499bc9657a2d — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1489

        self.remote = os.getenv("MLFLOW_TRACKING_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #71c6df2fb5781153 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1493

            branch=os.getenv("BRANCH") or "main",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba276ff2ea3e3ed6 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1908

                    self._log_model = os.getenv(
                        "CLEARML_LOG_MODEL",
                        "FALSE" if not ClearMLCallback._task_created_in_callback else "TRUE",
                    ).upper() in ENV_VARS_TRUE_VALUES.union({"TRUE"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29b618886f852254 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1915

                        project_name=os.getenv("CLEARML_PROJECT", "HuggingFace Transformers"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9d6a8a7955c7a987 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1916

                        task_name=os.getenv("CLEARML_TASK", "Trainer"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7db559b2f384312 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1920

                    self._log_model = os.getenv("CLEARML_LOG_MODEL", "TRUE").upper() in ENV_VARS_TRUE_VALUES.union(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e134c6c78f909fe8 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2189

            log_model_env = os.getenv("HF_DVCLIVE_LOG_MODEL", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2001a63219f99fe8 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2271

        self._log_model = os.getenv("SWANLAB_LOG_MODEL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c391fb154323462c — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2342

            init_args["project"] = os.getenv("SWANLAB_PROJECT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ff7c4927002939d — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2344

            run_id = os.getenv("SWANLAB_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #edf27eb3755cf2af — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2348

            resume = os.getenv("SWANLAB_RESUME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c6711b6f26884930 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2494

        ca_file = os.environ.get(self._ENV_CA_CERT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85b2774005f94b02 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2512

        token_path = os.environ.get(self._ENV_TOKEN_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4afe7c5a5b597f9e — Filesystem access.

repo/src/transformers/integrations/integration_utils.py:2518

            with open(token_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3426e8b4e5d48e7f — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2534

            url = os.environ.get(self._ENV_SERVER_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a502ec1b6218ac44 — Environment-variable access.

repo/src/transformers/integrations/mxfp4.py:417

        rank = int(os.environ.get("LOCAL_RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e6bbd29da36e008b — Environment-variable access.

repo/src/transformers/integrations/npu_flash_attention.py:30

SPARSE_MODE = int(os.getenv("NPU_FA2_SPARSE_MODE", default=DOWN_RIGHT_ALIGNED_CAUSAL_MASK_MODE))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12e7170938209137 — Filesystem access.

repo/src/transformers/integrations/peft.py:708

        with open(_adapter_model_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e66b84b1fecc0186 — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:77

                rank = int(os.environ["RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a894176b88f304d8 — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:78

                local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c28cefee50fee522 — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:79

                world_size = int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88a527f5ffa2da4a — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:103

            current_device.set_device(int(os.environ["LOCAL_RANK"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f73b4e012826b8d — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:122

        device_map = torch.device(f"{device_mesh.device_type}:{int(os.environ['LOCAL_RANK'])}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9645bf8e820403b2 — Filesystem access.

repo/src/transformers/model_debugging_utils.py:243

    with open(full_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5323fd3a73ab8b8e — Filesystem access.

repo/src/transformers/model_debugging_utils.py:266

    with open(summary_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d7bd507d36b26735 — Environment-variable access.

repo/src/transformers/modeling_flash_attention_utils.py:657

            deterministic if deterministic is not None else os.getenv("FLASH_ATTENTION_DETERMINISTIC", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #39cce92454c4c61a — Environment-variable access.

repo/src/transformers/modeling_utils.py:163

XLA_USE_BF16 = os.environ.get("XLA_USE_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #282f9ea8b23f69e1 — Environment-variable access.

repo/src/transformers/modeling_utils.py:164

XLA_DOWNCAST_BF16 = os.environ.get("XLA_DOWNCAST_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7da994a10a607a96 — Environment-variable access.

repo/src/transformers/modeling_utils.py:213

    return _is_torch_distributed_initialized() and int(os.environ.get("LOCAL_RANK", "-1")) == 0

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7beb702f2d78a842 — Filesystem access.

repo/src/transformers/modeling_utils.py:323

        with open("/proc/mounts", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #163fab17d7f48f37 — Filesystem access.

repo/src/transformers/modeling_utils.py:356

            with open(checkpoint_path, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43084314f5ad1ed4 — Filesystem access.

repo/src/transformers/modeling_utils.py:3699

            with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #286a616ceb8565fa — Environment-variable access.

repo/src/transformers/modeling_utils.py:4262

        if device_map == "auto" and int(os.environ.get("WORLD_SIZE", "0")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f569a5200d7caafc — Filesystem access.

repo/src/transformers/modeling_utils.py:4564

                        with open(file, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd694eb777e2a119 — Filesystem access.

repo/src/transformers/models/audio_spectrogram_transformer/convert_audio_spectrogram_transformer_original_to_pytorch.py:60

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #72c52d70a7052f1d — Filesystem access.

repo/src/transformers/models/auto/auto_factory.py:311

                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a0f4a3cb552b8f51 — Filesystem access.

repo/src/transformers/models/auto/processing_auto.py:273

                with open(tokenizer_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2df62206f2c69eeb — Filesystem access.

repo/src/transformers/models/auto/tokenization_auto.py:435

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ee74d72c7ff0201 — Filesystem access.

repo/src/transformers/models/auto/tokenization_auto.py:442

    with open(merges_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #acc5d8c266890510 — Filesystem access.

repo/src/transformers/models/auto/tokenization_auto.py:613

    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c640aca21425ed0 — Filesystem access.

repo/src/transformers/models/bamba/convert_mamba_ssm_checkpoint.py:158

    with open(os.path.join(save_directory, SAFE_WEIGHTS_INDEX_NAME), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4643f04946782476 — Filesystem access.

repo/src/transformers/models/bamba/convert_mamba_ssm_checkpoint.py:202

    with open(config_path, "r", encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2b0f211f7894f818 — Environment-variable access.

repo/src/transformers/models/bark/convert_suno_to_hf.py:77

CACHE_DIR = os.path.join(os.getenv("XDG_CACHE_HOME", default_cache_dir), "suno", "bark_v0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9e897aae15a2408 — Filesystem access.

repo/src/transformers/models/bark/processing_bark.py:101

                with open(speaker_embeddings_path) as speaker_embeddings_json:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af0f228bed0349e9 — Filesystem access.

repo/src/transformers/models/bark/processing_bark.py:161

            with open(os.path.join(save_directory, speaker_embeddings_dict_path), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #470009b1e3392bdd — Filesystem access.

repo/src/transformers/models/bartpho/tokenization_bartpho.py:133

        with open(monolingual_vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad022e87565897a4 — Filesystem access.

repo/src/transformers/models/bartpho/tokenization_bartpho.py:306

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d6f440559ad4c80 — Filesystem access.

repo/src/transformers/models/bartpho/tokenization_bartpho.py:315

            with open(out_monolingual_vocab_file, "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #22b260340d046287 — Filesystem access.

repo/src/transformers/models/beit/convert_beit_unilm_to_pytorch.py:192

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f5217798268d6802 — Filesystem access.

repo/src/transformers/models/beit/convert_beit_unilm_to_pytorch.py:205

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea44b9ae966b9c2b — Filesystem access.

repo/src/transformers/models/beit/convert_beit_unilm_to_pytorch.py:218

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d0b66e04bf2ba16 — Filesystem access.

repo/src/transformers/models/bert/tokenization_bert.py:33

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c5dc34daac1e3f9 — Filesystem access.

repo/src/transformers/models/bert/tokenization_bert_legacy.py:32

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5c05738723aa391e — Filesystem access.

repo/src/transformers/models/bert/tokenization_bert_legacy.py:245

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c2c0bcdf96ac3552 — Filesystem access.

repo/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:41

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #69acbe5fe69d9f76 — Filesystem access.

repo/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:278

            with open(vocab_file, "wb") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b5b29d9c99bc1d30 — Filesystem access.

repo/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:282

            with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9fed7bc63232b756 — Filesystem access.

repo/src/transformers/models/bertweet/tokenization_bertweet.py:142

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d1207da2319efdcf — Filesystem access.

repo/src/transformers/models/bertweet/tokenization_bertweet.py:316

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62a28a810ba1d61b — Filesystem access.

repo/src/transformers/models/bertweet/tokenization_bertweet.py:324

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b021c019e4815af3 — Filesystem access.

repo/src/transformers/models/bertweet/tokenization_bertweet.py:338

                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9b2c61b811d6cbd6 — Filesystem access.

repo/src/transformers/models/biogpt/convert_biogpt_original_pytorch_checkpoint_to_pytorch.py:112

                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a687823f73bc5f36 — Filesystem access.

repo/src/transformers/models/biogpt/convert_biogpt_original_pytorch_checkpoint_to_pytorch.py:183

    with open(src_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3367bb3c201d5b72 — Filesystem access.

repo/src/transformers/models/biogpt/convert_biogpt_original_pytorch_checkpoint_to_pytorch.py:223

    with open(biogpt_model_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55e0c1971b242cca — Filesystem access.

repo/src/transformers/models/biogpt/convert_biogpt_original_pytorch_checkpoint_to_pytorch.py:240

    with open(biogpt_tokenizer_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b5459b6ac3e17ef — Filesystem access.

repo/src/transformers/models/biogpt/tokenization_biogpt.py:116

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bcdaa5800bdc4430 — Filesystem access.

repo/src/transformers/models/biogpt/tokenization_biogpt.py:119

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0625b11563d9858d — Filesystem access.

repo/src/transformers/models/biogpt/tokenization_biogpt.py:293

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d7707133c3b9085 — Filesystem access.

repo/src/transformers/models/biogpt/tokenization_biogpt.py:297

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9afa6ffc01c9c424 — Filesystem access.

repo/src/transformers/models/bit/convert_bit_to_pytorch.py:41

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #447af0b3fb7a1288 — Filesystem access.

repo/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:89

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3fa98aa715b8d1f8 — Filesystem access.

repo/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:92

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f66264a733ff45e — Filesystem access.

repo/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:203

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #48aeff513d6dc7a6 — Filesystem access.

repo/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:207

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3222b5e0de1ce4d0 — Filesystem access.

repo/src/transformers/models/bloom/convert_bloom_original_checkpoint_to_pytorch.py:149

        with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85af3bd494709893 — Filesystem access.

repo/src/transformers/models/bloom/convert_bloom_original_checkpoint_to_pytorch.py:151

        with open(os.path.join(pytorch_dump_folder_path, WEIGHTS_NAME + ".index.json"), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c5c516bf6aee181 — Filesystem access.

repo/src/transformers/models/bloom/convert_bloom_original_checkpoint_to_pytorch.py:209

        with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #409f719afeb5b4f5 — Filesystem access.

repo/src/transformers/models/blt/convert_blt_weights_to_hf.py:25

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #93c8b98694664ed3 — Filesystem access.

repo/src/transformers/models/blt/convert_blt_weights_to_hf.py:28

    with open(entropy_params_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eef50d3933782d3d — Filesystem access.

repo/src/transformers/models/blt/convert_blt_weights_to_hf.py:295

    with open(tokenizer_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #21e62efab47ff7bf — Filesystem access.

repo/src/transformers/models/blt/convert_blt_weights_to_hf.py:388

    with open(config_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84ed80a52e0c6557 — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:75

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6fddcf6be6c52148 — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:80

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #921d1a235f47cda7 — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:329

    with open(os.path.join(input_base_path, "tokenizer/text_tokenizer.json")) as tokenizer_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a226956ac6b5050 — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:341

    with open(os.path.join(input_base_path, "tokenizer/text_tokenizer_modified.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac6bc0468d4a4857 — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:352

    with open(os.path.join(input_base_path, "tokenizer/vqgan.yaml")) as vqgan_cfg_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a412e435a28e5921 — Filesystem access.

repo/src/transformers/models/clvp/tokenization_clvp.py:149

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cfdf04344b31e27c — Filesystem access.

repo/src/transformers/models/clvp/tokenization_clvp.py:155

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d8e47794ae331b3 — Filesystem access.

repo/src/transformers/models/conditional_detr/convert_conditional_detr_original_pytorch_checkpoint_to_pytorch.py:280

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1e30b7f80575f0c8 — Filesystem access.

repo/src/transformers/models/convnext/convert_convnext_to_pytorch.py:66

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1468235a19a31bc1 — Filesystem access.

repo/src/transformers/models/convnextv2/convert_convnextv2_to_pytorch.py:71

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79a652c319fd5208 — Filesystem access.

repo/src/transformers/models/cpm/tokenization_cpm.py:324

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49dc18569e60babf — Filesystem access.

repo/src/transformers/models/cpmant/tokenization_cpmant.py:37

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dcd6eaa5899d4017 — Filesystem access.

repo/src/transformers/models/cpmant/tokenization_cpmant.py:219

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e3516a133dda17e — Filesystem access.

repo/src/transformers/models/ctrl/tokenization_ctrl.py:128

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #259b7e1eb5333e21 — Filesystem access.

repo/src/transformers/models/ctrl/tokenization_ctrl.py:131

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4235f97f5f6a8683 — Filesystem access.

repo/src/transformers/models/cvt/convert_cvt_original_pytorch_checkpoint_to_pytorch.py:285

    id2label = json.loads(Path(hf_hub_download(repo_id, img_labels_file, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #abdb8a9ea31fa7aa — Filesystem access.

repo/src/transformers/models/d_fine/convert_d_fine_original_pytorch_checkpoint_to_hf.py:41

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29c7f0100c5192f7 — Filesystem access.

repo/src/transformers/models/dab_detr/convert_dab_detr_original_pytorch_checkpoint_to_pytorch.py:140

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c73ea62eabfc259b — Filesystem access.

repo/src/transformers/models/data2vec/convert_data2vec_vision_original_pytorch_checkpoint_to_pytorch.py:281

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e1291c302e58c287 — Filesystem access.

repo/src/transformers/models/deepseek_ocr2/convert_deepseek_ocr2_weights_to_hf.py:135

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #475f194574e475e4 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/transformers/models/deepseek_ocr2/convert_deepseek_ocr2_weights_to_hf.py:190

    image = Image.open(requests.get(image_url, stream=True).raw).convert("RGB")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #07fafdf93743c0e5 — Filesystem access.

repo/src/transformers/models/deepseek_vl/convert_deepseek_vl_weights_to_hf.py:184

        with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ed182afb6ab36a7 — Filesystem access.

repo/src/transformers/models/deepseek_vl_hybrid/convert_deepseek_vl_hybrid_weights_to_hf.py:211

        with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5d0d02e131e937a5 — Filesystem access.

repo/src/transformers/models/deformable_detr/convert_deformable_detr_to_pytorch.py:113

    id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef111d22923f5e49 — Filesystem access.

repo/src/transformers/models/deimv2/convert_deimv2_original_pytorch_checkpoint_to_hf.py:105

    with open(config_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #187e816988251930 — Filesystem access.

repo/src/transformers/models/deimv2/convert_deimv2_original_pytorch_checkpoint_to_hf.py:110

        open(hf_hub_download("huggingface/label-files", "coco-detection-mmdet-id2label.json", repo_type="dataset"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4549fc7e895d4468 — Filesystem access.

repo/src/transformers/models/deit/convert_deit_timm_to_pytorch.py:145

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #34c73c428f29a096 — Filesystem access.

repo/src/transformers/models/detr/convert_detr_original_pytorch_checkpoint_to_pytorch.py:198

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e680a3404d1c66e — Filesystem access.

repo/src/transformers/models/detr/convert_detr_to_pytorch.py:53

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c5a013199ca45a91 — Filesystem access.

repo/src/transformers/models/diffusion_gemma/convert_diffusion_gemma_weights.py:558

    with open(metadata_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #112cfc89edbdc67a — Filesystem access.

repo/src/transformers/models/dinov2/convert_dinov2_to_hf.py:65

        config.id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #085f7e429e892cbf — Filesystem access.

repo/src/transformers/models/dinov2_with_registers/convert_dinov2_with_registers_to_hf.py:70

        config.id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1676deec3c35652 — Filesystem access.

repo/src/transformers/models/dit/convert_dit_unilm_to_pytorch.py:155

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d10f1b68b30675c — Filesystem access.

repo/src/transformers/models/doge/convert_doge_weights_to_hf.py:96

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7e47bfeef5e44fe — Filesystem access.

repo/src/transformers/models/dpt/convert_dpt_hybrid_to_pytorch.py:64

        id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f08b589deb79e72 — Filesystem access.

repo/src/transformers/models/dpt/convert_dpt_to_pytorch.py:52

        id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cffe3e5e4caae1bd — Filesystem access.

repo/src/transformers/models/efficientnet/convert_efficientnet_to_pytorch.py:134

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #26a7f580ab953509 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:186

    with open(os.path.join(output_dir, "vocab.json"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d8f905e0ff1a2c8 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:189

    with open(os.path.join(output_dir, "tokenizer.json"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e384fc1a415e166 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:192

    with open(os.path.join(output_dir, "tokenizer_config.json"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c516f8ac30d1d11 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:195

    with open(os.path.join(output_dir, "special_tokens_map.json"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #869331734b35cd74 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:207

    with open(os.path.join(output_dir, "merges.txt"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2dd265f61d71f49f — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:280

    with open(f"{output_dir}/tokenizer.json", "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bce8820dcaa3e94a — Filesystem access.

repo/src/transformers/models/eomt/convert_eomt_to_hf.py:166

        with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0668917d5a6ba9ab — Filesystem access.

repo/src/transformers/models/eomt/convert_eomt_to_hf.py:212

    with open(os.path.join(input_path, "config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba23ba4e4a34d927 — Filesystem access.

repo/src/transformers/models/eomt_dinov3/convert_eomt_dinov3_to_hf.py:291

    with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #4f293aa1ea7a4382 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/transformers/models/eomt_dinov3/convert_eomt_dinov3_to_hf.py:377

    image = Image.open(requests.get(CAT_URL, stream=True).raw).convert("RGB")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #cb372a85eb7c5e47 — Filesystem access.

repo/src/transformers/models/ernie4_5_vl_moe/convert_ernie4_5_vl_moe_to_hf.py:158

    with open(os.path.join(save_dir, filename), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #24c679ed85bb9818 — Filesystem access.

repo/src/transformers/models/ernie4_5_vl_moe/convert_ernie4_5_vl_moe_to_hf.py:163

    with open(os.path.join(save_dir, filename), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f8ce643f88dcf45d — Filesystem access.

repo/src/transformers/models/esm/convert_esm.py:80

        vocab_file.write_text(vocab)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #28a22af2af48fc36 — Filesystem access.

repo/src/transformers/models/esm/convert_esm.py:312

            vocab_file.write_text(vocab)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b20444c0a70c0d02 — Filesystem access.

repo/src/transformers/models/esm/openfold_utils/residue_constants.py:417

    stereo_chemical_props = resources.read_text("openfold.resources", "stereo_chemical_props.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc4549212c7320a9 — Filesystem access.

repo/src/transformers/models/esm/tokenization_esm.py:28

    with open(vocab_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4713a42d18118a0a — Filesystem access.

repo/src/transformers/models/esm/tokenization_esm.py:136

        with open(vocab_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a45363b6d46a1b23 — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:36

    text = config.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a3fb21d1b4da8e07 — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:55

    config.write_text(json.dumps(json_config, indent=2, sort_keys=True))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3517a29813056f03 — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:59

        text = tokenizer_config.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df177a8984bb9c25 — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:64

            tokenizer_config.write_text(json.dumps(json_config, indent=2, sort_keys=True))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf32b20449ff9cb0 — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:73

    generation_config_path.write_text(json.dumps(generation_dict, indent=2, sort_keys=True))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8eb896ef1cccd558 — Environment-variable access.

repo/src/transformers/models/fast_vlm/convert_fastvlm_weights_to_hf.py:37

os.environ["TIMM_FUSED_ATTN"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #92dff22d623e26f9 — Filesystem access.

repo/src/transformers/models/fastspeech2_conformer/convert_fastspeech2_conformer_original_pytorch_checkpoint_to_pytorch.py:177

        with open(vocab_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c536ef9c43363ef — Filesystem access.

repo/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:65

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73b86098d5dbd0b9 — Filesystem access.

repo/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:163

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0ba8d1a3cd7d90a — Filesystem access.

repo/src/transformers/models/flaubert/tokenization_flaubert.py:237

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06f40a497b2b183b — Filesystem access.

repo/src/transformers/models/flaubert/tokenization_flaubert.py:240

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b5fa055f43aef43 — Filesystem access.

repo/src/transformers/models/flaubert/tokenization_flaubert.py:498

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #93941f7eea538283 — Filesystem access.

repo/src/transformers/models/flaubert/tokenization_flaubert.py:502

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7cd54d15ad429cff — Filesystem access.

repo/src/transformers/models/focalnet/convert_focalnet_to_hf_format.py:71

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #39068f0e4ea3c19c — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:130

    with open(src_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #96667139b59a1681 — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:146

    with open(tgt_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #45ed6af27960136f — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:155

    with open(fsmt_merges_file, encoding="utf-8") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9d053ab5ad0ed7d9 — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:159

    with open(merges_file, "w", encoding="utf-8") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be3891d70d9c3a91 — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:209

    with open(fsmt_model_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #91f8ac38930e5662 — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:222

    with open(fsmt_tokenizer_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ebbbb4537d7f00a0 — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:204

        with open(src_vocab_file, encoding="utf-8") as src_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7140a321fea9ba2 — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:206

        with open(tgt_vocab_file, encoding="utf-8") as tgt_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5f1513dc1207112b — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:209

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #813129e08d993b86 — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:446

        with open(src_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13d12c4b7d3ddbf6 — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:449

        with open(tgt_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ff615a978b7b076 — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:454

        with open(merges_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8bf27598674526cb — Filesystem access.

repo/src/transformers/models/gemma3/convert_gemma3_weights.py:331

        with open(_CHAT_TEMPLATE_PATH.value, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4192c8da3359d68f — Filesystem access.

repo/src/transformers/models/gemma4/convert_gemma4_weights.py:71

_CHAT_TEMPLATE = pathlib.Path(cached_file("gg-hf-gg/gemma-4-E4B-it", "chat_template.jinja")).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #60651226dfd880fe — Filesystem access.

repo/src/transformers/models/gemma4/convert_gemma4_weights.py:72

_CHAT_TEMPLATE_LARGE = pathlib.Path(cached_file("gg-hf-gg/gemma-4-31B-it", "chat_template.jinja")).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #37385b587660f407 — Filesystem access.

repo/src/transformers/models/gemma4/convert_gemma4_weights.py:1406

    with open(metadata_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a89b47b018c9e6a — Filesystem access.

repo/src/transformers/models/gemma4_unified/convert_gemma4_unified_weights.py:82

_CHAT_TEMPLATE = pathlib.Path(cached_file("google/gemma-4-31B-it", "chat_template.jinja")).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d064866664a62eda — Filesystem access.

repo/src/transformers/models/gemma4_unified/convert_gemma4_unified_weights.py:562

    with open(metadata_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a3b68700aa5f0077 — Filesystem access.

repo/src/transformers/models/glm/convert_glm_weights_to_hf.py:158

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73f384602bd14983 — Filesystem access.

repo/src/transformers/models/glm4/convert_glm4_weights_to_hf.py:163

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c55d49ffc4640855 — Filesystem access.

repo/src/transformers/models/glm4v/convert_glm4v_mgt_weights_to_hf.py:276

    with open(index_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c20583e84885be83 — Filesystem access.

repo/src/transformers/models/glm4v/convert_glm4v_mgt_weights_to_hf.py:483

    with open(vllm_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e6c426ad23a2502 — Filesystem access.

repo/src/transformers/models/glm4v/convert_glm4v_mgt_weights_to_hf.py:735

    with open(config_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a20c1a4b414cf7e — Filesystem access.

repo/src/transformers/models/glm4v_moe/convert_glm4v_moe_mgt_weights_to_hf.py:229

    with open(index_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ddec4a34d5f5207 — Filesystem access.

repo/src/transformers/models/glm4v_moe/convert_glm4v_moe_mgt_weights_to_hf.py:439

    with open(vllm_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d16319dc325c6b4 — Filesystem access.

repo/src/transformers/models/glm4v_moe/convert_glm4v_moe_mgt_weights_to_hf.py:739

    with open(config_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd5418a62ce4d2fd — Filesystem access.

repo/src/transformers/models/gpt2/convert_gpt2_original_tf_checkpoint_to_pytorch.py:102

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #396e505624b3dd1b — Filesystem access.

repo/src/transformers/models/gpt_neo/convert_gpt_neo_mesh_tf_to_pytorch.py:113

    config_json = json.load(open(config_file, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #46eb07a44dc679db — Filesystem access.

repo/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:35

    with open(emoji_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ca5567255459a5a — Filesystem access.

repo/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:41

    with open(vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa5b756ebcf79253 — Filesystem access.

repo/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:180

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7850b271c788afa4 — Filesystem access.

repo/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:190

        with open(emoji_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da40e53ff8f4768e — Filesystem access.

repo/src/transformers/models/gpt_oss/convert_gpt_oss_weights_to_hf.py:154

    original_config = json.loads((Path(input_base_path) / "config.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d6c30c89c6a9020 — Filesystem access.

repo/src/transformers/models/gpt_oss/convert_gpt_oss_weights_to_hf.py:331

    with open(os.path.join(model_path, "model.safetensors.index.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e37bbce171cc647a — Filesystem access.

repo/src/transformers/models/gpt_oss/convert_gpt_oss_weights_to_hf.py:779

    with open(chat_template_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0483d803b49098dc — Filesystem access.

repo/src/transformers/models/hiera/convert_hiera_to_hf.py:164

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0dd398158e80d8e8 — Filesystem access.

repo/src/transformers/models/hubert/convert_hubert_original_pytorch_checkpoint_to_pytorch.py:208

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c018f049f20373d — Filesystem access.

repo/src/transformers/models/idefics3/convert_idefics3_weights_to_hf.py:122

    with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8c287aed79cf860 — Filesystem access.

repo/src/transformers/models/imagegpt/convert_imagegpt_original_tf2_to_pytorch.py:156

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #98563dec5f5e75b8 — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:217

        with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #709ecaaed7755ccb — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:274

    with open(os.path.join(input_path, "config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b2b36db4e69aab6 — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:276

    with open(os.path.join(input_path, "preprocessor_config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2653a1550ee71ba — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:278

    with open(os.path.join(input_path, "special_tokens_map.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c7990f6095bee6b4 — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:280

    with open(os.path.join(input_path, "tokenizer_config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #65e8b10c09d32986 — Filesystem access.

repo/src/transformers/models/levit/convert_levit_timm_to_pytorch.py:87

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85b643b5f1a03eb1 — Filesystem access.

repo/src/transformers/models/llama/convert_llama_weights_to_hf.py:175

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f445b8056ff0f597 — Filesystem access.

repo/src/transformers/models/llama/convert_llama_weights_to_hf.py:180

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fc8c34d16ae22c86 — Environment-variable access.

repo/src/transformers/models/llama4/convert_llama4_weights_to_hf.py:25

_OFFLINE_QUANT_COMPATIBLE = os.environ.get("OFFLINE_QUANT_COMPATIBLE", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78f184804faa21f1 — Filesystem access.

repo/src/transformers/models/llama4/convert_llama4_weights_to_hf.py:203

    with open(os.path.join(model_path, "params.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0321a6c49c10e784 — Filesystem access.

repo/src/transformers/models/llama4/convert_llama4_weights_to_hf.py:221

    with open(os.path.join(input_base_path, "params.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f5f4007849ba6557 — Filesystem access.

repo/src/transformers/models/llava_next/convert_llava_next_weights_to_hf.py:100

    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b15030bf5bf70f2 — Filesystem access.

repo/src/transformers/models/llava_next_video/convert_llava_next_video_weights_to_hf.py:155

    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76e1a6948a1a2677 — Filesystem access.

repo/src/transformers/models/llava_onevision/convert_llava_onevision_weights_to_hf.py:103

    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6f0aae2ad44dc300 — Filesystem access.

repo/src/transformers/models/luke/convert_luke_original_pytorch_checkpoint_to_pytorch.py:29

    with open(metadata_path) as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a0eada5b3d31786b — Filesystem access.

repo/src/transformers/models/luke/convert_luke_original_pytorch_checkpoint_to_pytorch.py:49

    with open(os.path.join(pytorch_dump_folder_path, LukeTokenizer.vocab_files_names["entity_vocab_file"]), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #345c742a6bc75d8e — Filesystem access.

repo/src/transformers/models/luke/convert_luke_original_pytorch_checkpoint_to_pytorch.py:135

    with open(entity_vocab_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8a3be9bb61d6ce0e — Filesystem access.

repo/src/transformers/models/luke/tokenization_luke.py:287

            with open(entity_vocab_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a4df2267fe5cf26 — Filesystem access.

repo/src/transformers/models/m2m_100/tokenization_m2m_100.py:311

            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c254eee02ab3cbd8 — Filesystem access.

repo/src/transformers/models/m2m_100/tokenization_m2m_100.py:375

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e4a660629c8033a — Filesystem access.

repo/src/transformers/models/m2m_100/tokenization_m2m_100.py:380

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #847529d8d9fe566a — Filesystem access.

repo/src/transformers/models/mamba/convert_mamba_ssm_checkpoint_to_pytorch.py:110

    with open(config_json_file, "r", encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8df5b1c1c90109c — Filesystem access.

repo/src/transformers/models/mamba2/convert_mamba2_ssm_checkpoint_to_pytorch.py:125

    with open(config_path, "r", encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d027d0e835ffd40 — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:59

        self.model_results = json.load(open("Tatoeba-Challenge/models/released-model-results.json"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #114ec130cc28656e — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:61

        for line in open(ISO_PATH):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78d370501241cf45 — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:274

        with open(sub_dir / "metadata.json", "w", encoding="utf-8") as writeobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c2734fa3ef2224ee — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:305

            metadata = yaml.safe_load(open(p / ymls[0]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dada8c6d5085d0e3 — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:313

            metadata = yaml.safe_load(open(p / ymls[-1]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3dad1c274619d20a — Filesystem access.

repo/src/transformers/models/marian/convert_marian_to_pytorch.py:292

            lns = list(open(p / "README.md").readlines())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9b7f6ac112b1be8a — Filesystem access.

repo/src/transformers/models/marian/convert_marian_to_pytorch.py:683

    with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5766c992168ffddb — Filesystem access.

repo/src/transformers/models/marian/convert_marian_to_pytorch.py:688

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6caab245e446ca1f — Filesystem access.

repo/src/transformers/models/marian/tokenization_marian.py:352

                with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e347b6ae8f10a8a3 — Filesystem access.

repo/src/transformers/models/marian/tokenization_marian.py:416

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf9d8f01d0243824 — Filesystem access.

repo/src/transformers/models/marian/tokenization_marian.py:421

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b00213fbafd7b466 — Filesystem access.

repo/src/transformers/models/mask2former/convert_mask2former_original_pytorch_checkpoint_to_pytorch.py:134

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d85588d03de56304 — Filesystem access.

repo/src/transformers/models/maskformer/convert_maskformer_resnet_to_pytorch.py:74

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b385239fb5ecdb66 — Environment-variable access.

repo/src/transformers/models/maskformer/convert_maskformer_resnet_to_pytorch.py:273

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f88760022e960d37 — Filesystem access.

repo/src/transformers/models/maskformer/convert_maskformer_resnet_to_pytorch.py:281

    with open(checkpoint_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d006436f5e5dd919 — Filesystem access.

repo/src/transformers/models/maskformer/convert_maskformer_swin_to_pytorch.py:71

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #535ea738257968a0 — Environment-variable access.

repo/src/transformers/models/maskformer/convert_maskformer_swin_to_pytorch.py:242

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #74203b45194561fe — Filesystem access.

repo/src/transformers/models/maskformer/convert_maskformer_swin_to_pytorch.py:250

    with open(checkpoint_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d8ca1d49908ba63c — Filesystem access.

repo/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:598

        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #342d346a154b18c3 — Filesystem access.

repo/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:651

    with open(tracker_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b1d0c33b7e2a6030 — Filesystem access.

repo/src/transformers/models/mgp_str/tokenization_mgp_str.py:53

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ad1ab93649e51b6 — Filesystem access.

repo/src/transformers/models/mgp_str/tokenization_mgp_str.py:97

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c26d70eec9cf8495 — Filesystem access.

repo/src/transformers/models/mimo_v2_flash/convert_mimo_v2_flash_weights_to_hf.py:94

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8b29c2e352327df — Filesystem access.

repo/src/transformers/models/ministral3/convert_ministral3_weights_to_hf.py:89

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78be7e0165ecd4f3 — Filesystem access.

repo/src/transformers/models/mistral/convert_mistral_weights_to_hf.py:63

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce643fe0970ba20d — Filesystem access.

repo/src/transformers/models/mistral3/convert_mistral3_weights_to_hf.py:75

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d7ae424b7bff6385 — Filesystem access.

repo/src/transformers/models/mistral4/convert_mistral4_weight_to_hf.py:363

    with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e480bf09dc8ff96 — Filesystem access.

repo/src/transformers/models/mixtral/convert_mixtral_weights_to_hf.py:52

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e35ba0972bb8adad — Filesystem access.

repo/src/transformers/models/mixtral/convert_mixtral_weights_to_hf.py:57

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa0fd62435bd53cb — Filesystem access.

repo/src/transformers/models/mllama/convert_mllama_weights_to_hf.py:216

    with open(os.path.join(input_base_path, "params.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e088c5b10a493477 — Filesystem access.

repo/src/transformers/models/mllama/convert_mllama_weights_to_hf.py:562

        with open(chat_template_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de075ed0c99996d1 — Filesystem access.

repo/src/transformers/models/mllama/convert_mllama_weights_to_hf.py:567

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23f0a2438e704f0f — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:30

    with open(metadata_path) as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #447ba8ba94f6c8d4 — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:53

    with open(os.path.join(pytorch_dump_folder_path, "tokenizer_config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88e0cd17396466ec — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:56

    with open(os.path.join(pytorch_dump_folder_path, "tokenizer_config.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e409fe4993707a1 — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:59

    with open(os.path.join(pytorch_dump_folder_path, MLukeTokenizer.vocab_files_names["entity_vocab_file"]), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f071de7ab201265c — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:188

    data = [json.loads(line) for line in open(entity_vocab_path)]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #67738aaa643b0cdb — Filesystem access.

repo/src/transformers/models/mluke/tokenization_mluke.py:308

            with open(entity_vocab_file, encoding="utf-8") as entity_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6eacb18c1cfbd810 — Filesystem access.

repo/src/transformers/models/mluke/tokenization_mluke.py:1713

        with open(entity_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bf1210eb420aa1e5 — Filesystem access.

repo/src/transformers/models/mobilenet_v1/convert_original_tf_checkpoint_to_pytorch.py:158

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06a8a1c293001033 — Filesystem access.

repo/src/transformers/models/mobilenet_v2/convert_original_tf_checkpoint_to_pytorch.py:231

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d05a448254e4496d — Filesystem access.

repo/src/transformers/models/mobilevit/convert_mlcvnets_to_pytorch.py:65

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed386b1f02edc581 — Filesystem access.

repo/src/transformers/models/mobilevitv2/convert_mlcvnets_to_pytorch.py:55

    with open(orig_cfg_file, "r") as yaml_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eaa16604d5eaad3e — Filesystem access.

repo/src/transformers/models/mobilevitv2/convert_mlcvnets_to_pytorch.py:117

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2534aaff325d9863 — Filesystem access.

repo/src/transformers/models/myt5/tokenization_myt5.py:46

            with open(rewriting_rules, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef0e59154b642c93 — Filesystem access.

repo/src/transformers/models/myt5/tokenization_myt5.py:195

        self.byte_maps = json.load(open(vocab_file, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c6fc1a645920b09f — Filesystem access.

repo/src/transformers/models/myt5/tokenization_myt5.py:373

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0358826bb97e349 — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:58

        with open(meta_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #22e3e1f39c9078ed — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:82

            with open(config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #527ce8d9a6147d91 — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:236

            with open(tokenizer_pkl, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0a6fc0084085a4e6 — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:246

                    (Path(output_dir) / filename).write_bytes(src.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f21201ca6c377694 — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:252

                (Path(output_dir) / filename).write_bytes(src.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9e2917ab3cce29ef — Filesystem access.

repo/src/transformers/models/nemotron/convert_nemotron_nemo_to_hf.py:131

    json.dump(hf_config, open(f"{hf_output_path}/config.json", "w"), indent=2)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76ffbd895b3e2502 — Filesystem access.

repo/src/transformers/models/nemotron3_5_asr/convert_nemotron3_5_asr_to_hf.py:505

    nemo_config = yaml.load(open(model_files["model_config"], "r"), Loader=yaml.FullLoader)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4624f827b45859ef — Filesystem access.

repo/src/transformers/models/nemotron_asr_streaming/convert_nemotron_asr_streaming_to_hf.py:458

    nemo_config = yaml.load(open(model_files["model_config"], "r"), Loader=yaml.FullLoader)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8caa6b9f128330e — Filesystem access.

repo/src/transformers/models/nllb_moe/convert_nllb_moe_sharded_original_checkpoint_to_pytorch.py:122

    with open(os.path.join(dump_path, WEIGHTS_INDEX_NAME), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87d4bb71cc1e84cb — Filesystem access.

repo/src/transformers/models/olmo/convert_olmo_weights_to_hf.py:56

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f889d5afa4a1427 — Filesystem access.

repo/src/transformers/models/olmo/convert_olmo_weights_to_hf.py:61

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #03fc9e72b922d41d — Filesystem access.

repo/src/transformers/models/olmo/convert_olmo_weights_to_hf.py:71

    olmo_config = yaml.safe_load(config_path.read_text())["model"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4bb55da1cdd19741 — Filesystem access.

repo/src/transformers/models/olmo2/convert_olmo2_weights_to_hf.py:59

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #51d84978539c6c8c — Filesystem access.

repo/src/transformers/models/olmo2/convert_olmo2_weights_to_hf.py:64

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88c0c913583fb534 — Filesystem access.

repo/src/transformers/models/olmo2/convert_olmo2_weights_to_hf.py:81

    olmo2_config = yaml.safe_load(config_path.read_text())["model"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #353a7135b5f23d71 — Filesystem access.

repo/src/transformers/models/olmo2/convert_olmo2_weights_to_hf.py:230

        tokenizer_config = yaml.safe_load(config_path.read_text())["tokenizer"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b61c4f3d50bf15db — Filesystem access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:72

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88d589ec15b44a85 — Filesystem access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:77

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62785a0a64521b50 — Filesystem access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:90

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b43141f9578d71c5 — Environment-variable access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:203

                if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa96c6ac07cdf8f5 — Environment-variable access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:268

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #53a4facc260c4484 — Filesystem access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:300

    olmo3_config = json.loads(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a5eac09489131f0 — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:98

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d373893d54799f16 — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:103

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55978071df21d3a4 — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:116

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #64581a5532ce9450 — Environment-variable access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:221

                if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db72827c97f7ed77 — Environment-variable access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:313

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a167bda5e3c6cf8d — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:424

    olmo_config = json.loads(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0420ee683497a830 — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:561

    with open(hf_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a28c865196d0824d — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:569

    with open(hf_config_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8de5852ac41cb9cd — Filesystem access.

repo/src/transformers/models/olmoe/convert_olmoe_weights_to_hf.py:82

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac56fddec0fb516e — Filesystem access.

repo/src/transformers/models/olmoe/convert_olmoe_weights_to_hf.py:87

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5af0d9994024497a — Filesystem access.

repo/src/transformers/models/olmoe/convert_olmoe_weights_to_hf.py:97

    olmoe_config = yaml.safe_load(config_path.read_text())["model"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c449b7e6f04487f — Filesystem access.

repo/src/transformers/models/oneformer/image_processing_oneformer.py:95

    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9dc72e53f6cbc8c7 — Filesystem access.

repo/src/transformers/models/oneformer/image_processing_pil_oneformer.py:241

    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d2e6e27b7a53c655 — Filesystem access.

repo/src/transformers/models/openai/convert_openai_original_tf_checkpoint_to_pytorch.py:41

    with open(openai_checkpoint_folder_path + "/parameters_names.json", "r", encoding="utf-8") as names_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #286f216665ba400c — Filesystem access.

repo/src/transformers/models/openai/convert_openai_original_tf_checkpoint_to_pytorch.py:43

    with open(openai_checkpoint_folder_path + "/params_shapes.json", "r", encoding="utf-8") as shapes_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6b70dc926c1d85ad — Filesystem access.

repo/src/transformers/models/openai/convert_openai_original_tf_checkpoint_to_pytorch.py:125

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ce203926628a90f — Filesystem access.

repo/src/transformers/models/openai_privacy_filter/convert_openai_privacy_filter_weights_to_hf.py:245

    original_config = json.loads((input_path / "config.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9b73b13e7b549c35 — Filesystem access.

repo/src/transformers/models/parakeet/convert_nemo_to_hf.py:515

    nemo_config = yaml.load(open(model_files["model_config"], "r"), Loader=yaml.FullLoader)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3112a641f09fc8fa — Environment-variable access.

repo/src/transformers/models/perceiver/convert_perceiver_haiku_to_pytorch.py:271

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d910814711261970 — Filesystem access.

repo/src/transformers/models/perceiver/convert_perceiver_haiku_to_pytorch.py:280

    with open(pickle_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6784b4df22e9b1d — Filesystem access.

repo/src/transformers/models/perceiver/convert_perceiver_haiku_to_pytorch.py:331

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4cf5f8507eca8791 — Filesystem access.

repo/src/transformers/models/perceiver/convert_perceiver_haiku_to_pytorch.py:380

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #35f96e6090bff7cf — Filesystem access.

repo/src/transformers/models/perception_lm/convert_perception_lm_weights_to_hf.py:176

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ded689003686b584 — Filesystem access.

repo/src/transformers/models/perception_lm/convert_perception_lm_weights_to_hf.py:181

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6de6eb3a88c894ea — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:139

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a56220ff9ab25c08 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:196

    vocab = json.load(open(f"{output_dir}/vocab.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #46c0581e76c0cdfc — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:199

    json.dump(vocab, open(f"{output_dir}/vocab.json", "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2975b59c66173d3b — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:201

    tokenizer = json.load(open(f"{output_dir}/tokenizer.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d73ce6d29a682385 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:208

    json.dump(tokenizer, open(f"{output_dir}/tokenizer.json", "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #efa586128672a6f4 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:210

    tokenizer_config = json.load(open(f"{output_dir}/tokenizer_config.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c38ce2a67212d209 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:213

    json.dump(tokenizer_config, open(f"{output_dir}/tokenizer_config.json", "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9563f28c05b8db9 — Filesystem access.

repo/src/transformers/models/phobert/tokenization_phobert.py:126

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #536d53e09c90f0c7 — Filesystem access.

repo/src/transformers/models/phobert/tokenization_phobert.py:310

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d0abb5a63f02908 — Filesystem access.

repo/src/transformers/models/phobert/tokenization_phobert.py:331

                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #abaaba0292a7adfb — Filesystem access.

repo/src/transformers/models/pixtral/convert_pixtral_weights_to_hf.py:147

        with open(f"{input_dir}/params.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b3ebf761961d4853 — Filesystem access.

repo/src/transformers/models/pixtral/convert_pixtral_weights_to_hf.py:239

        processor.chat_template = open(args.chat_template_file).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #966e1dbf89124b92 — Filesystem access.

repo/src/transformers/models/poolformer/convert_poolformer_original_to_pytorch.py:109

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2bd55b87bbdfa81c — Filesystem access.

repo/src/transformers/models/pop2piano/convert_pop2piano_weights_to_hf.py:189

with open("./vocab.json", "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eee56d1ff592471e — Filesystem access.

repo/src/transformers/models/pop2piano/tokenization_pop2piano.py:111

        with open(vocab, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca6852825cfe2d5e — Filesystem access.

repo/src/transformers/models/pop2piano/tokenization_pop2piano.py:358

        with open(out_vocab_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f919fbbb47a8e47b — Filesystem access.

repo/src/transformers/models/prophetnet/tokenization_prophetnet.py:259

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e7edfd4132c75d62 — Filesystem access.

repo/src/transformers/models/prophetnet/tokenization_prophetnet.py:438

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8df4a9683092578 — Filesystem access.

repo/src/transformers/models/qwen3_asr/convert_qwen3_asr_to_hf.py:110

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e8662f85ed99e350 — Filesystem access.

repo/src/transformers/models/qwen3_asr/convert_qwen3_asr_to_hf.py:125

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e5aa91a6c3cce84 — Filesystem access.

repo/src/transformers/models/qwen3_asr/convert_qwen3_asr_to_hf.py:236

            with open(chat_template_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3dadc224b144d08a — Environment-variable access.

repo/src/transformers/models/rag/retrieval_rag.py:134

        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61301f5bfdb83f02 — Filesystem access.

repo/src/transformers/models/rag/retrieval_rag.py:141

        with open(passages_path, "rb") as passages_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c2764dc71a3d31f — Environment-variable access.

repo/src/transformers/models/rag/retrieval_rag.py:150

        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #987b87b18891c1c3 — Filesystem access.

repo/src/transformers/models/rag/retrieval_rag.py:157

        with open(resolved_meta_path, "rb") as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ceee3295431b834a — Environment-variable access.

repo/src/transformers/models/reformer/convert_reformer_trax_checkpoint_to_pytorch.py:193

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0658541c2b7bf88 — Filesystem access.

repo/src/transformers/models/reformer/convert_reformer_trax_checkpoint_to_pytorch.py:200

    with open(trax_model_pkl_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f1edd64cb5d4eb2 — Filesystem access.

repo/src/transformers/models/regnet/convert_regnet_seer_10b_to_pytorch.py:165

    id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52bf0bbd7cdd5b25 — Environment-variable access.

repo/src/transformers/models/regnet/convert_regnet_seer_10b_to_pytorch.py:236

        logger.info(f"Token is {os.environ['HF_TOKEN']}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f06078fcace57518 — Filesystem access.

repo/src/transformers/models/regnet/convert_regnet_to_pytorch.py:218

    id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6257e326cad6b841 — Filesystem access.

repo/src/transformers/models/resnet/convert_resnet_to_pytorch.py:121

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f8f97a281809efd2 — Filesystem access.

repo/src/transformers/models/rf_detr/convert_rf_detr_weights_to_hf.py:154

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c5999cd296ff808 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:52

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30dd2499e47c9545 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:139

        with open(word_shape_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3974170f915fbdd1 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:142

        with open(word_pronunciation_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23348243ee87cce5 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:1077

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8ef4473c71ee958 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:1088

        with open(word_shape_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #259767afc5bea433 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:1091

        with open(word_pronunciation_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c81e9b5c8ddee4ed — Filesystem access.

repo/src/transformers/models/rt_detr/convert_rt_detr_original_pytorch_checkpoint_to_hf.py:41

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e04596e69900e12 — Filesystem access.

repo/src/transformers/models/rt_detr_v2/convert_rt_detr_v2_weights_to_hf.py:42

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #203285b6678edea3 — Filesystem access.

repo/src/transformers/models/rwkv/convert_rwkv_checkpoint_to_hf.py:134

        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6144881ac7becc2c — Environment-variable access.

repo/src/transformers/models/seamless_m4t/convert_fairseq2_to_hf.py:132

CACHE_DIR = os.path.join(os.getenv("XDG_CACHE_HOME", default_cache_dir), "huggingface", "hub")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #279674530423e3d2 — Environment-variable access.

repo/src/transformers/models/seamless_m4t_v2/convert_fairseq2_to_hf.py:149

CACHE_DIR = os.path.join(os.getenv("XDG_CACHE_HOME", default_cache_dir), "huggingface", "hub")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19f3534303d4662d — Filesystem access.

repo/src/transformers/models/segformer/convert_segformer_original_to_pytorch.py:153

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f8bf42bf4eacc01d — Filesystem access.

repo/src/transformers/models/sew/convert_sew_original_pytorch_checkpoint_to_pytorch.py:268

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56d98e3dea9e7434 — Filesystem access.

repo/src/transformers/models/sew_d/convert_sew_d_original_pytorch_checkpoint_to_pytorch.py:280

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f9de29b68dfa2238 — Filesystem access.

repo/src/transformers/models/siglip/tokenization_siglip.py:345

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #37233234c8dfb88b — Filesystem access.

repo/src/transformers/models/speech_encoder_decoder/convert_speech_to_text_wav2vec2_seq2seq_original_to_pytorch.py:195

    with open(dict_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ffb604fdad4a1042 — Filesystem access.

repo/src/transformers/models/speech_encoder_decoder/convert_speech_to_text_wav2vec2_seq2seq_original_to_pytorch.py:267

    with open(os.path.join(pytorch_dump_folder_path, "vocab.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49f1dd744a5f43d5 — Filesystem access.

repo/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:271

            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0448a72a2fbc6359 — Filesystem access.

repo/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:285

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff205fde68d94f37 — Filesystem access.

repo/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:290

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47addbdd28f8a00c — Filesystem access.

repo/src/transformers/models/splinter/tokenization_splinter.py:33

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2bef8b943c3fef97 — Filesystem access.

repo/src/transformers/models/swiftformer/convert_swiftformer_original_to_hf.py:102

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8145a759bf20abfe — Filesystem access.

repo/src/transformers/models/swin/convert_swin_timm_to_pytorch.py:45

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f619a75df47afcfa — Filesystem access.

repo/src/transformers/models/swinv2/convert_swinv2_timm_to_pytorch.py:67

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f566cabd94e077b — Filesystem access.

repo/src/transformers/models/swinv2/convert_swinv2_timm_to_pytorch.py:76

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ae3fa916a349390 — Filesystem access.

repo/src/transformers/models/switch_transformers/convert_big_switch.py:145

    with open(os.path.join(dump_path, WEIGHTS_INDEX_NAME), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2489658767d34431 — Filesystem access.

repo/src/transformers/models/switch_transformers/convert_switch_transformers_original_flax_checkpoint_to_pytorch.py:267

    with open(gin_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c5155643ebcad2ed — Filesystem access.

repo/src/transformers/models/tapas/tokenization_tapas.py:91

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad619686b3e3cca7 — Filesystem access.

repo/src/transformers/models/tapas/tokenization_tapas.py:394

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84147954852c7664 — Filesystem access.

repo/src/transformers/models/textnet/convert_textnet_to_hf.py:119

    with open(config_filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd58daac755fb301 — Filesystem access.

repo/src/transformers/models/timesformer/convert_timesformer_to_pytorch.py:49

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #14d4d0ee62f6ee31 — Filesystem access.

repo/src/transformers/models/unispeech/convert_unispeech_original_pytorch_checkpoint_to_pytorch.py:220

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #346ee99fce0d6671 — Filesystem access.

repo/src/transformers/models/upernet/convert_convnext_upernet_to_pytorch.py:53

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ab081025025df04 — Filesystem access.

repo/src/transformers/models/upernet/convert_swin_upernet_to_pytorch.py:59

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e844cf48d0b36c5f — Filesystem access.

repo/src/transformers/models/vibevoice_acoustic_tokenizer/convert_vibevoice_acoustic_tokenizer_to_hf.py:113

        with open(processor_config, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7271465d125cad1d — Filesystem access.

repo/src/transformers/models/vibevoice_acoustic_tokenizer/convert_vibevoice_acoustic_tokenizer_to_hf.py:127

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0503525320d3b463 — Filesystem access.

repo/src/transformers/models/vibevoice_asr/convert_vibevoice_asr_to_hf.py:126

    with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #97be3f92ca69fd6f — Filesystem access.

repo/src/transformers/models/vibevoice_asr/convert_vibevoice_asr_to_hf.py:149

        with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d71b651bd4cd20c3 — Filesystem access.

repo/src/transformers/models/videomae/convert_videomae_to_pytorch.py:50

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04ef51a5372203df — Filesystem access.

repo/src/transformers/models/videoprism/convert_videoprism_weights_to_hf.py:391

        with open(spiece_path, "wb") as f_out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a73ec37df64cacab — Filesystem access.

repo/src/transformers/models/vilt/convert_vilt_original_to_pytorch.py:184

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e83b0a81486235fe — Filesystem access.

repo/src/transformers/models/vit/convert_dino_to_pytorch.py:147

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1cf12854011d3511 — Filesystem access.

repo/src/transformers/models/vit_msn/convert_msn_to_pytorch.py:154

    id2label = json.load(open(hf_hub_download(repo_id, filename), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #89a247002678aa62 — Filesystem access.

repo/src/transformers/models/vits/convert_original_checkpoint.py:309

        with open(config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5d39790e49a20891 — Filesystem access.

repo/src/transformers/models/vits/convert_original_checkpoint.py:331

        symbols = [line.replace("\n", "") for line in open(vocab_path, encoding="utf-8")]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4cc70c2b377e3fca — Filesystem access.

repo/src/transformers/models/vits/convert_original_checkpoint.py:338

        with open(tf.name, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #68c98d08c1f418c5 — Filesystem access.

repo/src/transformers/models/vits/tokenization_vits.py:83

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #48bd2868801e77a9 — Filesystem access.

repo/src/transformers/models/vits/tokenization_vits.py:242

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #80c1885d89295804 — Filesystem access.

repo/src/transformers/models/vivit/convert_vivit_flax_to_pytorch.py:36

    with open(path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2f48f4b56922e06 — Filesystem access.

repo/src/transformers/models/vivit/convert_vivit_flax_to_pytorch.py:49

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d7b50f2d934dee93 — Filesystem access.

repo/src/transformers/models/vjepa2/convert_vjepa2_classifier_to_hf.py:99

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a63fca17bfd8f9ef — Environment-variable access.

repo/src/transformers/models/vjepa2/convert_vjepa2_to_hf.py:48

TOKEN = os.environ.get("HF_TOKEN", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5c167517a2eaf6c4 — Filesystem access.

repo/src/transformers/models/voxtral/convert_voxtral_weights_to_hf.py:187

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ee9cc98b62ba8940 — Filesystem access.

repo/src/transformers/models/voxtral_realtime/convert_voxtral_realtime_weights_to_hf.py:242

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0b1b72a16ea98ea — Filesystem access.

repo/src/transformers/models/wav2vec2/convert_wav2vec2_original_pytorch_checkpoint_to_pytorch.py:75

    with open(filename, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f78985a53ea0854f — Filesystem access.

repo/src/transformers/models/wav2vec2/convert_wav2vec2_original_pytorch_checkpoint_to_pytorch.py:317

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ddd33c2a35f85b55 — Filesystem access.

repo/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:154

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #22cd8be0bad79760 — Filesystem access.

repo/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:647

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0fdd321565f180a9 — Filesystem access.

repo/src/transformers/models/wav2vec2_conformer/convert_wav2vec2_conformer_original_pytorch_checkpoint_to_pytorch.py:253

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #256ab2bbd7d446e7 — Filesystem access.

repo/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:138

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c36535abd64e5f1 — Filesystem access.

repo/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:575

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f42162c113b64e93 — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:158

        model_bytes = open(download_target, "rb").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae5cc97ad0b42f93 — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:164

    with urllib.request.urlopen(url) as source, open(download_target, "wb") as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49610a89230cb635 — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:176

    model_bytes = open(download_target, "rb").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ba10d7ac32ccd6e — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:315

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd2fc9dd57f9225a — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:318

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e02ec13654022196 — Filesystem access.

repo/src/transformers/models/whisper/tokenization_whisper.py:266

            with open(normalizer_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c593e0c646340211 — Filesystem access.

repo/src/transformers/models/whisper/tokenization_whisper.py:560

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed916796180add59 — Filesystem access.

repo/src/transformers/models/whisper/tokenization_whisper.py:563

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #25fb7a663ae60b43 — Filesystem access.

repo/src/transformers/models/whisper/tokenization_whisper.py:568

            with open(normalizer_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9057c0c0ae1bd923 — Filesystem access.

repo/src/transformers/models/xcodec/convert_xcodec_weights_to_hf.py:186

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f53a9eea0b6c921f — Filesystem access.

repo/src/transformers/models/xcodec2/convert_xcodec2_checkpoint.py:224

        with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0593ad6e30adaa32 — Filesystem access.

repo/src/transformers/models/xlm/convert_xlm_original_pytorch_checkpoint_to_pytorch.py:58

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d67abde0506148a1 — Filesystem access.

repo/src/transformers/models/xlm/convert_xlm_original_pytorch_checkpoint_to_pytorch.py:62

    with open(pytorch_vocab_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc131440f05bacc8 — Filesystem access.

repo/src/transformers/models/xlm/tokenization_xlm.py:244

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b09e03a64d16fe58 — Filesystem access.

repo/src/transformers/models/xlm/tokenization_xlm.py:247

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1de865a7a44fdeb4 — Filesystem access.

repo/src/transformers/models/xlm/tokenization_xlm.py:541

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0bcdf48636a31905 — Filesystem access.

repo/src/transformers/models/xlm/tokenization_xlm.py:545

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b65c881dc71b1ec — Filesystem access.

repo/src/transformers/models/xlnet/convert_xlnet_original_tf_checkpoint_to_pytorch.py:224

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a7e21e8a696c7fd — Filesystem access.

repo/src/transformers/models/yolos/convert_yolos_to_pytorch.py:61

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4be86f2cf866366b — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:171

    config_dict = json.loads((input_dir / "config.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #42732020b4e349d9 — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:249

    index = json.loads((input_dir / "model.safetensors.index.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7871cecb3cdeb788 — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:251

    old_num_hidden_layers = int(json.loads((input_dir / "config.json").read_text())["num_hidden_layers"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa9afe9ef3ba55a3 — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:296

        old_num_hidden_layers = int(json.loads((input_dir / "config.json").read_text())["num_hidden_layers"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a36028c388093eb — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:313

    old_index = json.loads(index_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #68eacf57c0dbe23c — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:346

    (output_dir / "model.safetensors.index.json").write_text(
        json.dumps(converted_index, indent=2, sort_keys=True) + "\n"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba898e760460e656 — Filesystem access.

repo/src/transformers/pipelines/__init__.py:921

                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa41237ba8cf741f — Filesystem access.

repo/src/transformers/pipelines/audio_classification.py:174

                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #218c16bc8f51ecfd — Filesystem access.

repo/src/transformers/pipelines/automatic_speech_recognition.py:352

                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f92beaa9f1f883c — Filesystem access.

repo/src/transformers/pipelines/base.py:464

        with open(binary_path, "wb+") as f_output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f043398e311627e5 — Filesystem access.

repo/src/transformers/pipelines/base.py:527

        with open(self.input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1169d3fea811298 — Filesystem access.

repo/src/transformers/pipelines/base.py:542

        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e88b4dd33171b6ad — Filesystem access.

repo/src/transformers/pipelines/base.py:570

        with open(input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce31b67a0cc876b7 — Filesystem access.

repo/src/transformers/pipelines/base.py:587

        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2cf3979f68d1820 — Environment-variable access.

repo/src/transformers/pipelines/base.py:1200

        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0a0fcf6bdf22add5 — Environment-variable access.

repo/src/transformers/pipelines/base.py:1202

            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dbbbc99f8d29eaed — Environment-variable access.

repo/src/transformers/pipelines/base.py:1321

        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cbcb6bc034928003 — Environment-variable access.

repo/src/transformers/pipelines/base.py:1323

            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1dd6fd1169e88de — Filesystem access.

repo/src/transformers/pipelines/zero_shot_audio_classification.py:111

                with open(audio, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8b85521f73bd507 — Filesystem access.

repo/src/transformers/processing_utils.py:1086

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a98e766be8160193 — Filesystem access.

repo/src/transformers/processing_utils.py:1166

            with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12ee8402f7197ffa — Filesystem access.

repo/src/transformers/processing_utils.py:1174

                    with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f80824fe4480f36c — Filesystem access.

repo/src/transformers/processing_utils.py:1183

                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8d07e967c118dc73 — Filesystem access.

repo/src/transformers/processing_utils.py:1371

            with open(resolved_chat_template_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a0386c3583d522da — Filesystem access.

repo/src/transformers/processing_utils.py:1383

                template_name: open(template_file, "r", encoding="utf-8").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1eeb05c7f693749c — Filesystem access.

repo/src/transformers/processing_utils.py:1387

                with open(resolved_raw_chat_template_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5c2c4ae74b9de388 — Filesystem access.

repo/src/transformers/processing_utils.py:1402

                with open(resolved_processor_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76861d5e08b2f940 — Filesystem access.

repo/src/transformers/processing_utils.py:1428

                reader = open(resolved_audio_tokenizer_file, "r", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7feb6f826b9c674f — Environment-variable access.

repo/src/transformers/testing_utils.py:290

        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1b89ab1cb7c0802 — Environment-variable access.

repo/src/transformers/testing_utils.py:306

        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #69ce7bb7bf55a503 — Environment-variable access.

repo/src/transformers/testing_utils.py:1079

    if "TRANSFORMERS_TEST_BACKEND" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #258db5306dccbf8e — Environment-variable access.

repo/src/transformers/testing_utils.py:1080

        backend = os.environ["TRANSFORMERS_TEST_BACKEND"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40da5566566bf203 — Environment-variable access.

repo/src/transformers/testing_utils.py:1089

    if "TRANSFORMERS_TEST_DEVICE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86a86fb806baa08f — Environment-variable access.

repo/src/transformers/testing_utils.py:1090

        torch_device = os.environ["TRANSFORMERS_TEST_DEVICE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #594644905f53e6db — Environment-variable access.

repo/src/transformers/testing_utils.py:2161

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86d9be3206dee3a4 — Environment-variable access.

repo/src/transformers/testing_utils.py:2283

            for k in list(os.environ.keys()):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8079d394e5de8b0d — Environment-variable access.

repo/src/transformers/testing_utils.py:2285

                    del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1406e22ce0a3a05b — Environment-variable access.

repo/src/transformers/testing_utils.py:2296

    return mock.patch.dict(os.environ, kwargs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #faa4e127ea1b6adb — Environment-variable access.

repo/src/transformers/testing_utils.py:2311

    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6fe6cad2c0f883ad — Filesystem access.

repo/src/transformers/testing_utils.py:2413

        with open(report_files["durations"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b7d52cfd0d04ca09 — Filesystem access.

repo/src/transformers/testing_utils.py:2443

    with open(report_files["failures_long"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #068ae7f4973ac732 — Filesystem access.

repo/src/transformers/testing_utils.py:2448

    with open(report_files["failures_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c4bf173f7bf36f5 — Filesystem access.

repo/src/transformers/testing_utils.py:2453

    with open(report_files["failures_line"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49fd181f005a7b4f — Filesystem access.

repo/src/transformers/testing_utils.py:2457

    with open(report_files["errors"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9f4b6b26f48ba6e — Filesystem access.

repo/src/transformers/testing_utils.py:2461

    with open(report_files["warnings"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56aee6d10cf94582 — Filesystem access.

repo/src/transformers/testing_utils.py:2475

    with open(report_files["summary_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea4cb8e395eb7a11 — Filesystem access.

repo/src/transformers/testing_utils.py:2479

    with open(report_files["stats"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4363a3fe4ce468d — Environment-variable access.

repo/src/transformers/testing_utils.py:2579

    worker = os.environ.get("PYTEST_XDIST_WORKER", "gw0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c046886fcd09d831 — Filesystem access.

repo/src/transformers/testing_utils.py:2626

    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9934720cbde23bef — Environment-variable access.

repo/src/transformers/testing_utils.py:2828

        timeout = int(os.environ.get("PYTEST_TIMEOUT", "600"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #245ceea5bdb837ac — Environment-variable access.

repo/src/transformers/testing_utils.py:2864

        if os.getenv("_INSIDE_SUB_PROCESS", None) == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7576adda9a9147ee — Environment-variable access.

repo/src/transformers/testing_utils.py:2867

            test = " ".join(os.environ.get("PYTEST_CURRENT_TEST").split(" ")[:-1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01b1eba8f4a754fe — Environment-variable access.

repo/src/transformers/testing_utils.py:2869

                env = copy.deepcopy(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4662b079e9d4926f — Environment-variable access.

repo/src/transformers/testing_utils.py:2986

    skip_cuda_tests: bool = os.environ.get("SKIP_CUDA_DOCTEST", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff6e80ecdc922d07 — Environment-variable access.

repo/src/transformers/testing_utils.py:3224

    if "TRANSFORMERS_TEST_DEVICE_SPEC" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1f7741a9546ba4f — Environment-variable access.

repo/src/transformers/testing_utils.py:3225

        device_spec_path = os.environ["TRANSFORMERS_TEST_DEVICE_SPEC"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c050d26674f9a01 — Environment-variable access.

repo/src/transformers/testing_utils.py:3248

        if "TRANSFORMERS_TEST_DEVICE" in os.environ and torch_device != device_name:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0c23332725ab7c8 — Environment-variable access.

repo/src/transformers/testing_utils.py:3449

    force_fullgraph = os.environ.get("TORCH_COMPILE_FORCE_FULLGRAPH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a2f2e1363a49a58 — Environment-variable access.

repo/src/transformers/testing_utils.py:3472

    full_test_name = os.environ.get("PYTEST_CURRENT_TEST", "").split(" ")[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d2ce1504dff2c011 — Filesystem access.

repo/src/transformers/testing_utils.py:3552

    with open(actual_test_file) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6aaf1f750fe2506f — Filesystem access.

repo/src/transformers/testing_utils.py:3558

    with open(caller_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #74af10718b6ce5f3 — Environment-variable access.

repo/src/transformers/testing_utils.py:3646

    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff992837e4d2ebaa — Filesystem access.

repo/src/transformers/testing_utils.py:3648

    with open(p, "a") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #988cf46a5cbd0203 — Environment-variable access.

repo/src/transformers/testing_utils.py:3765

        if not os.environ.get("PYTEST_CURRENT_TEST", ""):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55b13c3fa834fab1 — Environment-variable access.

repo/src/transformers/testing_utils.py:3802

            if os.getenv("CI") == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cd242683afaa5cee — Environment-variable access.

repo/src/transformers/testing_utils.py:3878

    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b645077944c2323c — Filesystem access.

repo/src/transformers/testing_utils.py:4232

    with open(file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e3f9010a6cdd849f — Filesystem access.

repo/src/transformers/testing_utils.py:4237

    with open(file, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e6f6a0f50b9c797 — Filesystem access.

repo/src/transformers/testing_utils.py:4473

            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #38266d7a8624e2d6 — Filesystem access.

repo/src/transformers/testing_utils.py:4482

            with open(new_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e0b52f96d3caec08 — Filesystem access.

repo/src/transformers/tokenization_python.py:1397

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a684b29fda65785 — Filesystem access.

repo/src/transformers/tokenization_python.py:1406

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c5bf18629a125211 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1661

                    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #03114e6634b2317f — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1780

            with open(tokenizer_config_file, encoding="utf-8") as tokenizer_config_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8d644339b6bd00e9 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1799

            with open(chat_template_file, encoding="utf-8") as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eca0d53dfc15e751 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1806

            with open(template_file) as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #918c701afe63ef2f — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1875

                with open(special_tokens_map_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f654bea69a5cc8f3 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1905

                with open(added_tokens_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #724b8b992fae5969 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1918

                with open(tokenizer_file, encoding="utf-8") as tokenizer_file_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d8e774334983143 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:2123

        with open(tokenizer_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #233e56d35a9193b4 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:2176

            with open(added_tokens_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8d95e357c7c5c437 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3314

            with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e4a82078f15e318 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3325

                    with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f1416343e6e9d2b — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3335

                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e18e2833094e0df — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3608

            with open(resolved_vocab_file, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #064f947a93cca6af — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3634

                with open(resolved_vocab_txt, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7804d6272db4e7ac — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3660

            with open(resolved_merges_file, "r", encoding="utf-8") as mf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ccef67e56673f846 — Filesystem access.

repo/src/transformers/tokenization_utils_sentencepiece.py:260

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #792f4b727ca5ffe7 — Filesystem access.

repo/src/transformers/tokenization_utils_tokenizers.py:121

            with open(fast_tokenizer_file, encoding="utf-8") as tokenizer_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4175c2b351ba3425 — Filesystem access.

repo/src/transformers/tokenization_utils_tokenizers.py:1335

                with open(_config_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc54334fb46a5b90 — Environment-variable access.

repo/src/transformers/trainer.py:2465

                model, device_ids=[int(os.getenv("SMDATAPARALLEL_LOCAL_RANK"))]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #293e1f851f07fec8 — Filesystem access.

repo/src/transformers/trainer.py:4021

        with open(model_card_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ee7e9d8ec542613f — Filesystem access.

repo/src/transformers/trainer.py:4126

                with open(index_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6cab5d1ae8de9738 — Filesystem access.

repo/src/transformers/trainer_callback.py:146

        with open(json_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #157024ae9a8ca4f6 — Filesystem access.

repo/src/transformers/trainer_callback.py:152

        with open(json_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #97fdba4adecf0753 — Filesystem access.

repo/src/transformers/trainer_jit_checkpoint.py:60

            with open(sentinel_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4fb18588e0f9ab55 — Filesystem access.

repo/src/transformers/trainer_pt_utils.py:943

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b11f0f9c9b195ef9 — Filesystem access.

repo/src/transformers/trainer_pt_utils.py:949

            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c2ce28dab1f1950 — Filesystem access.

repo/src/transformers/trainer_pt_utils.py:955

        with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #412bc1a5d9141004 — Environment-variable access.

repo/src/transformers/trainer_utils.py:166

        os.environ["CUDA_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88b310cfda129bc2 — Environment-variable access.

repo/src/transformers/trainer_utils.py:167

        os.environ["CUBLAS_WORKSPACE_CONFIG"] = ":16:8"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d064c803d6007f98 — Environment-variable access.

repo/src/transformers/trainer_utils.py:169

        os.environ["ASCEND_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4fc9e05432bea14 — Environment-variable access.

repo/src/transformers/trainer_utils.py:170

        os.environ["HCCL_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29994a4447d486a2 — Environment-variable access.

repo/src/transformers/trainer_utils.py:172

        os.environ["FLASH_ATTENTION_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #793170666748f2ea — Filesystem access.

repo/src/transformers/trainer_utils.py:1094

    with open(load_index, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2cd49460d6976e22 — Environment-variable access.

repo/src/transformers/training_args.py:86

    if os.environ.get("TORCHELASTIC_RUN_ID"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1bdcff5565e8e9ae — Environment-variable access.

repo/src/transformers/training_args.py:1556

        self.mixed_precision = os.environ.get("ACCELERATE_MIXED_PRECISION", "no")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eacde7f930441c4d — Environment-variable access.

repo/src/transformers/training_args.py:1576

                os.environ["ACCELERATE_DYNAMO_BACKEND"] = self.torch_compile_backend

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c40d139a67f6291c — Environment-variable access.

repo/src/transformers/training_args.py:1578

                    os.environ["ACCELERATE_DYNAMO_MODE"] = self.torch_compile_mode

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2103a787bd133d00 — Environment-variable access.

repo/src/transformers/training_args.py:1650

        elif strtobool(os.environ.get("ACCELERATE_USE_DEEPSPEED", "false")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f95176293b1f2492 — Environment-variable access.

repo/src/transformers/training_args.py:1810

        if self.use_cpu or strtobool(os.environ.get("ACCELERATE_USE_CPU", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f91737e527f77e88 — Environment-variable access.

repo/src/transformers/training_args.py:1834

                os.environ["ACCELERATE_USE_DEEPSPEED"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d9cbb58367943ba — Environment-variable access.

repo/src/transformers/training_args.py:1837

                del os.environ["ACCELERATE_USE_DEEPSPEED"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8a21c55fbd680625 — Environment-variable access.

repo/src/transformers/training_args.py:1880

                    "cuda:0" if torch.cuda.is_available() else os.environ.get("ACCELERATE_TORCH_DEVICE", "cpu")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8319cde2c8a85043 — Filesystem access.

repo/src/transformers/training_args.py:2699

            with open(self.fsdp_config, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #560e428c8e2d19a5 — Environment-variable access.

repo/src/transformers/training_args.py:2766

        os.environ["FSDP_CPU_RAM_EFFICIENT_LOADING"] = cpu_ram_efficient_loading

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #db3b607182aef713 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/transformers/utils/attention_visualizer.py:183

            img = Image.open(io.BytesIO(httpx.get(img, follow_redirects=True).content))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #9337d67ddba4d877 — Filesystem access.

repo/src/transformers/utils/generic.py:379

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c4e53c3665d41f4 — Filesystem access.

repo/src/transformers/utils/generic.py:862

        with open(pretrained_model_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #63b606c6ef024440 — Filesystem access.

repo/src/transformers/utils/generic.py:868

        with open(os.path.join(pretrained_model_path, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7fe55ee1e7cdd82 — Environment-variable access.

repo/src/transformers/utils/hub.py:107

HF_MODULES_CACHE = os.getenv("HF_MODULES_CACHE", os.path.join(constants.HF_HOME, "modules"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #31aedbed6a657805 — Environment-variable access.

repo/src/transformers/utils/hub.py:178

        instance_data = httpx.get(os.environ["ECS_CONTAINER_METADATA_URI"]).json()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bafb3fbfacd00eef — Environment-variable access.

repo/src/transformers/utils/hub.py:185

    sagemaker_params = json.loads(os.getenv("SM_FRAMEWORK_PARAMS", "{}"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c2e885b7615f282 — Environment-variable access.

repo/src/transformers/utils/hub.py:187

    training_job_arn = os.getenv("TRAINING_JOB_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9cfee82417c6ecfc — Environment-variable access.

repo/src/transformers/utils/hub.py:191

        "sm_framework": os.getenv("SM_FRAMEWORK_MODULE", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #554107dc22fb3913 — Environment-variable access.

repo/src/transformers/utils/hub.py:192

        "sm_region": os.getenv("AWS_REGION", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #783ef3512c70a800 — Environment-variable access.

repo/src/transformers/utils/hub.py:193

        "sm_number_gpu": os.getenv("SM_NUM_GPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a704f43be7b6257a — Environment-variable access.

repo/src/transformers/utils/hub.py:194

        "sm_number_cpu": os.getenv("SM_NUM_CPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43314b7a74c4908d — Environment-variable access.

repo/src/transformers/utils/hub.py:215

    if os.environ.get("TRANSFORMERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f764ece979936c6f — Filesystem access.

repo/src/transformers/utils/hub.py:879

    with open(index_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #604d21a65dc26cba — Environment-variable access.

repo/src/transformers/utils/import_utils.py:118

    return os.getenv(env_variable, "false").lower() in ("true", "1", "y", "yes", "on")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43c94137a7752a41 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:123

    return os.getenv(env_variable, "true").lower() in ("false", "0", "n", "no", "off")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be8c8e3d95651661 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:130

USE_TORCH_XLA = os.environ.get("USE_TORCH_XLA", "1").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b6db8796126c595 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:356

    pytorch_cndev_based_mlu_check_previous_value = os.environ.get("PYTORCH_CNDEV_BASED_MLU_CHECK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b5368e53d83f249 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:358

        os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = str(1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d8ed7cdc9f3a7f07 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:362

            os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = pytorch_cndev_based_mlu_check_previous_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd7ced0fee111c94 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:364

            os.environ.pop("PYTORCH_CNDEV_BASED_MLU_CHECK", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cabbededd00d1657 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:434

    if os.environ.get("PT_HPU_LAZY_MODE", "1") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f74e0c381088382 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1640

    if os.getenv("TRANSFORMERS_DISABLE_TORCH_CHECK", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #591817afd1ef3090 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1689

        if "DATABRICKS_RUNTIME_VERSION" in os.environ and os.environ["DATABRICKS_RUNTIME_VERSION"] < "11.0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c718b46527c33b7 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1701

    sagemaker_params = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b3cf8fb81022a8b0 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1715

    smp_options = os.getenv("SM_HP_MP_PARAMETERS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b1e92e5a530a4e1 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1725

    mpi_options = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e4efc021214d2ba2 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1738

    return "SAGEMAKER_JOB_NAME" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #393620880c68dd53 — Filesystem access.

repo/src/transformers/utils/import_utils.py:2850

        with open(os.path.join(module_path, module_name), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea17c9417452f50b — Environment-variable access.

repo/src/transformers/utils/logging.py:64

    env_level_str = os.getenv("TRANSFORMERS_VERBOSITY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c7895237d8518528 — Filesystem access.

repo/src/transformers/utils/logging.py:94

            sys.stderr = open(os.devnull, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f2214735a437ca8 — Environment-variable access.

repo/src/transformers/utils/logging.py:108

        if os.getenv("TRANSFORMERS_VERBOSITY", None) == "detail":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d6fd4c2811eda93 — Environment-variable access.

repo/src/transformers/utils/logging.py:114

        ci = os.getenv("CI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #15ca623b0d0bdec5 — Environment-variable access.

repo/src/transformers/utils/logging.py:322

    no_advisory_warnings = os.getenv("TRANSFORMERS_NO_ADVISORY_WARNINGS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b9e3d63819ed5656 — Filesystem access.

repo/src/transformers/utils/network_logging.py:172

        Path(dump_path).write_text(json.dumps(records), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44c8c1feb8579e3b — Filesystem access.

repo/src/transformers/utils/network_logging.py:182

                records = json.loads(Path(record_file).read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #885ade77470154c7 — Filesystem access.

repo/src/transformers/utils/network_logging.py:327

        report_path.write_text(json.dumps(self.build_report(), indent=2, sort_keys=True), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ee99348a0cb6458 — Environment-variable access.

repo/src/transformers/utils/network_logging.py:338

    enabled_raw = os.environ.get("NETWORK_DEBUG_REPORT", "").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b78bc9e6bd9e206 — Environment-variable access.

repo/src/transformers/utils/network_logging.py:344

    output_path = os.environ.get("NETWORK_DEBUG_REPORT_PATH", "").strip() or _DEFAULT_REPORT_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e3b1e2976da138ee — Environment-variable access.

repo/src/transformers/utils/notebook.py:128

        if "VSCODE_PID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9bf994472e8d2e7c — Filesystem access.

repo/src/transformers/utils/pytest_helpers.py:39

    data = json.loads(p.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44e9578dc72a1dba — Filesystem access.

repo/src/transformers/utils/quantization_config.py:144

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b8f45b7739074329 — Filesystem access.

repo/src/transformers/video_processing_utils.py:769

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47e2ef0d20ff6314 — Filesystem access.

repo/src/transformers/video_processing_utils.py:789

        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ef06d9df6ea247a — Filesystem access.

repo/utils/add_dates.py:125

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9616e53381aaacf9 — Filesystem access.

repo/utils/add_dates.py:186

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3d93e6c68a7d1b8e — Filesystem access.

repo/utils/add_dates.py:215

        with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #72b0987b1b214381 — Filesystem access.

repo/utils/add_dates.py:234

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #17cce5fabd903999 — Filesystem access.

repo/utils/add_dates.py:324

            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2cb8f6f97fc433de — Filesystem access.

repo/utils/add_dates.py:355

                with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f9a511ca6a7abc76 — Filesystem access.

repo/utils/add_dates.py:365

            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #27ee0809512c5005 — Filesystem access.

repo/utils/add_pipeline_model_mapping_to_test.py:260

    with open(moddule_file, "w", encoding="UTF-8", newline="\n") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61415d7f831576c9 — Filesystem access.

repo/utils/aggregate_failure_reports.py:46

                with open(failure_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e501a01f6b300a7 — Filesystem access.

repo/utils/aggregate_failure_reports.py:53

    with open(output_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d3b93755440f148f — Filesystem access.

repo/utils/check_auto.py:81

        with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6a0f26bdf87fd14 — Filesystem access.

repo/utils/check_auto.py:135

            with open(f"src/transformers/models/{module}/{processor_filename}_{module}.py", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa4436402617ab19 — Filesystem access.

repo/utils/check_auto.py:282

        old_content = open(AUTO_FILENAME, "r").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a2b28b6596a5ae1 — Filesystem access.

repo/utils/check_auto.py:300

        with open(temp_filename, "w") as temp_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab4e96d9e8a10b2d — Filesystem access.

repo/utils/check_auto.py:304

        new_content = open(temp_filename, "r").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6241169156ebf5a4 — Filesystem access.

repo/utils/check_auto.py:323

            with open(AUTO_FILENAME, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #17f726599f4db025 — Filesystem access.

repo/utils/check_bad_commit.py:77

    with open("target_script.py", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33b74a51dd587231 — Environment-variable access.

repo/utils/check_bad_commit.py:138

    is_pr_ci = os.environ.get("GITHUB_EVENT_NAME") in ["issue_comment", "pull_request"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ff95f82ec0e9ee0 — Filesystem access.

repo/utils/check_bad_commit.py:231

    with open("run_git_bisect.sh", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6716b97a20b29727 — Environment-variable access.

repo/utils/check_bad_commit.py:283

        pr_number = os.environ.get("pr_number")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #64fdcc05ecb09109 — Environment-variable access.

repo/utils/check_bad_commit.py:343

        args.github_token = os.environ.get("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12579af5f60319f0 — Environment-variable access.

repo/utils/check_bad_commit.py:345

    run_idx = os.environ.get("run_idx")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4cd69033c567f0fd — Environment-variable access.

repo/utils/check_bad_commit.py:346

    n_runners = os.environ.get("n_runners")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #061cae0bbe65c816 — Filesystem access.

repo/utils/check_bad_commit.py:361

        with open(args.output_file, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a06fc6cb72f10f59 — Filesystem access.

repo/utils/check_bad_commit.py:364

        with open(args.file, "r", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f624dd4a25a9ed46 — Filesystem access.

repo/utils/check_bad_commit.py:428

        with open(args.output_file, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a15a1e111e54b81f — Filesystem access.

repo/utils/check_config_attributes.py:384

            with open(path, encoding="utf8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a34dd96efcd12cf — Filesystem access.

repo/utils/check_copies.py:443

    with open(os.path.join(base_path, f"{module}.py"), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3deb561af26ab608 — Filesystem access.

repo/utils/check_copies.py:665

    with open(filename, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca45abfcac771215 — Filesystem access.

repo/utils/check_copies.py:837

        with open(filename, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3cccf634e7d33766 — Filesystem access.

repo/utils/check_copies.py:887

    with open(os.path.join(REPO_PATH, filename), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d49bf3310ce3456 — Filesystem access.

repo/utils/check_doc_toc.py:131

    with open(TOCTREE_PATH, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01205daaa5b2083c — Filesystem access.

repo/utils/check_doc_toc.py:166

            with open(TOCTREE_PATH, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d59d05e3579b27c4 — Filesystem access.

repo/utils/check_docstrings.py:415

        with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f2cc386a7784807 — Filesystem access.

repo/utils/check_docstrings.py:818

    with open(obj_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be2c6272b7bb31c7 — Filesystem access.

repo/utils/check_docstrings.py:830

    with open(obj_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6eb4a4c3a3628120 — Filesystem access.

repo/utils/check_docstrings.py:934

            with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b3eaa5c64bb839a — Filesystem access.

repo/utils/check_docstrings.py:1040

        with open(modular_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #abde0b2591dcfc87 — Filesystem access.

repo/utils/check_docstrings.py:1043

        with open(generated_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d9c26f95c314cd8f — Filesystem access.

repo/utils/check_docstrings.py:1179

        with open(modular_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #690aa92a47332fcf — Filesystem access.

repo/utils/check_docstrings.py:1687

    with open(candidate_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4196a20eeb7fbbf7 — Filesystem access.

repo/utils/check_docstrings.py:1872

        with open(candidate_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef9af4a9f8571d13 — Filesystem access.

repo/utils/check_docstrings.py:1958

        with open(candidate_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8847c1fa9fec3e1b — Filesystem access.

repo/utils/check_docstrings.py:1995

        with open(candidate_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32cf77c3e73d5952 — Filesystem access.

repo/utils/check_doctest_list.py:70

    with open(doctest_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef888600d7af637e — Filesystem access.

repo/utils/check_doctest_list.py:89

        with open(doctest_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #42e83e222cc4a226 — Filesystem access.

repo/utils/check_dummies.py:111

    with open(os.path.join(PATH_TO_TRANSFORMERS, "__init__.py"), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d91b3efdb4a10aa0 — Filesystem access.

repo/utils/check_dummies.py:217

            with open(file_path, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac1dc8e14e293653 — Filesystem access.

repo/utils/check_dummies.py:230

                with open(dummy_file_paths[backend], "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dfee55d1ea7938db — Filesystem access.

repo/utils/check_inits.py:111

    with open(init_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2e08c89c3e958b50 — Filesystem access.

repo/utils/check_inits.py:338

    with open(os.path.join(PATH_TO_TRANSFORMERS, "__init__.py"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #65797b2d3fcfc3e7 — Filesystem access.

repo/utils/check_modular_conversion.py:45

    with open(file_path, "r", encoding="utf-8") as modeling_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e98e5bf6978c2799 — Filesystem access.

repo/utils/check_modular_conversion.py:60

        with open(file_path, "w", encoding="utf-8", newline="\n") as modeling_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3086d4826cca8eaa — Filesystem access.

repo/utils/check_modular_conversion.py:88

        with open(temp_file_name, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ece29c2bea3d0d7 — Filesystem access.

repo/utils/check_modular_conversion.py:92

        with open(temp_file_name, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ae0dcf47eefabab — Filesystem access.

repo/utils/check_pipeline_typing.py:39

    with open(pipeline_file_path, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #118f198854058b94 — Filesystem access.

repo/utils/check_pipeline_typing.py:78

        with open(pipeline_file_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7abf0340a269fa35 — Environment-variable access.

repo/utils/check_repo.py:609

        if os.getenv("TRANSFORMERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a6501b7e3e09f08e — Filesystem access.

repo/utils/check_repo.py:639

            if (Path(model_dir) / "__init__.py").read_text().strip() == "":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d67d85dd3d9f089 — Filesystem access.

repo/utils/check_repo.py:798

    with open(os.path.join(PATH_TO_TESTS, test_file), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #485e4603e1e2181f — Filesystem access.

repo/utils/check_repo.py:1110

    with open(filename, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bcd4a6d83e3a88ef — Filesystem access.

repo/utils/check_repo.py:1154

        with open(doc_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01f22eb03d32d7a3 — Filesystem access.

repo/utils/check_repo.py:1449

            with open(modeling_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b3afd900de6867ca — Filesystem access.

repo/utils/check_self_hosted_runner.py:29

    with open("offline_runners.txt", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #83f1e04299124402 — Filesystem access.

repo/utils/checkers.py:123

            tree = ast.parse(py_file.read_text(encoding="utf-8"), filename=str(py_file))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #925d5a6064cecd4a — Filesystem access.

repo/utils/checkers.py:249

            return json.loads(self._path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #438975287b3e6a01 — Filesystem access.

repo/utils/checkers.py:255

            self._path.write_text(json.dumps(self._data, sort_keys=True, indent=2) + "\n", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bb7a2e2cc5824df4 — Filesystem access.

repo/utils/checkers.py:269

                h.update(p.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff72ca65dfd7e4c7 — Filesystem access.

repo/utils/checkers.py:292

    return hashlib.md5(path.read_bytes()).hexdigest()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb8e6611d6e8216c — Environment-variable access.

repo/utils/checkers.py:394

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b99ba0de2dcd7f8b — Environment-variable access.

repo/utils/checkers.py:568

    is_ci = os.environ.get("GITHUB_ACTIONS") == "true" or os.environ.get("CIRCLECI") == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4602c72f44e20375 — Environment-variable access.

repo/utils/checkers.py:584

    job = os.environ.get("TRANSFORMERS_TEST_OTEL_JOB", "local_checks")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf2926c9d84239c4 — Environment-variable access.

repo/utils/collated_reports.py:116

    if os.getenv("GITHUB_EVENT_NAME") != "schedule":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2809e3146dbe730 — Environment-variable access.

repo/utils/collated_reports.py:117

        report_repo_subfolder = f"{os.getenv('GITHUB_RUN_NUMBER')}-{os.getenv('GITHUB_RUN_ID')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a4e60c862ab010ea — Environment-variable access.

repo/utils/collated_reports.py:121

        token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_run_id=os.getenv("GITHUB_RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #38ae4812f26bf4ab — Environment-variable access.

repo/utils/collated_reports.py:134

        token=os.getenv("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3085a2d2050b92ec — Filesystem access.

repo/utils/collated_reports.py:180

        with open(model_dir / "summary_short.txt", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b3b86ab011952cb4 — Filesystem access.

repo/utils/collated_reports.py:202

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88b073524637f5a0 — Filesystem access.

repo/utils/compare_test_runs.py:36

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6b95b578af18fe53 — Filesystem access.

repo/utils/create_dependency_mapping.py:76

    with open(file_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ccccc0a93029858a — Environment-variable access.

repo/utils/create_dummy_models.py:62

os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0a8b7c86bdb79ebb — Filesystem access.

repo/utils/create_dummy_models.py:1657

    with open(os.path.join(report_path, "tiny_model_summary.json")) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7238d8bf6d4e14c — Filesystem access.

repo/utils/create_dummy_models.py:1659

    with open("tests/utils/tiny_model_summary.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f830ad2fc9128d9 — Filesystem access.

repo/utils/create_dummy_models.py:1679

    with open(os.path.join(report_path, "updated_tiny_model_summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #784e529e6c5a73f9 — Filesystem access.

repo/utils/create_dummy_models.py:1767

        with open(os.path.join(report_path, "failed_uploads.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1dc73caafe68b3b — Filesystem access.

repo/utils/create_dummy_models.py:1776

    with open(os.path.join(report_path, "tiny_model_summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cd1fa5140b3695a5 — Filesystem access.

repo/utils/create_dummy_models.py:1779

    with open(os.path.join(report_path, "tiny_model_creation_report.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b7318023fccbef7 — Filesystem access.

repo/utils/create_dummy_models.py:1785

    with open(os.path.join(report_path, "failed_report.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #659310cb43f5d990 — Filesystem access.

repo/utils/create_dummy_models.py:1791

    with open(os.path.join(report_path, "simple_report.txt"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #225f37530db59cf9 — Filesystem access.

repo/utils/create_dummy_models.py:1795

    with open(os.path.join(report_path, "simple_failed_report.txt"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c3706e17763d3785 — Filesystem access.

repo/utils/custom_init_isort.py:251

    with open(file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de95a0a79a6f4fa7 — Filesystem access.

repo/utils/custom_init_isort.py:312

            with open(file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #f8efc993fc56fb18 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/utils/deprecate_models.py:31

    release_data = httpx.get(url).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #92c8eeaac06568d3 — Filesystem access.

repo/utils/deprecate_models.py:61

    with open(model_doc_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e80c619afa7b003c — Filesystem access.

repo/utils/deprecate_models.py:75

    with open(model_doc_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a85d1d6967c85ae4 — Filesystem access.

repo/utils/deprecate_models.py:112

    with open(filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #92978a9270630d95 — Filesystem access.

repo/utils/deprecate_models.py:122

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c4d86e882abec24c — Filesystem access.

repo/utils/deprecate_models.py:132

        with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d136e11a8c93927c — Filesystem access.

repo/utils/deprecate_models.py:141

        with open(file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #463fc7227a805247 — Filesystem access.

repo/utils/deprecate_models.py:180

    with open(filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #730b15f522d4cd34 — Filesystem access.

repo/utils/deprecate_models.py:188

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b9454c07266ebb39 — Filesystem access.

repo/utils/deprecate_models.py:205

    with open(filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5335b9f00b998e76 — Filesystem access.

repo/utils/deprecate_models.py:214

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de4ecbd3bff048b8 — Filesystem access.

repo/utils/deprecate_models.py:226

    with open(filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #401a74fb46d3a63e — Filesystem access.

repo/utils/deprecate_models.py:264

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #91492c9230f26981 — Filesystem access.

repo/utils/deprecate_models.py:274

    with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9ad44d6c1c06e85 — Filesystem access.

repo/utils/deprecate_models.py:298

    with open(filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d8a11d721d2350da — Filesystem access.

repo/utils/download_glue_data.py:78

    with open(os.path.join(mrpc_dir, "dev_ids.tsv"), encoding="utf8") as ids_fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #433b4ed6dfb3dbd6 — Filesystem access.

repo/utils/download_glue_data.py:83

        open(mrpc_train_file, encoding="utf8") as data_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4679e9deca2c85a9 — Filesystem access.

repo/utils/download_glue_data.py:84

        open(os.path.join(mrpc_dir, "train.tsv"), "w", encoding="utf8") as train_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bcb4fddfc2e716a1 — Filesystem access.

repo/utils/download_glue_data.py:85

        open(os.path.join(mrpc_dir, "dev.tsv"), "w", encoding="utf8") as dev_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a93375f7fa126463 — Filesystem access.

repo/utils/download_glue_data.py:98

        open(mrpc_test_file, encoding="utf8") as data_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40712b478cbc7e51 — Filesystem access.

repo/utils/download_glue_data.py:99

        open(os.path.join(mrpc_dir, "test.tsv"), "w", encoding="utf8") as test_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e4646045c518aa44 — Environment-variable access.

repo/utils/extract_pr_number_from_circleci.py:22

    pr = os.environ.get("CIRCLE_PULL_REQUEST", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56186e8799bac9d6 — Environment-variable access.

repo/utils/extract_pr_number_from_circleci.py:26

        pr = os.environ.get("CIRCLE_BRANCH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0136e0d8654b9c6a — Filesystem access.

repo/utils/extract_warnings.py:47

                with open(file_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b5672152d2a210d — Filesystem access.

repo/utils/extract_warnings.py:118

        with open(os.path.join(args.output_dir, "artifacts.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f93b19941aeb85cc — Filesystem access.

repo/utils/extract_warnings.py:133

    with open(os.path.join(args.output_dir, "selected_warnings.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c7bb390dbca0094 — Environment-variable access.

repo/utils/fetch_hub_objects_for_ci.py:27

_staging_mode = os.environ.pop("HUGGINGFACE_CO_STAGING", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b32a932fef734ee8 — Environment-variable access.

repo/utils/fetch_hub_objects_for_ci.py:40

    os.environ["HUGGINGFACE_CO_STAGING"] = _staging_mode

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9425141e1c3b85b2 — Filesystem access.

repo/utils/fetch_hub_objects_for_ci.py:142

    with open(filepath, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c3fdbffdd4e2ed4e — Filesystem access.

repo/utils/fetch_hub_objects_for_ci.py:197

                with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f9a7de9db850444 — Filesystem access.

repo/utils/format_extras_slack_message.py:42

    with open(failures_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #28b40af1e033fe77 — Environment-variable access.

repo/utils/format_extras_slack_message.py:73

        output_file = os.environ.get("GITHUB_ENV")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #935740b61cbc7ad6 — Filesystem access.

repo/utils/format_extras_slack_message.py:79

    with open(output_file, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f9cd2692576c6b3f — Filesystem access.

repo/utils/get_ci_error_statistics.py:113

    with open(file_path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f8f8e4ff072d414b — Filesystem access.

repo/utils/get_ci_error_statistics.py:275

    with open(os.path.join(args.output_dir, "job_links.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7604f51ae794a800 — Filesystem access.

repo/utils/get_ci_error_statistics.py:279

    with open(os.path.join(args.output_dir, "artifacts.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e0fbe38b200008a — Filesystem access.

repo/utils/get_ci_error_statistics.py:298

    with open(os.path.join(args.output_dir, "errors.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #331971f97c74c953 — Filesystem access.

repo/utils/get_ci_error_statistics.py:307

    with open(os.path.join(args.output_dir, "reduced_by_error.txt"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4def943b341ecd1d — Filesystem access.

repo/utils/get_ci_error_statistics.py:309

    with open(os.path.join(args.output_dir, "reduced_by_model.txt"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #34722dced9c02a1e — Filesystem access.

repo/utils/get_pr_run_slow_jobs.py:15

    with open("pr_files.txt") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #202c4e15ef303e20 — Filesystem access.

repo/utils/get_pr_run_slow_jobs.py:98

        with open(filename) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #66e45b4f34e94300 — Environment-variable access.

repo/utils/get_previous_daily_ci.py:23

        workflow_run_id = os.environ["GITHUB_RUN_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #54e0e2f923b2901a — Filesystem access.

repo/utils/get_previous_daily_ci.py:155

                    with open(file_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08c4f8b7fdce4e21 — Environment-variable access.

repo/utils/get_test_reports.py:69

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e1c1161022cb8ed3 — Environment-variable access.

repo/utils/get_test_reports.py:219

        os.environ["RUN_SLOW"] = "yes"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a2669254a989b3c — Environment-variable access.

repo/utils/get_test_reports.py:240

        os.environ["PATCH_TESTING_METHODS_TO_COLLECT_OUTPUTS"] = "yes"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e731bed9499a846 — Environment-variable access.

repo/utils/get_test_reports.py:242

        os.environ["_PATCHED_TESTING_METHODS_OUTPUT_DIR"] = str(reports_dir)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #80b83f071b009ee4 — Filesystem access.

repo/utils/models_to_deprecate.py:192

        with open("models_info.json", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05faea79e450bbb6 — Filesystem access.

repo/utils/models_to_deprecate.py:277

        with open("models_info.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5be9bec68e7bd15 — Filesystem access.

repo/utils/modular_model_converter.py:67

    with open(file_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dbebd569ae734319 — Filesystem access.

repo/utils/modular_model_converter.py:1996

        with open(modular_file, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab26497276740eeb — Filesystem access.

repo/utils/modular_model_converter.py:2046

        with open(new_file_name, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ab3d9ad4088f35f — Filesystem access.

repo/utils/modular_model_converter.py:2053

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e13c4b080af95a56 — Filesystem access.

repo/utils/modular_model_converter.py:2073

            with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f73890db8d3ae83f — Environment-variable access.

repo/utils/modular_model_detector.py:135

os.environ["HF_HUB_DISABLE_PROGRESS_BARS"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4582f119821691d7 — Environment-variable access.

repo/utils/modular_model_detector.py:136

os.environ["TRANSFORMERS_VERBOSITY"] = "error"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87f9f3b32ef899be — Filesystem access.

repo/utils/modular_model_detector.py:329

        source = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ecae1731a3110009 — Filesystem access.

repo/utils/modular_model_detector.py:447

        with open(INDEX_MAP_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #673f7ad29992ec03 — Filesystem access.

repo/utils/modular_model_detector.py:449

        with open(TOKENS_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c9144a1e2120ed8a — Filesystem access.

repo/utils/modular_model_detector.py:540

        with open(self._resolve_index_path(INDEX_MAP_PATH), "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c34698629768d99b — Filesystem access.

repo/utils/modular_model_detector.py:543

        with open(self._resolve_index_path(TOKENS_PATH), "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #910f6edde4513d94 — Filesystem access.

repo/utils/modular_model_detector.py:605

            text = md_path.read_text(encoding="utf-8", errors="ignore")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #570a57363aa7d0de — Filesystem access.

repo/utils/modular_model_detector.py:663

        source = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1e487891a031c949 — Environment-variable access.

repo/utils/notification_service.py:236

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f4ebad48b9855b2 — Environment-variable access.

repo/utils/notification_service.py:256

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e7d977ea11be0147 — Environment-variable access.

repo/utils/notification_service.py:265

        job_link = f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a58f6b402973ba7e — Filesystem access.

repo/utils/notification_service.py:487

        with open(file_path, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #abea805f5d528cb7 — Filesystem access.

repo/utils/notification_service.py:497

        with open(file_path, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f39209c3a7647d20 — Filesystem access.

repo/utils/notification_service.py:518

                    with open(file_path, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #030cc283144bef21 — Environment-variable access.

repo/utils/notification_service.py:593

            include_all = os.environ.get("GITHUB_EVENT_NAME") in ["issue_comment", "pull_request"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #249348301c404e62 — Filesystem access.

repo/utils/notification_service.py:603

                with open(file_path, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55bd58e3f76962fd — Environment-variable access.

repo/utils/notification_service.py:613

                    token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4fdaaa95cc13509a — Environment-variable access.

repo/utils/notification_service.py:683

            result = os.environ.get("OFFLINE_RUNNERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5b48d841f2b9aaa — Environment-variable access.

repo/utils/notification_service.py:716

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #46081629c8570eb7 — Filesystem access.

repo/utils/notification_service.py:943

                with open(os.path.join(artifact_path, file)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9a9613e4d047f1b4 — Environment-variable access.

repo/utils/notification_service.py:1035

    client = WebClient(token=os.environ["CI_SLACK_BOT_TOKEN"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ef22a7f33c77956 — Environment-variable access.

repo/utils/notification_service.py:1037

    SLACK_REPORT_CHANNEL_ID = os.environ["SLACK_REPORT_CHANNEL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd7533625233e9e9 — Environment-variable access.

repo/utils/notification_service.py:1041

    setup_status = os.environ.get("SETUP_STATUS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db0d79c7050a98ef — Environment-variable access.

repo/utils/notification_service.py:1056

    ci_event = os.environ["CI_EVENT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa16aed1d8c5e55e — Environment-variable access.

repo/utils/notification_service.py:1062

    ci_title = os.environ.get("CI_TITLE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #82b856bfd69f35d3 — Environment-variable access.

repo/utils/notification_service.py:1063

    ci_sha = os.environ.get("CI_SHA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #183999499601f930 — Environment-variable access.

repo/utils/notification_service.py:1079

        github_token = os.environ.get("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d169d97e7bc28a9b — Environment-variable access.

repo/utils/notification_service.py:1151

        workflow_run_id=os.environ["GITHUB_RUN_ID"], token=os.environ["ACCESS_REPO_INFO_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a1dd2043a75ae1d4 — Environment-variable access.

repo/utils/notification_service.py:1176

    job_name = os.getenv("CI_TEST_JOB")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f33a1f51a630a90b — Environment-variable access.

repo/utils/notification_service.py:1313

    report_repo_id = os.getenv("REPORT_REPO_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62a98a4e55c522fc — Environment-variable access.

repo/utils/notification_service.py:1317

    if os.getenv("GITHUB_EVENT_NAME") != "schedule":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c25c94545744e5b5 — Environment-variable access.

repo/utils/notification_service.py:1318

        report_repo_subfolder = f"{os.getenv('GITHUB_RUN_NUMBER')}-{os.getenv('GITHUB_RUN_ID')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #598ce90bb94e3c98 — Environment-variable access.

repo/utils/notification_service.py:1322

        token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_run_id=os.getenv("GITHUB_RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c90980b7366a8a53 — Filesystem access.

repo/utils/notification_service.py:1403

            with open(os.path.join(directory, "selected_warnings.json")) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #986c4369a7baa49f — Environment-variable access.

repo/utils/notification_service.py:1417

    is_nvidia_daily_ci_workflow = os.environ.get("GITHUB_WORKFLOW_REF").startswith(nvidia_daily_ci_workflow)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e5b3611d0d4541e — Environment-variable access.

repo/utils/notification_service.py:1418

    is_amd_daily_ci_workflow = os.environ.get("GITHUB_WORKFLOW_REF").startswith(amd_daily_ci_workflows)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c1f7a41dfaa74c4 — Environment-variable access.

repo/utils/notification_service.py:1420

    is_scheduled_ci_run = os.environ.get("GITHUB_EVENT_NAME") == "schedule"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e72e662d8729b96 — Environment-variable access.

repo/utils/notification_service.py:1423

    if os.environ.get("GITHUB_EVENT_NAME") == "workflow_run":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1e2c96657e3c942a — Environment-variable access.

repo/utils/notification_service.py:1425

        event_payload_path = os.environ.get("GITHUB_EVENT_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #24f3f4f643297d1c — Filesystem access.

repo/utils/notification_service.py:1427

        with open(event_payload_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0875c8d4c224e46a — Filesystem access.

repo/utils/notification_service.py:1442

        with open(f"ci_results_{job_name}/{test_to_result_name[test_name]}_results.json", "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f6649de74a260f88 — Environment-variable access.

repo/utils/notification_service.py:1450

            token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ffabde4a4caf6ad3 — Filesystem access.

repo/utils/notification_service.py:1454

        with open(
            f"ci_results_{job_name}/{test_to_result_name[test_name]}_results_extra.json", "w", encoding="UTF-8"
        ) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #507d76ecfd4880a4 — Environment-variable access.

repo/utils/notification_service.py:1464

            token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c91ba8cb12dbcd1f — Filesystem access.

repo/utils/notification_service.py:1496

    with open(f"ci_results_{job_name}/job_links.json", "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0c7d6a35e6e686a0 — Environment-variable access.

repo/utils/notification_service.py:1504

        token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c9e70a0e27e610a — Environment-variable access.

repo/utils/notification_service.py:1512

            token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_id=workflow_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #418717c984fd25cb — Environment-variable access.

repo/utils/notification_service.py:1520

                token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_id=other_workflow_id, commit_sha=ci_sha

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c9cca8304fa6a572 — Environment-variable access.

repo/utils/notification_service.py:1524

        prev_workflow_run_id = os.environ["PREV_WORKFLOW_RUN_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #14c9adca405b3a5c — Environment-variable access.

repo/utils/notification_service.py:1525

        other_workflow_run_id = os.environ["OTHER_WORKFLOW_RUN_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb167815bbddc68e — Environment-variable access.

repo/utils/notification_service.py:1542

                token=os.environ["ACCESS_REPO_INFO_TOKEN"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49bb6e81511b7df4 — Environment-variable access.

repo/utils/notification_service.py:1558

                token=os.environ["ACCESS_REPO_INFO_TOKEN"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6769663d15ba70f9 — Filesystem access.

repo/utils/notification_service.py:1575

            with open(f"ci_results_{job_name}/test_results_diff.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a24588abb231114 — Environment-variable access.

repo/utils/notification_service.py:1584

                token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed8e9f51c01a9f5d — Environment-variable access.

repo/utils/notification_service_doc_tests.py:24

client = WebClient(token=os.environ["CI_SLACK_BOT_TOKEN"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3884f0b176cfc6db — Environment-variable access.

repo/utils/notification_service_doc_tests.py:107

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30aa0543c797ea03 — Environment-variable access.

repo/utils/notification_service_doc_tests.py:126

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ad45f9ddab93eec — Environment-variable access.

repo/utils/notification_service_doc_tests.py:195

                    "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a0e3ec5f6401d533 — Filesystem access.

repo/utils/notification_service_doc_tests.py:283

                with open(os.path.join(name, file), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86099ccb13aa2bf5 — Environment-variable access.

repo/utils/notification_service_doc_tests.py:317

    SLACK_REPORT_CHANNEL_ID = os.environ["SLACK_REPORT_CHANNEL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a6b487917d00e25 — Environment-variable access.

repo/utils/notification_service_doc_tests.py:320

        workflow_run_id=os.environ["GITHUB_RUN_ID"], token=os.environ["ACCESS_REPO_INFO_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aab59662bbdef98d — Filesystem access.

repo/utils/notification_service_doc_tests.py:379

    with open("doc_test_results/doc_test_results.json", "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #afc40ab00238623d — Environment-variable access.

repo/utils/process_bad_commit_report.py:27

    job_name = os.environ.get("JOB_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df2a9fbca113e0cf — Environment-variable access.

repo/utils/process_bad_commit_report.py:32

    if os.getenv("GITHUB_EVENT_NAME") != "schedule":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d1054e9323b18d45 — Environment-variable access.

repo/utils/process_bad_commit_report.py:33

        report_repo_subfolder = f"{os.getenv('GITHUB_RUN_NUMBER')}-{os.getenv('GITHUB_RUN_ID')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2e20ccfd270f8fc3 — Environment-variable access.

repo/utils/process_bad_commit_report.py:37

        token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_run_id=os.getenv("GITHUB_RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8176ae049e57c644 — Environment-variable access.

repo/utils/process_bad_commit_report.py:46

    report_repo_id = os.getenv("REPORT_REPO_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bbc164cc1cd8fedf — Filesystem access.

repo/utils/process_bad_commit_report.py:48

    with open("new_failures_with_bad_commit.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad5f774b8c060e20 — Filesystem access.

repo/utils/process_bad_commit_report.py:51

    with open(f"ci_results_{job_name}/job_links.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b94a8fffeefa5fa — Filesystem access.

repo/utils/process_bad_commit_report.py:64

    with open("new_failures_with_bad_commit.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ce7604cf239de27 — Environment-variable access.

repo/utils/process_bad_commit_report.py:72

        token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #916e8183d6970f09 — Filesystem access.

repo/utils/process_bad_commit_report.py:76

    with open("new_failures_with_bad_commit_url.txt", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7aca65d4edf5edd3 — Filesystem access.

repo/utils/process_bad_commit_report.py:132

    with open("new_failures_with_bad_commit_grouped_by_authors.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8dbcf588495907e — Environment-variable access.

repo/utils/process_bad_commit_report.py:139

        token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a92db7865343a936 — Environment-variable access.

repo/utils/process_circleci_workflow_test_reports.py:30

        headers={"Circle-Token": os.environ.get("CIRCLE_TOKEN", "")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e157838ec9604aa6 — Environment-variable access.

repo/utils/process_circleci_workflow_test_reports.py:41

            r = requests.get(url, headers={"Circle-Token": os.environ.get("CIRCLE_TOKEN", "")})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b2fc03a1cae21d0a — Environment-variable access.

repo/utils/process_circleci_workflow_test_reports.py:52

                    r = requests.get(url, headers={"Circle-Token": os.environ.get("CIRCLE_TOKEN", "")})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b55c7755b128ca87 — Environment-variable access.

repo/utils/process_circleci_workflow_test_reports.py:55

                    r = requests.get(url, headers={"Circle-Token": os.environ.get("CIRCLE_TOKEN", "")})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7ea01d941479453 — Filesystem access.

repo/utils/process_circleci_workflow_test_reports.py:69

            with open(f"outputs/{job['name']}/test_summary.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dc364208698d609d — Filesystem access.

repo/utils/process_circleci_workflow_test_reports.py:112

    with open("outputs/test_summary.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8548020513758d74 — Filesystem access.

repo/utils/process_circleci_workflow_test_reports.py:145

    with open("outputs/failure_summary.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0aaae7fdcd96c5c0 — Filesystem access.

repo/utils/process_test_artifacts.py:32

        with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #53942af6ffba8065 — Filesystem access.

repo/utils/process_test_artifacts.py:48

    with open(input_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cb9f38a21f3c8289 — Filesystem access.

repo/utils/process_test_artifacts.py:67

    with open(output_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #35c394838b2a70ab — Filesystem access.

repo/utils/release.py:89

    with open(fname, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b9b8e406da245fb3 — Filesystem access.

repo/utils/release.py:94

    with open(fname, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4334007872fbeeda — Filesystem access.

repo/utils/release.py:112

                if UV_SCRIPT_MARKER in Path(folder, fname).read_text():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d4ca520daf915d0 — Filesystem access.

repo/utils/release.py:157

    with open(REPLACE_FILES["init"], "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a00ddec2aeed2e16 — Filesystem access.

repo/utils/scan_skipped_tests.py:38

        content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #36d1ebad57d63347 — Filesystem access.

repo/utils/scan_skipped_tests.py:83

        file_content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a67f5450164d94e9 — Filesystem access.

repo/utils/scan_skipped_tests.py:90

    output_path.write_text(json.dumps(obj, indent=2), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df0a0b3d06e73858 — Environment-variable access.

repo/utils/set_cuda_devices_for_ci.py:21

    elif "CUDA_VISIBLE_DEVICES" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40c03e33832bab3f — Environment-variable access.

repo/utils/set_cuda_devices_for_ci.py:22

        cuda_visible_devices = os.environ.get("CUDA_VISIBLE_DEVICES")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b0602252750176a — Filesystem access.

repo/utils/sort_auto_mappings.py:67

    with open(fname, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30b4026c55631d3f — Filesystem access.

repo/utils/sort_auto_mappings.py:101

        with open(fname, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #60642209d97cf9bc — Filesystem access.

repo/utils/tests_fetcher.py:208

        with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1be3783395084af6 — Filesystem access.

repo/utils/tests_fetcher.py:211

    with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #719d943cd6e0b7bf — Filesystem access.

repo/utils/tests_fetcher.py:234

        with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a004e986a9ca454 — Filesystem access.

repo/utils/tests_fetcher.py:237

    with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f6b330ea4a40064 — Filesystem access.

repo/utils/tests_fetcher.py:279

            with open(folder / "tests/utils/tiny_model_summary.json", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0baae23faf27ddf1 — Filesystem access.

repo/utils/tests_fetcher.py:282

        with open(folder / "tests/utils/tiny_model_summary.json", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a127bda136b6401 — Filesystem access.

repo/utils/tests_fetcher.py:458

    with open("utils/not_doctested.txt") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2dced9c6ab467d1 — Filesystem access.

repo/utils/tests_fetcher.py:482

            with open(folder / "utils/not_doctested.txt", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1a9f2244367bd34 — Filesystem access.

repo/utils/tests_fetcher.py:484

        with open(folder / "utils/not_doctested.txt", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01a5895bb2c18c4a — Filesystem access.

repo/utils/tests_fetcher.py:530

    with open("utils/slow_documentation_tests.txt") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44c84dbe4c4dc519 — Filesystem access.

repo/utils/tests_fetcher.py:582

    with open(PATH_TO_REPO / module_fname, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fef901954799d367 — Filesystem access.

repo/utils/tests_fetcher.py:824

        with open(test_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #07aaa9c830427c58 — Filesystem access.

repo/utils/tests_fetcher.py:1065

        with open(doctest_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e0b1521121a6c232 — Filesystem access.

repo/utils/tests_fetcher.py:1080

    with open(output_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e16a009efd886978 — Filesystem access.

repo/utils/tests_fetcher.py:1092

    with open(output_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b03e9fdbecece547 — Filesystem access.

repo/utils/tests_fetcher.py:1158

        with open(file_name, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b47432a72626b67e — Filesystem access.

repo/utils/update_metadata.py:285

    with open(hub_frameworks_json) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #076937b038926b86 — Filesystem access.

repo/utils/update_metadata.py:294

    with open(hub_pipeline_tags_json) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #128dbc752f3a7719 — Filesystem access.

repo/utils/update_metadata.py:301

        with open(os.path.join(tmp_dir, "frameworks.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b9d483057b70d1b8 — Filesystem access.

repo/utils/update_metadata.py:303

        with open(os.path.join(tmp_dir, "pipeline_tags.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #067068fed33edddc — Environment-variable access.

repo/utils/update_pr_ci_dashboard_recap.py:331

    token = os.environ["GITHUB_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2b137e22327136e5 — Environment-variable access.

repo/utils/update_pr_ci_dashboard_recap.py:332

    repo = os.environ["GITHUB_REPOSITORY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #049160a9bc817838 — Environment-variable access.

repo/utils/update_pr_ci_dashboard_recap.py:333

    event_path = os.environ["GITHUB_EVENT_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9d78f34b314f070e — Filesystem access.

repo/utils/update_pr_ci_dashboard_recap.py:335

    with open(event_path, encoding="utf-8") as event_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f8ca02cabc6c1ae — Filesystem access.

repo/utils/update_tiny_models.py:60

    with open("tests/utils/tiny_model_summary.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #582c24a675b5e22b — Filesystem access.

repo/utils/update_tiny_models.py:143

        with open(os.path.join(output_path, "hub_tiny_model_summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #14ada474d3914bc6 — Environment-variable access.

repo/utils/update_tiny_models.py:171

        token=os.environ.get("TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Close Open Privacy Scan

verified_user Application data leak confirmed

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Confirmed data exfiltration in application code

</> First-Party Code

first-party (python)