Close Open Privacy Scan

link https://github.com/microsoft/semantic-kernel

bolt Snapshot: commit d003eb2

science engine v1.22

schedule 2026-07-24T05:17:09.233404+00:00

smart_toy MCP server detected: anthropic, chromadb, mcp, mistralai +4 more — detected in dependencies, not a safety judgment.

Incomplete scan — only 45/77 dependencies were analyzed. Treat the score as provisional.

App Privacy Score

0 /100

High privacy risk — possible application leak

High risk · 4096 finding(s)

Dependency score: 0 (High risk)

bar_chart Score Breakdown

pii_flow −60

telemetry −25

egress −15

env_fs −3

list Scan Summary

0 high 682 medium 3414 low

First-party packages: 2

Dependency packages: 30

Ecosystem: python

swap_horiz Potential data exfiltration in application code

External domains: ::ffff:192.168.0.1a2a-protocol.orgacasessions.ioacme.comagentskills.ioaggregate.ee.engr.uky.eduai.azure.comai.google.devaiplatform.eu.rep.googleapis.comaiplatform.googleapis.comaiplatform.us.rep.googleapis.comaka.msapi-dashboard.search.brave.comapi-inference.huggingface.coapi.anthropic.comapi.bing.microsoft.comapi.cloudflare.comapi.deepseek.comapi.github.comapi.jina.aiapi.morphllm.comapi.nuget.orgapi.openai.comapi.powerplatform.comapi.search.brave.comapi.slack.comapi.together.xyzapnews.comapp.neptune.aiarxiv.orgauth.openai.comaws.amazon.comblog.research.googleboto3.amazonaws.combrotlipy.readthedocs.iobugreports.qt.iobugs.python.orgbugs.winehq.orgbugzilla.gnome.orgcdn-media.huggingface.cocdn.britannica.comcdn.jsdelivr.netcdn.mathjax.orgcens.ioc.eechroma-onnx-models.s3.amazonaws.comchromiumdash.appspot.comclaude.googleapis.comclear.mlclip-cn-beijing.oss-cn-beijing.aliyuncs.comcloud.google.comcognitiveservices.azure.comconsole.anthropic.comconsole.cloud.google.comconsole.developers.google.comconsole.mistral.aiconsole.nvidia.comconverter.swagger.iocookbook.openai.comcosmos.azure.comcrates.iodagshub.comdata-apis.orgdatabase.windows.netdatatracker.ietf.orgdbinference.azure.comdeveloper.mozilla.orgdevelopers.cloudflare.comdevelopers.google.comdevguide.python.orgdigitalassets.lib.berkeley.edudiscord.ggdiscuss.huggingface.codiscuss.python.orgdiscuss.pytorch.orgdmlc.github.iodoc.rust-lang.orgdocbook.sourceforge.netdocs.ag2.aidocs.aiohttp.orgdocs.anthropic.comdocs.api.nvidia.comdocs.aws.amazon.comdocs.cloud.google.comdocs.docker.comdocs.litellm.aidocs.llamaindex.aidocs.mistral.aidocs.neptune.aidocs.nomic.aidocs.nvidia.comdocs.parallel.aidocs.pinecone.iodocs.pydantic.devdocs.pytest.orgdocs.python.orgdocs.pytorch.orgdocs.ray.iodocs.rsdocs.scipy.orgdocs.swanlab.cndocs.together.aidocs.trychroma.comdocs.wandb.aidocs.zilliz.comdoi.orgdownload.tsi.telecom-paristech.frdrive.google.comdvc.orgembed.trychroma.comen.wikipedia.orgerrors.pydantic.devessentia.upf.eduexam_ple.comexample-resource.azure.openai.comexample-resource.services.ai.azure.comfarm4.staticflickr.comflyte.orgfonts.googleapis.comfoo.comgateway.ai.cloudflare.comgcc.gnu.orggenerativelanguage.googleapis.comgiou.stanford.edugist.github.comgithub.comgitlab.freedesktop.orggitmcp.iogoo.glgoogle-auth.readthedocs.iogoogle.aip.devgoogle.github.iographics.stanford.edugroups.google.comguillaumejaume.github.iohelp.openai.comhf.cohg.python.orghips.hearstapps.comhttpbin.orghub-ci.huggingface.cohuggingface.cohypothesis.readthedocs.ioi.postimg.ccimageio.readthedocs.ioimages.cocodataset.orgimages.pexels.cominfer.roboflow.comintegrate.api.nvidia.comipython.orgj3-fortran.orgjson-schema.orgjsonlines.orgkubernetes.iolearn.microsoft.comlibsdl.orglogin.microsoft.comlogin.microsoftonline.comlucene.apache.orgmanagement.azure.commanagement.core.chinacloudapi.cnmanagement.core.usgovcloudapi.netmanagement.core.windows.netmathworld.wolfram.commatplotlib.orgmesonbuild.commetacpan.orgmicrosoft.github.iomilvus.iomistralai.github.ioml.azure.commodel-spec.openai.commodelcontextprotocol.iomsdn.microsoft.commy-keyvault-name.vault.azure.netmy-sharepoint-site.commypy.readthedocs.iomüller.denats.ionexusraven.nexusflow.ainicolas.limare.netnineplanets.orgnlp.stanford.edunodatime.orgnumpy.orgnumpydoc.readthedocs.ionvidia.coollama.comopenai.comopenapi-core.readthedocs.ioopenapis.orgopentelemetry.iooptuna.readthedocs.ioother.compackages.msys2.orgpackaging.python.orgpaddle-model-ecology.bj.bcebos.compandas.pydata.orgpbs.twimg.compeople.eecs.berkeley.edupeps.python.orgpersonal.math.ubc.capkg.go.devplatform.claude.complatform.openai.comportal.azure.comproceedings.neurips.ccproto-plus-python.readthedocs.ioprotobuf.devpydantic-docs.helpmanual.iopyinstaller.readthedocs.iopypi.orgpypi.python.orgpypika.readthedocs.iopython-devtools.helpmanual.iopython.orgpytorch.orgqianwen-res.oss-cn-beijing.aliyuncs.comqwenlm.github.ioraw.githubusercontent.comreact.devreactjs.orgredis-py.readthedocs.ioredis.iorequests.readthedocs.iorich.readthedocs.iorrc.cvc.uab.essafetensors-convert.hf.spaceschema.orgschemas.microsoft.comscikit-image.orgscipy-cookbook.readthedocs.ioscipy-lectures.orgscrapethis.comsearch.azure.comsourceware.orgspdx.orgspeakeasy.comspec.openapis.orgsports.yahoo.comstackoverflow.comstorage.googleapis.comsuno-ai.notion.sitesupport.atlassian.comswagger.ioswanlab.cntartarus.orgtelemetry.googleapis.comtelemetry.mtls.googleapis.comthumbs.dreamstime.comtimeapi.iotinyurl.comtools.ietf.orgtowardsdatascience.comtruststore.readthedocs.iotwitter.comtyping-extensions.readthedocs.iotyping.python.orgupload.wikimedia.orgus-central1-kfp.pkg.devus-kfp.pkg.devviews.scientific-python.orgw3c.github.ioweaviate.ioweb.archive.orgwebsockets.readthedocs.iowerkzeug.palletsprojects.comwixtoolset.orgwrapdb.mesonbuild.comwttr.inwww.ams.orgwww.anthropic.comwww.bing.comwww.britannica.comwww.comet.comwww.cs.cmu.eduwww.deepmind.comwww.dvc.orgwww.ecma-international.orgwww.example.珠宝www.github.comwww.google.comwww.googleapis.comwww.iana.orgwww.ietf.orgwww.ilankelman.orgwww.intel.comwww.kxan.comwww.math.hmc.eduwww.mathjax.orgwww.mathworks.comwww.microsoft.comwww.mlflow.orgwww.nature.comwww.ncaa.comwww.nfl.comwww.oasis-open.orgwww.openblas.netwww.paddleocr.aiwww.postgresql.orgwww.python.orgwww.reuters.comwww.rfc-editor.orgwww.scipy.orgwww.stixfonts.orgwww.tensorflow.orgwww.tvtechnology.comwww.w3.orgwww.w3schools.comwww.wandb.comwww.webrtc.orgwww.wikipedia.orgwww.xudongz.comwww.xyz.eduxn--fiqs8s.icom.museumyour-endpoint.cognitiveservices.azure.comyour-resource-name.openai.azure.comyour-unique-host.openai.azure.com

medium first-party (python): python PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_convo_with_tools.py:49 → repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_convo_with_tools.py:91

medium first-party (python): python PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_simple_convo.py:30 → repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_simple_convo.py:59

medium first-party (python): python PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/agent_with_mcp_plugin.py:40 → repo/python/samples/concepts/mcp/agent_with_mcp_plugin.py:58

medium first-party (python): python PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/azure_ai_agent_with_local_server.py:56 → repo/python/samples/concepts/mcp/azure_ai_agent_with_local_server.py:97

medium first-party (python): python PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/azure_ai_agent_with_local_server.py:56 → repo/python/samples/concepts/mcp/azure_ai_agent_with_local_server.py:99

medium first-party (python): python PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/azure_ai_agent_with_mcp_plugin.py:33 → repo/python/samples/concepts/mcp/azure_ai_agent_with_mcp_plugin.py:60

medium first-party (python): python PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/local_agent_with_local_server.py:52 → repo/python/samples/concepts/mcp/local_agent_with_local_server.py:86

medium first-party (python): python PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/local_agent_with_local_server.py:52 → repo/python/samples/concepts/mcp/local_agent_with_local_server.py:101

medium first-party (python): python PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/local_agent_with_local_server.py:52 → repo/python/samples/concepts/mcp/local_agent_with_local_server.py:103

medium first-party (python): python A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

repo/python/samples/learn_resources/plugins/GithubPlugin/github.py:102 → repo/python/samples/learn_resources/plugins/GithubPlugin/github.py:105

hub Dependency data flows (110)

medium transformers dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2512 → pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2514

medium azure-identity dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:66 → pkgs/python/[email protected]/azure/identity/_credentials/environment.py:99

medium azure-identity dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:60 → pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:77

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:45 → pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:70

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:45 → pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:127

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:46 → pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:73

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:46 → pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:134

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_authentication.py:32 → pkgs/python/[email protected]/samples/sample_authentication.py:39

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_authentication.py:48 → pkgs/python/[email protected]/samples/sample_authentication.py:55

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_authentication_async.py:33 → pkgs/python/[email protected]/samples/sample_authentication_async.py:41

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_authentication_async.py:50 → pkgs/python/[email protected]/samples/sample_authentication_async.py:58

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → pkgs/python/[email protected]/samples/sample_documents_crud.py:59

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → pkgs/python/[email protected]/samples/sample_documents_crud.py:72

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → pkgs/python/[email protected]/samples/sample_documents_crud.py:87

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → pkgs/python/[email protected]/samples/sample_documents_crud.py:100

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → pkgs/python/[email protected]/samples/sample_documents_crud.py:115

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → pkgs/python/[email protected]/samples/sample_documents_crud_async.py:61

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → pkgs/python/[email protected]/samples/sample_documents_crud_async.py:77

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → pkgs/python/[email protected]/samples/sample_documents_crud_async.py:93

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → pkgs/python/[email protected]/samples/sample_documents_crud_async.py:107

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → pkgs/python/[email protected]/samples/sample_documents_crud_async.py:123

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:27 → pkgs/python/[email protected]/samples/sample_index_alias_crud.py:42

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:27 → pkgs/python/[email protected]/samples/sample_index_alias_crud.py:54

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:27 → pkgs/python/[email protected]/samples/sample_index_alias_crud.py:108

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28 → pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:44

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28 → pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:57

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28 → pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:112

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_analyze_text.py:26 → pkgs/python/[email protected]/samples/sample_index_analyze_text.py:43

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:27 → pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:45

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:33 → pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:46

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:37 → pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:51

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud.py:26 → pkgs/python/[email protected]/samples/sample_index_crud.py:69

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud.py:26 → pkgs/python/[email protected]/samples/sample_index_crud.py:80

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud.py:26 → pkgs/python/[email protected]/samples/sample_index_crud.py:126

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud.py:26 → pkgs/python/[email protected]/samples/sample_index_crud.py:139

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud_async.py:27 → pkgs/python/[email protected]/samples/sample_index_crud_async.py:72

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud_async.py:27 → pkgs/python/[email protected]/samples/sample_index_crud_async.py:84

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud_async.py:27 → pkgs/python/[email protected]/samples/sample_index_crud_async.py:132

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23 → pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:43

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23 → pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:59

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23 → pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:71

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23 → pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:85

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24 → pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:45

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24 → pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:62

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24 → pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:75

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24 → pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:90

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:25 → pkgs/python/[email protected]/samples/sample_indexer_crud.py:74

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:25 → pkgs/python/[email protected]/samples/sample_indexer_crud.py:87

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:25 → pkgs/python/[email protected]/samples/sample_indexer_crud.py:99

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:25 → pkgs/python/[email protected]/samples/sample_indexer_crud.py:112

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26 → pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:80

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26 → pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:94

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26 → pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:107

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26 → pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:121

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25 → pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:51

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25 → pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:64

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25 → pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:76

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26 → pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:52

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26 → pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:66

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26 → pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:79

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:25 → pkgs/python/[email protected]/samples/sample_indexer_workflow.py:119

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:25 → pkgs/python/[email protected]/samples/sample_indexer_workflow.py:130

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:25 → pkgs/python/[email protected]/samples/sample_indexer_workflow.py:134

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_autocomplete.py:26 → pkgs/python/[email protected]/samples/sample_query_autocomplete.py:40

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:28 → pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:43

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_facets.py:26 → pkgs/python/[email protected]/samples/sample_query_facets.py:43

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_facets_async.py:28 → pkgs/python/[email protected]/samples/sample_query_facets_async.py:46

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_filter.py:26 → pkgs/python/[email protected]/samples/sample_query_filter.py:45

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_filter_async.py:28 → pkgs/python/[email protected]/samples/sample_query_filter_async.py:48

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic.py:24 → pkgs/python/[email protected]/samples/sample_query_semantic.py:66

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic.py:24 → pkgs/python/[email protected]/samples/sample_query_semantic.py:67

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic.py:24 → pkgs/python/[email protected]/samples/sample_query_semantic.py:89

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic.py:24 → pkgs/python/[email protected]/samples/sample_query_semantic.py:90

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25 → pkgs/python/[email protected]/samples/sample_query_semantic_async.py:69

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25 → pkgs/python/[email protected]/samples/sample_query_semantic_async.py:70

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25 → pkgs/python/[email protected]/samples/sample_query_semantic_async.py:91

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25 → pkgs/python/[email protected]/samples/sample_query_semantic_async.py:92

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_session.py:24 → pkgs/python/[email protected]/samples/sample_query_session.py:38

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_session_async.py:25 → pkgs/python/[email protected]/samples/sample_query_session_async.py:40

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_simple.py:24 → pkgs/python/[email protected]/samples/sample_query_simple.py:38

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_simple_async.py:26 → pkgs/python/[email protected]/samples/sample_query_simple_async.py:41

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_suggestions.py:24 → pkgs/python/[email protected]/samples/sample_query_suggestions.py:39

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:26 → pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:42

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:50 → pkgs/python/[email protected]/samples/sample_query_vector.py:130

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:50 → pkgs/python/[email protected]/samples/sample_query_vector.py:148

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:50 → pkgs/python/[email protected]/samples/sample_query_vector.py:170

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:50 → pkgs/python/[email protected]/samples/sample_query_vector.py:196

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:50 → pkgs/python/[email protected]/samples/sample_query_vector.py:221

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:50 → pkgs/python/[email protected]/samples/sample_query_vector.py:222

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:50 → pkgs/python/[email protected]/samples/sample_query_vector.py:223

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:50 → pkgs/python/[email protected]/samples/sample_query_vector.py:224

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:50 → pkgs/python/[email protected]/samples/sample_query_vector.py:225

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:50 → pkgs/python/[email protected]/samples/sample_query_vector.py:226

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → pkgs/python/[email protected]/samples/sample_query_vector_async.py:134

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → pkgs/python/[email protected]/samples/sample_query_vector_async.py:153

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → pkgs/python/[email protected]/samples/sample_query_vector_async.py:176

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → pkgs/python/[email protected]/samples/sample_query_vector_async.py:204

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → pkgs/python/[email protected]/samples/sample_query_vector_async.py:230

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → pkgs/python/[email protected]/samples/sample_query_vector_async.py:231

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → pkgs/python/[email protected]/samples/sample_query_vector_async.py:232

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → pkgs/python/[email protected]/samples/sample_query_vector_async.py:233

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → pkgs/python/[email protected]/samples/sample_query_vector_async.py:234

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → pkgs/python/[email protected]/samples/sample_query_vector_async.py:235

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:25 → pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:42

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:26 → pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:48

medium google-cloud-aiplatform dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

pkgs/python/[email protected]/agentplatform/_genai/_agent_engines_utils.py:1851 → pkgs/python/[email protected]/agentplatform/_genai/_agent_engines_utils.py:1849

pkgs/python/[email protected]/agentplatform/agent_engines/_agent_engines.py:1803 → pkgs/python/[email protected]/agentplatform/agent_engines/_agent_engines.py:1801

pkgs/python/[email protected]/vertexai/_genai/_agent_engines_utils.py:1845 → pkgs/python/[email protected]/vertexai/_genai/_agent_engines_utils.py:1843

pkgs/python/[email protected]/vertexai/_genai/_agent_engines_utils.py:1960 → pkgs/python/[email protected]/vertexai/_genai/_agent_engines_utils.py:1958

pkgs/python/[email protected]/vertexai/agent_engines/_agent_engines.py:1794 → pkgs/python/[email protected]/vertexai/agent_engines/_agent_engines.py:1792

</> First-Party Code

first-party (python): python

python first-party

medium pii_flow production #48a5e561b015c040 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_convo_with_tools.py:91 · flow /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_convo_with_tools.py:49 → /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_convo_with_tools.py:91

                    print(f"# {response.role} - {response.name or '*'}: '{r}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow production #3ce66e54e6b77f54 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_convo_with_tools.py:93 · flow /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_convo_with_tools.py:49 → /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_convo_with_tools.py:93

                    print(
                        f"# {response.role} - {response.name or '*'}: Function Name: '{fn}', Arguments: '{arguments}'"  # noqa: E501
                    )

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow production #f8b2f9444d6ac72a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_convo_with_tools.py:97 · flow /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_convo_with_tools.py:49 → /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_convo_with_tools.py:97

                    print(f"# {response.role} - {response.name or '*'}: '{response}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow production #5cbae439f66eb27c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_simple_convo.py:59 · flow /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_simple_convo.py:30 → /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_simple_convo.py:59

        print(f"# {response.role} - {response.name or '*'}: '{response}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow production #f3930386449d8558 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/agent_with_mcp_plugin.py:58 · flow /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/agent_with_mcp_plugin.py:40 → /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/agent_with_mcp_plugin.py:58

            print(f"# {response.name}: {response} ")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow production #c0b225d04b13e6de — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/azure_ai_agent_with_local_server.py:97 · flow /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/azure_ai_agent_with_local_server.py:56 → /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/azure_ai_agent_with_local_server.py:97

                    print(f"# {response.name}: ", end="", flush=True)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow production #8e5df395f1ba27b0 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/azure_ai_agent_with_local_server.py:99 · flow /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/azure_ai_agent_with_local_server.py:56 → /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/azure_ai_agent_with_local_server.py:99

                print(response.content, end="", flush=True)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow production #54147424abcbf1ae — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/azure_ai_agent_with_mcp_plugin.py:60 · flow /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/azure_ai_agent_with_mcp_plugin.py:33 → /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/azure_ai_agent_with_mcp_plugin.py:60

                print(f"# {response.name}: {response} ")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow production #238a9bce9b8e0ccd — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/local_agent_with_local_server.py:86 · flow /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/local_agent_with_local_server.py:52 → /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/local_agent_with_local_server.py:86

        print(f"Agent uses Ollama with the {agent.service.ai_model_id} model")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow production #88d83ce2783371d3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/local_agent_with_local_server.py:101 · flow /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/local_agent_with_local_server.py:52 → /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/local_agent_with_local_server.py:101

                    print(f"# {response.name}: ", end="", flush=True)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow production #17f6b58b7885235c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/python/samples/concepts/mcp/local_agent_with_local_server.py:103 · flow /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/local_agent_with_local_server.py:52 → /tmp/closeopen-_aed_lpm/repo/python/samples/concepts/mcp/local_agent_with_local_server.py:103

                print(response.content, end="", flush=True)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium telemetry test-only Excluded from app score #c2058bb1795a02b1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/document_generator/custom_selection_strategy.py:5

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #57962ab280733a19 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/document_generator/custom_termination_strategy.py:5

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #9d8468f237d043cd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/document_generator/main.py:8

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #9ced0f4784fa24f5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/document_generator/main.py:9

from opentelemetry.sdk.resources import Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #58c23405283ce139 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/document_generator/main.py:10

from opentelemetry.semconv.resource import ResourceAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #985569df0b25dcdc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/document_generator/main.py:62

    from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #82e585d019174106 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/document_generator/main.py:63

    from opentelemetry.sdk.trace.export import BatchSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #942e681615886ca7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/document_generator/main.py:64

    from opentelemetry.trace import set_tracer_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #696746351e7dd85c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/document_generator/main.py:77

    from opentelemetry._logs import set_logger_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #6051bd3034ef38ae — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/document_generator/main.py:78

    from opentelemetry.sdk._logs import LoggerProvider, LoggingHandler

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #529652d192b2d88a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/document_generator/main.py:79

    from opentelemetry.sdk._logs.export import BatchLogRecordProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #1107482db36b7410 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:13

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #a2eeaae58f1d9a27 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:14

from opentelemetry._logs import set_logger_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #7e6b7d60b643e5a7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:15

from opentelemetry.exporter.otlp.proto.grpc._log_exporter import OTLPLogExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #c6b4d5bebbffef61 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:16

from opentelemetry.exporter.otlp.proto.grpc.metric_exporter import OTLPMetricExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #3daafcca698df614 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:17

from opentelemetry.exporter.otlp.proto.grpc.trace_exporter import OTLPSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #4014bdf92a747921 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:18

from opentelemetry.metrics import set_meter_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #7b0a5bbd390e42ce — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:19

from opentelemetry.sdk._logs import LoggerProvider, LoggingHandler

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #6d545580a4f8baf4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:20

from opentelemetry.sdk._logs.export import BatchLogRecordProcessor, ConsoleLogExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #a70156976a1401c1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:21

from opentelemetry.sdk.metrics import MeterProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #e8257cecad3d33f7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:22

from opentelemetry.sdk.metrics.export import ConsoleMetricExporter, PeriodicExportingMetricReader

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #ca97f83203254b70 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:23

from opentelemetry.sdk.metrics.view import DropAggregation, View

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #0fd4b8a2fabf8ab1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:24

from opentelemetry.sdk.resources import Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #5ff585bf8933b0f9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:25

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #f61e77d04ecc78ba — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:26

from opentelemetry.sdk.trace.export import BatchSpanProcessor, ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #729c80bac1665c1f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:27

from opentelemetry.semconv.resource import ResourceAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #9ffe9b9c7b3fabe0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:28

from opentelemetry.trace import set_tracer_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #3028a0db6c9ab9f1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/main.py:29

from opentelemetry.trace.span import format_trace_id

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry test-only Excluded from app score #d9428f9f819773b2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/demos/telemetry/scenarios.py:3

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #2c26dc2a5debc5c2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/getting_started_with_agents/multi_agent_orchestration/observability.py:8

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #531e59ec79d352b1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/getting_started_with_agents/multi_agent_orchestration/observability.py:9

from opentelemetry._logs import set_logger_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #c8d07d6cacd6212b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/getting_started_with_agents/multi_agent_orchestration/observability.py:10

from opentelemetry.sdk._logs import LoggerProvider, LoggingHandler

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #27914c87d003698e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/getting_started_with_agents/multi_agent_orchestration/observability.py:11

from opentelemetry.sdk._logs.export import BatchLogRecordProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #767b4e91d8683364 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/getting_started_with_agents/multi_agent_orchestration/observability.py:12

from opentelemetry.sdk.resources import Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #520e4d7e814e4477 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/getting_started_with_agents/multi_agent_orchestration/observability.py:13

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #2c2b2c0270a95d5b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/getting_started_with_agents/multi_agent_orchestration/observability.py:14

from opentelemetry.sdk.trace.export import BatchSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #42ccabb70b6e504d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/getting_started_with_agents/multi_agent_orchestration/observability.py:15

from opentelemetry.semconv.resource import ResourceAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #4f0a73272cdf6a14 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/getting_started_with_agents/multi_agent_orchestration/observability.py:16

from opentelemetry.trace import set_tracer_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #ffe195e9141e37e9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/getting_started_with_agents/multi_agent_orchestration/observability.py:17

from opentelemetry.trace.span import format_trace_id

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #c8b74e8a23dba818 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/samples/getting_started_with_agents/multi_agent_orchestration/step4c_handoff_mix_agent_types.py:8

from opentelemetry.trace import NoOpTracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium pii_flow production #bf3a64e2951c5945 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

repo/python/samples/learn_resources/plugins/GithubPlugin/github.py:105 · flow /tmp/closeopen-_aed_lpm/repo/python/samples/learn_resources/plugins/GithubPlugin/github.py:102 → /tmp/closeopen-_aed_lpm/repo/python/samples/learn_resources/plugins/GithubPlugin/github.py:105

        return httpx.AsyncClient(base_url=self.settings.base_url, headers=headers, timeout=5)

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

medium telemetry production #5d25117398b64ffe — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/agents/runtime/core/telemetry/propagation.py:7

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #dd5685f0b87d553e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/agents/runtime/core/telemetry/propagation.py:8

from opentelemetry.propagate import extract

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #c7ec60d78d2b31f9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/agents/runtime/core/telemetry/propagation.py:9

from opentelemetry.trace import Link, get_current_span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #7de1cd7269f413ce — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/agents/runtime/core/telemetry/propagation.py:10

from opentelemetry.trace.propagation.tracecontext import TraceContextTextMapPropagator

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #3563e10c7f4b476a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/agents/runtime/core/telemetry/tracing.py:7

from opentelemetry.trace import NoOpTracerProvider, Span, SpanKind, TracerProvider, get_tracer_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #bfffeab0842bd62a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/agents/runtime/core/telemetry/tracing.py:8

from opentelemetry.util import types

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #647eea98e871377b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/agents/runtime/core/telemetry/tracing_config.py:7

from opentelemetry.trace import SpanKind

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #8155108363b9f7c3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/agents/runtime/core/telemetry/tracing_config.py:8

from opentelemetry.util import types

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #97dd5bfc1dcb9239 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/agents/runtime/in_process/in_process_runtime.py:21

from opentelemetry.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #32cfeca84b8d815b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/connectors/ai/chat_completion_client_base.py:11

from opentelemetry.trace import Span, Tracer, get_tracer, use_span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #932e59c3cdd6dd58 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/functions/kernel_function.py:12

from opentelemetry import metrics, trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #7d260a900ebbf473 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/functions/kernel_function.py:13

from opentelemetry.semconv.attributes.error_attributes import ERROR_TYPE

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #43fceadc4d02836e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/utils/telemetry/agent_diagnostics/decorators.py:9

from opentelemetry.trace import Span, StatusCode, get_tracer

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #9f59ca89ef116a56 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/utils/telemetry/model_diagnostics/decorators.py:10

from opentelemetry.trace import Span, StatusCode, get_tracer, use_span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #32f721764f705821 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/python/semantic_kernel/utils/telemetry/model_diagnostics/function_tracer.py:5

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 105 low-confidence finding(s)

low env_fs production #6b88c0a97bfa3c56 — Environment-variable access.

repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_convo_with_tools.py:49

            "config_list": [{"model": os.environ["OPENAI_CHAT_MODEL_ID"], "api_key": os.environ["OPENAI_API_KEY"]}]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85261a97cb5af753 — Environment-variable access.

repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_simple_convo.py:28

                    "model": os.environ["OPENAI_CHAT_MODEL_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7736096aa6bd1777 — Environment-variable access.

repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_simple_convo.py:30

                    "api_key": os.environ.get("OPENAI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #31d1accae5026794 — Environment-variable access.

repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_simple_convo.py:45

                    "model": os.environ["OPENAI_CHAT_MODEL_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e1641d95ffa45a08 — Environment-variable access.

repo/python/samples/concepts/agents/autogen_conversable_agent/autogen_conversable_agent_simple_convo.py:47

                    "api_key": os.environ.get("OPENAI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #608648e857a144a7 — Filesystem access.

repo/python/samples/concepts/agents/mixed_chat/mixed_chat_files.py:53

    with open(file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cfdd18dd9547ff39 — Filesystem access.

repo/python/samples/concepts/agents/openai_assistant/azure_openai_assistant_declarative_code_interpreter.py:49

    with open(csv_file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #81d6b167bba9558d — Filesystem access.

repo/python/samples/concepts/agents/openai_assistant/azure_openai_assistant_declarative_file_search.py:49

    with open(pdf_file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2c0ab01800795b2 — Filesystem access.

repo/python/samples/concepts/agents/openai_assistant/openai_assistant_declarative_code_interpreter.py:47

    with open(csv_file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #53c50579fdd363a2 — Filesystem access.

repo/python/samples/concepts/agents/openai_assistant/openai_assistant_declarative_file_search.py:48

    with open(pdf_file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da27fec90fb1b4d1 — Filesystem access.

repo/python/samples/concepts/agents/openai_assistant/openai_assistant_file_manipulation.py:32

    with open(csv_file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18081e227e167ad5 — Filesystem access.

repo/python/samples/concepts/agents/openai_assistant/openai_assistant_file_manipulation_streaming.py:31

    with open(csv_file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12893d2fab4d0de6 — Filesystem access.

repo/python/samples/concepts/agents/openai_assistant/openai_assistant_sample_utils.py:28

        with open(file_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0a09498ad053c162 — Filesystem access.

repo/python/samples/concepts/agents/openai_assistant/openai_assistant_vision_streaming.py:28

    with open(file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea8119be1e84bdb7 — Filesystem access.

repo/python/samples/concepts/agents/openai_responses/azure_openai_responses_agent_declarative_file_search.py:46

    with open(pdf_file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #738032e0c1c3a7d4 — Filesystem access.

repo/python/samples/concepts/agents/openai_responses/openai_responses_agent_declarative_file_search.py:45

    with open(pdf_file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e019a3c7ee4afe03 — Filesystem access.

repo/python/samples/concepts/agents/openai_responses/responses_agent_file_search_streaming.py:38

    with open(pdf_file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #4a77c51effa258f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/samples/concepts/images/image_gen_prompt.py:44

        img = Image.open(urlopen(str(result.value[0].uri)))  # nosec

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #391fb6e4d5013193 — Environment-variable access.

repo/python/samples/concepts/mcp/agent_with_mcp_agent.py:39

                "AZURE_OPENAI_CHAT_DEPLOYMENT_NAME": os.getenv("AZURE_OPENAI_CHAT_DEPLOYMENT_NAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ce0fa2693c8e792 — Environment-variable access.

repo/python/samples/concepts/mcp/agent_with_mcp_agent.py:40

                "AZURE_OPENAI_ENDPOINT": os.getenv("AZURE_OPENAI_ENDPOINT"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fdfe9b15e4f5d05c — Environment-variable access.

repo/python/samples/concepts/mcp/agent_with_mcp_agent.py:53

                "AZURE_OPENAI_CHAT_DEPLOYMENT_NAME": os.getenv("AZURE_OPENAI_CHAT_DEPLOYMENT_NAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7af53e5b361829cb — Environment-variable access.

repo/python/samples/concepts/mcp/agent_with_mcp_agent.py:54

                "AZURE_OPENAI_ENDPOINT": os.getenv("AZURE_OPENAI_ENDPOINT"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aea9c1651b8f9671 — Environment-variable access.

repo/python/samples/concepts/mcp/agent_with_mcp_plugin.py:40

        env={"GITHUB_PERSONAL_ACCESS_TOKEN": os.getenv("GITHUB_PERSONAL_ACCESS_TOKEN")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f83f0ea2c4875f8 — Environment-variable access.

repo/python/samples/concepts/mcp/azure_ai_agent_with_local_server.py:56

            env={"GITHUB_PERSONAL_ACCESS_TOKEN": os.getenv("GITHUB_PERSONAL_ACCESS_TOKEN")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a626d0c759d7dfa — Environment-variable access.

repo/python/samples/concepts/mcp/azure_ai_agent_with_mcp_plugin.py:33

            env={"GITHUB_PERSONAL_ACCESS_TOKEN": os.getenv("GITHUB_PERSONAL_ACCESS_TOKEN")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb67dc826d8ef6f7 — Environment-variable access.

repo/python/samples/concepts/mcp/local_agent_with_local_server.py:52

            env={"GITHUB_PERSONAL_ACCESS_TOKEN": os.getenv("GITHUB_PERSONAL_ACCESS_TOKEN")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb14415830b1965c — Environment-variable access.

repo/python/samples/concepts/mcp/mcp_as_plugin.py:105

        env={"GITHUB_PERSONAL_ACCESS_TOKEN": os.getenv("GITHUB_PERSONAL_ACCESS_TOKEN")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #54485afb33cbd64e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/samples/concepts/memory/azure_ai_search_hotel_samples/data_model.py:91

    response = requests.get(url, timeout=60)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #b14843995f0c03d7 — Environment-variable access.

repo/python/samples/concepts/setup/openai_env_setup.py:44

    api_key = os.getenv("MY_API_KEY_VAR_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only Excluded from app score #4f4d2db573b24bc6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/samples/demos/booking_restaurant/bookings_plugin/bookings_plugin.py:106

        response = await self.graph_client.solutions.booking_businesses.by_booking_business_id(
            self.booking_business_id
        ).appointments.post(request_body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only Excluded from app score #c3076f5e2d7e3f01 — Environment-variable access.

repo/python/samples/demos/call_automation/call_automation.py:56

CALLBACK_URI_HOST = os.environ["CALLBACK_URI_HOST"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7e070845894d0af5 — Environment-variable access.

repo/python/samples/demos/call_automation/call_automation.py:59

acs_client = CallAutomationClient.from_connection_string(os.environ["ACS_CONNECTION_STRING"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aaeff97973700352 — Environment-variable access.

repo/python/samples/demos/copilot_studio_agent/src/chat.py:22

    bot_secret=os.getenv("BOT_SECRET"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #18e3b6721492b70f — Environment-variable access.

repo/python/samples/demos/copilot_studio_agent/src/chat.py:23

    bot_endpoint=os.getenv("BOT_ENDPOINT"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow test-only Excluded from app score #e17b38684123c428 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/python/samples/demos/copilot_studio_agent/src/chat.py:42 · flow /tmp/closeopen-_aed_lpm/repo/python/samples/demos/copilot_studio_agent/src/chat.py:22 → /tmp/closeopen-_aed_lpm/repo/python/samples/demos/copilot_studio_agent/src/chat.py:42

    logger.info(f"Response: {response}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low egress test-only Excluded from app score #4a1dd0c769c7220d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/samples/demos/copilot_studio_agent/src/direct_line_agent.py:58

                async with self.session.post(url, headers=headers) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #32e2b371513ae67d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/samples/demos/copilot_studio_agent/src/direct_line_agent.py:69

                async with self.session.get(self.token_endpoint) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #ffc9cbbaa0b52a86 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/samples/demos/copilot_studio_agent/src/direct_line_agent.py:185

            async with self.session.post(start_conv_url, headers=headers) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #74321c10f815c2d5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/samples/demos/copilot_studio_agent/src/direct_line_agent.py:196

        async with self.session.post(activities_url, json=payload, headers=headers) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #bebe970d6a28e22e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/samples/demos/copilot_studio_agent/src/direct_line_agent.py:208

            async with self.session.get(url, headers=headers) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only Excluded from app score #102b5b89e610dc4a — Filesystem access.

repo/python/samples/demos/copilot_studio_skill/src/api/app.py:32

    with open("copilot-studio.manifest.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f11a0125f18da409 — Environment-variable access.

repo/python/samples/demos/copilot_studio_skill/src/api/app.py:37

        fqdn = f"https://{os.getenv('CONTAINER_APP_NAME')}.{os.getenv('CONTAINER_APP_ENV_DNS_SUFFIX')}/api/messages"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #06e70a5b74b79825 — Environment-variable access.

repo/python/samples/demos/copilot_studio_skill/src/api/config.py:13

    HOST = os.getenv("HOST", "localhost")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d3ca1606e3df72f7 — Environment-variable access.

repo/python/samples/demos/copilot_studio_skill/src/api/config.py:14

    PORT = int(os.getenv("PORT", 8080))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #82cfc4febc60f2d8 — Environment-variable access.

repo/python/samples/demos/copilot_studio_skill/src/api/config.py:19

    APP_ID = os.getenv("BOT_APP_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eb0f56ac2dc25aec — Environment-variable access.

repo/python/samples/demos/copilot_studio_skill/src/api/config.py:20

    APP_PASSWORD = os.getenv("BOT_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5509dcfd17698e82 — Environment-variable access.

repo/python/samples/demos/copilot_studio_skill/src/api/config.py:21

    APP_TENANTID = os.getenv("BOT_TENANT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5c7c10eb3af3c54f — Environment-variable access.

repo/python/samples/demos/copilot_studio_skill/src/api/config.py:22

    APP_TYPE = os.getenv("APP_TYPE", "singletenant")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8cea2286ee4c9cc3 — Environment-variable access.

repo/python/samples/demos/copilot_studio_skill/src/api/config.py:27

    ALLOWED_CALLERS = os.getenv("ALLOWED_CALLERS", ["*"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #20e45319a398d3b5 — Environment-variable access.

repo/python/samples/demos/copilot_studio_skill/src/api/config.py:30

    AZURE_OPENAI_CHAT_DEPLOYMENT_NAME = os.getenv("AZURE_OPENAI_CHAT_DEPLOYMENT_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #38e3f49bcd550d52 — Environment-variable access.

repo/python/samples/demos/copilot_studio_skill/src/api/config.py:31

    AZURE_OPENAI_ENDPOINT = os.getenv("AZURE_OPENAI_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aeb2541aa854e34e — Environment-variable access.

repo/python/samples/demos/copilot_studio_skill/src/api/config.py:32

    AZURE_OPENAI_API_VERSION = os.getenv("AZURE_OPENAI_API_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9747db7544a82cc9 — Environment-variable access.

repo/python/samples/demos/document_generator/main.py:55

AZURE_APP_INSIGHTS_CONNECTION_STRING = os.getenv("AZURE_APP_INSIGHTS_CONNECTION_STRING")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9cc68549c9efa323 — Filesystem access.

repo/python/samples/demos/document_generator/plugins/repo_file_plugin.py:22

            with open(path) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e6e2b309e54e52e9 — Filesystem access.

repo/python/samples/demos/document_generator/plugins/repo_file_plugin.py:37

                with open(os.path.join(root, file_name)) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2e31d9751cc0bf5 — Filesystem access.

repo/python/samples/getting_started_with_agents/azure_ai_agent/step06_azure_ai_agent_openapi.py:46

        with open(os.path.join(openapi_spec_file_path, "weather.json")) as weather_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f68578ae7f57a03f — Filesystem access.

repo/python/samples/getting_started_with_agents/azure_ai_agent/step06_azure_ai_agent_openapi.py:48

        with open(os.path.join(openapi_spec_file_path, "countries.json")) as countries_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b076551edae5c9a7 — Environment-variable access.

repo/python/samples/getting_started_with_agents/multi_agent_orchestration/observability.py:21

APPINSIGHTS_CONNECTION_STRING = os.getenv("APPINSIGHTS_CONNECTION_STRING")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e59b5ae20df021d4 — Filesystem access.

repo/python/samples/getting_started_with_agents/multi_agent_orchestration/step1a_concurrent_structured_outputs.py:73

    with open(os.path.join(os.path.dirname(__file__), "../resources", "Hamlet_full_play_summary.txt")) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7810e49b7cca9f1e — Filesystem access.

repo/python/samples/getting_started_with_agents/openai_assistant/step3_assistant_vision.py:26

    with open(file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be8355b629222bbb — Filesystem access.

repo/python/samples/getting_started_with_agents/openai_assistant/step5_assistant_tool_file_search.py:34

    with open(pdf_file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d9d8086f593b603 — Filesystem access.

repo/python/samples/getting_started_with_agents/openai_responses/step5_responses_agent_file_search.py:39

    with open(pdf_file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fe6d7874025c37a8 — Filesystem access.

repo/python/samples/getting_started_with_processes/step03/step03a_food_preparation.py:88

    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #738681bca4074baa — Filesystem access.

repo/python/samples/getting_started_with_processes/step03/step03a_food_preparation.py:104

        with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e91882fd29e23a8 — Filesystem access.

repo/python/samples/learn_resources/agent_docs/agent_collaboration.py:166

                with open(file_path, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #485c7735fb7b4355 — Filesystem access.

repo/python/samples/learn_resources/agent_docs/assistant_code.py:54

        with open(file_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33e6a205f19f5190 — Filesystem access.

repo/python/samples/learn_resources/agent_docs/assistant_code.py:76

        with open(path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab395ad85a954195 — Filesystem access.

repo/python/samples/learn_resources/agent_docs/assistant_search.py:45

        with open(path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #d5208d57a4b69826 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/samples/learn_resources/plugins/GithubPlugin/github.py:116

        response = await client.get(path)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #7a09e7cd50bcb1a3 — Filesystem access.

repo/python/semantic_kernel/agents/agent.py:866

            with open(file_path, encoding=encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #15261f83bcb0bba3 — Filesystem access.

repo/python/semantic_kernel/agents/copilot_studio/copilot_studio_agent.py:144

                "private_key": Path(self.client_cert_path).read_text(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8af8396275bad693 — Filesystem access.

repo/python/semantic_kernel/agents/copilot_studio/copilot_studio_agent.py:182

        pem_bytes = Path(cert_path).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fbfbdec2f02f327c — Environment-variable access.

repo/python/semantic_kernel/agents/copilot_studio/copilot_studio_agent.py:390

        cache_file = environ.get("TOKEN_CACHE_PATH_INTERACTIVE") or path.join(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b6b193e888f4507 — Filesystem access.

repo/python/semantic_kernel/connectors/ai/onnx/services/onnx_gen_ai_completion_base.py:43

            with open(json_gen_ai_config) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #9de550b5e879cf15 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/semantic_kernel/connectors/ai/open_ai/services/_open_ai_realtime.py:805

                session.post(self._get_webrtc_url(), headers=headers, data=offer.sdp) as response,

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #2ee6331112f033cb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/semantic_kernel/connectors/ai/open_ai/services/_open_ai_realtime.py:902

                session.post(url, headers=headers, json=data) as response,

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #2ad804c9919fdf65 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/semantic_kernel/connectors/ai/open_ai/services/azure_realtime.py:363

                session.post(url, headers=headers, json=data) as response,

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #d28be935c1c3b2cb — Filesystem access.

repo/python/semantic_kernel/connectors/ai/open_ai/services/open_ai_handler.py:167

            with open(settings.filename, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #8abbf261958a66f3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/semantic_kernel/connectors/brave.py:230

                response = await client.get(url, headers=headers, params=params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #4a76caa863d3aa8e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/semantic_kernel/connectors/google_search.py:268

                response = await client.get(full_url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #e90b08a2c088b237 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/semantic_kernel/connectors/memory_stores/astradb/astra_client.py:52

            session.post(request_url, data=json.dumps(query), headers=self.request_header) as response,

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #5f959a3decb82f53 — Environment-variable access.

repo/python/semantic_kernel/connectors/memory_stores/azure_cognitive_search/utils.py:47

    elif os.getenv(ENV_VAR_ENDPOINT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2bca5e7d4b6ed9b7 — Environment-variable access.

repo/python/semantic_kernel/connectors/memory_stores/azure_cognitive_search/utils.py:48

        service_endpoint = os.getenv(ENV_VAR_ENDPOINT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #beeec35990102d22 — Environment-variable access.

repo/python/semantic_kernel/connectors/memory_stores/azure_cognitive_search/utils.py:63

    elif os.getenv(ENV_VAR_API_KEY):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce438e18ea31d8d6 — Environment-variable access.

repo/python/semantic_kernel/connectors/memory_stores/azure_cognitive_search/utils.py:64

        azure_credential = AzureKeyCredential(os.getenv(ENV_VAR_API_KEY))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #4d320ec46888bf3e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/semantic_kernel/connectors/utils/document_loader.py:39

                response = await client.get(url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #104799d9bc2c4a97 — Filesystem access.

repo/python/semantic_kernel/contents/audio_content.py:83

        with open(path, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1322736569d5ba4 — Filesystem access.

repo/python/semantic_kernel/contents/binary_content.py:206

        data = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #58d33bab552270be — Filesystem access.

repo/python/semantic_kernel/contents/binary_content.py:257

        with open(path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f88a9ba9f8199c5e — Filesystem access.

repo/python/semantic_kernel/contents/chat_history.py:422

        with open(file_path, "w") as local_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b7f278b12dd074fc — Filesystem access.

repo/python/semantic_kernel/contents/chat_history.py:437

        with open(file_path) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fbff6bd99925a633 — Filesystem access.

repo/python/semantic_kernel/contents/image_content.py:100

        with open(path, "rb") as image_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #6c6aba4214bee371 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/semantic_kernel/core_plugins/crew_ai/crew_ai_enterprise_client.py:47

            self.session.get(f"{self.endpoint}/inputs", headers=self.request_header) as response,  # type: ignore

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3342927152188bc6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/semantic_kernel/core_plugins/crew_ai/crew_ai_enterprise_client.py:77

            self.session.post(f"{self.endpoint}/kickoff", json=content, headers=self.request_header) as response,  # type: ignore

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #0482a2512d272c86 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/semantic_kernel/core_plugins/crew_ai/crew_ai_enterprise_client.py:93

            self.session.get(f"{self.endpoint}/status/{task_id}", headers=self.request_header) as response,  # type: ignore

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #375af1ae60102f06 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/semantic_kernel/core_plugins/http_plugin.py:150

            session.get(url, raise_for_status=True, allow_redirects=self._allow_redirects) as response,

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #34b5a190e26a683e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/semantic_kernel/core_plugins/http_plugin.py:174

            session.post(
                url, headers=headers, data=data, raise_for_status=True, allow_redirects=self._allow_redirects
            ) as response,

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #a4d3fc7210de0478 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/semantic_kernel/core_plugins/http_plugin.py:201

            session.put(
                url, headers=headers, data=data, raise_for_status=True, allow_redirects=self._allow_redirects
            ) as response,

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #fd032c8bd1a77891 — Filesystem access.

repo/python/semantic_kernel/core_plugins/sessions_python_tool/sessions_python_plugin.py:372

            with open(validated_path, "rb") as data:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9bb735deaeeb6e7d — Filesystem access.

repo/python/semantic_kernel/core_plugins/sessions_python_tool/sessions_python_plugin.py:457

                with open(validated_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2fe7d541d5f799b — Filesystem access.

repo/python/semantic_kernel/functions/kernel_function_from_prompt.py:399

        with open(config_path, encoding=encoding) as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #686cfb5ef49e9859 — Filesystem access.

repo/python/semantic_kernel/functions/kernel_function_from_prompt.py:403

        with open(prompt_path, encoding=encoding) as prompt_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d9a552b190da8b17 — Filesystem access.

repo/python/semantic_kernel/functions/kernel_plugin.py:322

                with open(object, encoding=encoding) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d74126d889db0d69 — Filesystem access.

repo/python/semantic_kernel/processes/kernel_process/kernel_process_step_state_metadata.py:69

            with open(file_path, encoding=encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c6b1683889c2c9ec — Environment-variable access.

repo/python/semantic_kernel/utils/telemetry/user_agent.py:12

IS_TELEMETRY_ENABLED = os.environ.get(TELEMETRY_DISABLED_ENV_VAR, "false").lower() not in ["true", "1"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): python/samples/demos/mcp_with_oauth/server

python first-party

expand_more 1 low-confidence finding(s)

low egress test-only Excluded from app score #5e6e93b070880eb7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/python/samples/demos/mcp_with_oauth/server/mcp_simple_auth/token_verifier.py:54

                response = await client.post(
                    self.introspection_endpoint,
                    data={"token": token},
                    headers={"Content-Type": "application/x-www-form-urlencoded"},
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

</> Dependencies

opentelemetry-sdk

python dependency

medium telemetry dependency Excluded from app score #1bb67d8d347805d1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:20

from opentelemetry._logs import set_logger_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #524db18a662b730a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:21

from opentelemetry.environment_variables import (
    OTEL_LOGS_EXPORTER,
    OTEL_METRICS_EXPORTER,
    OTEL_PYTHON_ID_GENERATOR,
    OTEL_TRACES_EXPORTER,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ed3dd2c02582c1bc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:27

from opentelemetry.metrics import set_meter_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b27d73ea26743b5d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:28

from opentelemetry.sdk._logs import (
    LoggerProvider,
    LoggingHandler,
    LogRecordProcessor,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d31f39dedaf835ab — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:33

from opentelemetry.sdk._logs._internal import _LoggerConfiguratorT

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1119cd31b69133c1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:34

from opentelemetry.sdk._logs.export import (
    BatchLogRecordProcessor,
    LogRecordExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #808dee21cd2e4b5e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:38

from opentelemetry.sdk.environment_variables import (
    _OTEL_PYTHON_LOGGING_AUTO_INSTRUMENTATION_ENABLED,
    OTEL_CONFIG_FILE,
    OTEL_EXPORTER_OTLP_LOGS_PROTOCOL,
    OTEL_EXPORTER_OTLP_METRICS_PROTOCOL,
    OTEL_EXPORTER_OTLP_PROTOCOL,
    OTEL_EXPORTER_OTLP_TRACES_PROTOCOL,
    OTEL_PYTHON_LOGGER_CONFIGURATOR,
    OTEL_PYTHON_METER_CONFIGURATOR,
    OTEL_PYTHON_TRACER_CONFIGURATOR,
    OTEL_TRACES_SAMPLER,
    OTEL_TRACES_SAMPLER_ARG,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #edbcf5e9f9d22734 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:51

from opentelemetry.sdk.metrics import MeterProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #37d97c7793d80f83 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:52

from opentelemetry.sdk.metrics._internal import _MeterConfiguratorT

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8b74cfdf0b490149 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:53

from opentelemetry.sdk.metrics.export import (
    MetricExporter,
    MetricReader,
    PeriodicExportingMetricReader,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #69d892687d4d8e44 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:58

from opentelemetry.sdk.resources import Attributes, Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #020050ccb7ae73c5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:59

from opentelemetry.sdk.trace import (
    SpanProcessor,
    TracerProvider,
    _TracerConfiguratorT,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #268dd6c95485a6a1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:64

from opentelemetry.sdk.trace.export import BatchSpanProcessor, SpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3b8decaa3b8e0a8b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:65

from opentelemetry.sdk.trace.id_generator import IdGenerator

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #841fbbe401aabbbe — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:66

from opentelemetry.sdk.trace.sampling import Sampler

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2a8002f77141aa70 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:67

from opentelemetry.semconv.resource import ResourceAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2ecd80c84de85751 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:68

from opentelemetry.trace import set_tracer_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5751af6ac5530786 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:69

from opentelemetry.util._importlib_metadata import entry_points

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #28fa171736540304 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:721

                from opentelemetry.configuration import (  # noqa: PLC0415
                    configure_sdk,
                    load_config_file,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a8fd1420263a6a85 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/__init__.py:4

from opentelemetry.sdk._logs._internal import (
    ConcurrentMultiLogRecordProcessor,
    LogDroppedAttributesWarning,
    Logger,
    LoggerProvider,
    LoggingHandler,
    LogLimits,
    LogRecordDroppedAttributesWarning,
    LogRecordLimits,
    LogRecordProcessor,
    ReadableLogRecord,
    ReadWriteLogRecord,
    SynchronousMultiLogRecordProcessor,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6ce71623cf138752 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:29

from opentelemetry._logs import Logger as APILogger

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #63693756cc1aaf2d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:30

from opentelemetry._logs import LoggerProvider as APILoggerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #dedca1d48bdf3da5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:31

from opentelemetry._logs import (
    LogRecord,
    NoOpLogger,
    SeverityNumber,
    get_logger,
    get_logger_provider,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b4c93d9c7de6eeb3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:38

from opentelemetry.attributes import _VALID_ANY_VALUE_TYPES, BoundedAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #abb92e97caf0f2ac — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:39

from opentelemetry.context import get_current

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #15591692395f5ef9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:40

from opentelemetry.context.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #20b096e26ea19ff0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:41

from opentelemetry.metrics import MeterProvider, get_meter_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cec2b167bf667e04 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:42

from opentelemetry.sdk._logs._internal._exceptions import (
    _copy_log_record_with_exception,
    _create_log_record_with_exception,
    _set_log_record_exception_attributes,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d611835fc8963def — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:47

from opentelemetry.sdk._logs._internal._logger_metrics import (
    LoggerMetricsT,
    create_logger_metrics,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b9cf260d267ff90e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:51

from opentelemetry.sdk.environment_variables import (
    OTEL_ATTRIBUTE_COUNT_LIMIT,
    OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT,
    OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT,
    OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT,
    OTEL_PYTHON_SDK_INTERNAL_METRICS_ENABLED,
    OTEL_SDK_DISABLED,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c3655e341af32d41 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:59

from opentelemetry.sdk.environment_variables._internal import (
    parse_boolean_environment_variable,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #780be946bf66a84c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:62

from opentelemetry.sdk.resources import (
    Resource,
    _get_process_dependent_resource,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c0d67be8d6516fc1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:66

from opentelemetry.sdk.util import ns_to_iso_str

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f1b79d59ea365fd9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:67

from opentelemetry.sdk.util._configurator import RuleBasedConfigurator

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c76a20ed44339289 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:68

from opentelemetry.sdk.util.instrumentation import (
    InstrumentationScope,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5c21f270488362c4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:71

from opentelemetry.semconv._incubating.attributes import code_attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e136fc92a43dd935 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:72

from opentelemetry.semconv.attributes import exception_attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3fa49e46d2215dcb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:73

from opentelemetry.trace import (
    format_span_id,
    format_trace_id,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6e8442fd3da4f328 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:77

from opentelemetry.util.types import AnyValue, _ExtendedAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9e2cd238bbd84bb4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/_exceptions.py:7

from opentelemetry._logs import LogRecord

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2a2ccda389e9aa3d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/_exceptions.py:8

from opentelemetry.attributes import BoundedAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a2e801527a14d337 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/_exceptions.py:9

from opentelemetry.semconv.attributes import exception_attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #28739cbbe7f4eeef — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/_exceptions.py:10

from opentelemetry.util.types import AnyValue, _ExtendedAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0516f0d65a29e941 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/_logger_metrics.py:6

from opentelemetry import metrics as metrics_api

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cafbdc3efa71970d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/_logger_metrics.py:7

from opentelemetry.semconv._incubating.metrics.otel_metrics import (
    create_otel_sdk_log_created,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1b6d086f51693363 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:16

from opentelemetry.context import (
    _ON_EMIT_RECURSION_COUNT_KEY,
    _SUPPRESS_INSTRUMENTATION_KEY,
    Context,
    attach,
    detach,
    get_value,
    set_value,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a3836a8efd9de96b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:25

from opentelemetry.metrics import MeterProvider, get_meter_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #171f1cadd0eff81a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:26

from opentelemetry.sdk._logs import (
    LogRecordProcessor,
    ReadableLogRecord,
    ReadWriteLogRecord,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d21390c8c5500b29 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:31

from opentelemetry.sdk._shared_internal import (
    BatchProcessor,
    DuplicateFilter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d357abbfe5ec37b7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:35

from opentelemetry.sdk._shared_internal._processor_metrics import (
    create_processor_metrics,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #34fb3a1a31f66c79 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:38

from opentelemetry.sdk.environment_variables import (
    OTEL_BLRP_EXPORT_TIMEOUT,
    OTEL_BLRP_MAX_EXPORT_BATCH_SIZE,
    OTEL_BLRP_MAX_QUEUE_SIZE,
    OTEL_BLRP_SCHEDULE_DELAY,
    OTEL_PYTHON_SDK_INTERNAL_METRICS_ENABLED,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #19c2560973666fcb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:45

from opentelemetry.sdk.environment_variables._internal import (
    parse_boolean_environment_variable,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b334b53bb9c96400 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:48

from opentelemetry.sdk.resources import Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3607149dede98859 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:49

from opentelemetry.semconv._incubating.attributes.otel_attributes import (
    OtelComponentTypeValues,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #67e1da0a91f6ed05 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/in_memory_log_exporter.py:9

from opentelemetry.sdk._logs import ReadableLogRecord

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #765ee0e96c9152e2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/in_memory_log_exporter.py:10

from opentelemetry.sdk._logs.export import (
    LogRecordExporter,
    LogRecordExportResult,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9a3cd9e380f601e8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/export/__init__.py:4

from opentelemetry.sdk._logs._internal.export import (
    BatchLogRecordProcessor,
    ConsoleLogExporter,
    ConsoleLogRecordExporter,
    LogExporter,
    LogExportResult,
    LogRecordExporter,
    LogRecordExportResult,
    SimpleLogRecordProcessor,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #19eb776a660c852a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/export/__init__.py:16

from opentelemetry.sdk._logs._internal.export.in_memory_log_exporter import (
    InMemoryLogExporter,
    InMemoryLogRecordExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3d9779ec82cbc074 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_shared_internal/__init__.py:21

from opentelemetry.context import (
    _SUPPRESS_INSTRUMENTATION_KEY,
    attach,
    detach,
    set_value,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #83a2ecc038ae3b0b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_shared_internal/__init__.py:27

from opentelemetry.sdk._shared_internal._processor_metrics import (
    ProcessorMetricsT,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b1f43358fc5afb79 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_shared_internal/__init__.py:30

from opentelemetry.util._once import Once

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #06b2cc2dc00ee061 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_shared_internal/_processor_metrics.py:10

from opentelemetry.metrics import CallbackOptions, MeterProvider, Observation

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2acba01e3b7dc06b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_shared_internal/_processor_metrics.py:11

from opentelemetry.semconv._incubating.attributes.otel_attributes import (
    OTEL_COMPONENT_NAME,
    OTEL_COMPONENT_TYPE,
    OtelComponentTypeValues,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cc74a8a2f18c5623 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_shared_internal/_processor_metrics.py:16

from opentelemetry.semconv._incubating.metrics.otel_metrics import (
    OTEL_SDK_PROCESSOR_LOG_QUEUE_SIZE,
    OTEL_SDK_PROCESSOR_SPAN_QUEUE_SIZE,
    create_otel_sdk_processor_log_processed,
    create_otel_sdk_processor_log_queue_capacity,
    create_otel_sdk_processor_span_processed,
    create_otel_sdk_processor_span_queue_capacity,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8fc90646ce6e5b28 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/_shared_internal/_processor_metrics.py:24

from opentelemetry.semconv.attributes.error_attributes import ERROR_TYPE

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9e1ac948f1e1e294 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/error_handler/__init__.py:54

from opentelemetry.util._importlib_metadata import entry_points

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #016c08078ce193d7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/__init__.py:5

from opentelemetry.sdk.metrics import export, view

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f69223b1f4d4ab56 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/__init__.py:6

from opentelemetry.sdk.metrics._internal import Meter, MeterProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1739817886db76cd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/__init__.py:7

from opentelemetry.sdk.metrics._internal.exceptions import MetricsTimeoutError

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f47580d628a2a4f2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/__init__.py:8

from opentelemetry.sdk.metrics._internal.exemplar import (
    AlignedHistogramBucketExemplarReservoir,
    AlwaysOffExemplarFilter,
    AlwaysOnExemplarFilter,
    Exemplar,
    ExemplarFilter,
    ExemplarReservoir,
    SimpleFixedSizeExemplarReservoir,
    TraceBasedExemplarFilter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bf6961ac83ff1817 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/__init__.py:18

from opentelemetry.sdk.metrics._internal.instrument import (
    Counter,
    Histogram,
    ObservableCounter,
    ObservableGauge,
    ObservableUpDownCounter,
    UpDownCounter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2dbc11ecb7b63800 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/__init__.py:26

from opentelemetry.sdk.metrics._internal.instrument import Gauge as _Gauge

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e28a5e2f9aa18109 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:15

import opentelemetry.sdk.metrics

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ae029ab27b292b80 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:16

from opentelemetry.metrics import Counter as APICounter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #824b45bf137b63d4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:17

from opentelemetry.metrics import Histogram as APIHistogram

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #406b919c783d10b9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:18

from opentelemetry.metrics import Meter as APIMeter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9edd6e3abaabc5d6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:19

from opentelemetry.metrics import MeterProvider as APIMeterProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #32a79066baa5c2e9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:20

from opentelemetry.metrics import NoOpMeter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0b8c7009f7dad009 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:21

from opentelemetry.metrics import ObservableCounter as APIObservableCounter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #31b33f28ad4d0784 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:22

from opentelemetry.metrics import ObservableGauge as APIObservableGauge

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #dffb2403a21f70c6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:23

from opentelemetry.metrics import (
    ObservableUpDownCounter as APIObservableUpDownCounter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0e15f7d068f5f1d4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:26

from opentelemetry.metrics import UpDownCounter as APIUpDownCounter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6e1a2e8bf99b3820 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:27

from opentelemetry.metrics import _Gauge as APIGauge

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e48d155803089113 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:28

from opentelemetry.sdk.environment_variables import (
    OTEL_METRICS_EXEMPLAR_FILTER,
    OTEL_SDK_DISABLED,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b4694aff5852cfd6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:32

from opentelemetry.sdk.metrics._internal.exceptions import MetricsTimeoutError

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3b69c33167470643 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:33

from opentelemetry.sdk.metrics._internal.exemplar import (
    AlwaysOffExemplarFilter,
    AlwaysOnExemplarFilter,
    ExemplarFilter,
    TraceBasedExemplarFilter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0320ff6bd7dbe3db — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:39

from opentelemetry.sdk.metrics._internal.instrument import (
    _Counter,
    _Gauge,
    _Histogram,
    _ObservableCounter,
    _ObservableGauge,
    _ObservableUpDownCounter,
    _UpDownCounter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #81c0ae085eeab7ce — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:48

from opentelemetry.sdk.metrics._internal.measurement_consumer import (
    MeasurementConsumer,
    SynchronousMeasurementConsumer,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f052d1733bae603f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:52

from opentelemetry.sdk.metrics._internal.sdk_configuration import (
    SdkConfiguration,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ae11e355a1d0ebfa — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:55

from opentelemetry.sdk.resources import (
    Resource,
    _get_process_dependent_resource,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #588ec0399bd84dbd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:59

from opentelemetry.sdk.util._configurator import RuleBasedConfigurator

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a720f2f85f4358a9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:60

from opentelemetry.sdk.util.instrumentation import (
    InstrumentationScope,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #002f4bab43cf380a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:63

from opentelemetry.util._once import Once

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #649bd102e4bd6b07 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:64

from opentelemetry.util.types import (
    Attributes,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7fe05a8f0a7faa8a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/_view_instrument_match.py:11

from opentelemetry.sdk.metrics._internal.aggregation import (
    Aggregation,
    AggregationTemporality,
    DefaultAggregation,
    _Aggregation,
    _SumAggregation,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d1a75af3976135a0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/_view_instrument_match.py:18

from opentelemetry.sdk.metrics._internal.instrument import _Instrument

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c9afb4ddd515cd8c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/_view_instrument_match.py:19

from opentelemetry.sdk.metrics._internal.measurement import Measurement

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9ec5fa8de33130a7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/_view_instrument_match.py:20

from opentelemetry.sdk.metrics._internal.point import DataPointT

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6dea4ce65e732110 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/_view_instrument_match.py:21

from opentelemetry.sdk.metrics._internal.view import View

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ef1841dd60a6517e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/aggregation.py:20

from opentelemetry.metrics import (
    Asynchronous,
    Counter,
    Histogram,
    ObservableCounter,
    ObservableGauge,
    ObservableUpDownCounter,
    Synchronous,
    UpDownCounter,
    _Gauge,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b124aa1149d50791 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/aggregation.py:31

from opentelemetry.sdk.metrics._internal.exemplar import (
    Exemplar,
    ExemplarReservoirBuilder,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #66225c881de261a3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/aggregation.py:35

from opentelemetry.sdk.metrics._internal.exponential_histogram.buckets import (
    Buckets,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #43c2cb1fde9a3eca — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/aggregation.py:38

from opentelemetry.sdk.metrics._internal.exponential_histogram.mapping import (
    Mapping,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c02cd6cc4482c3c5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/aggregation.py:41

from opentelemetry.sdk.metrics._internal.exponential_histogram.mapping.exponent_mapping import (
    ExponentMapping,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3eaefed790ca4ed8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/aggregation.py:44

from opentelemetry.sdk.metrics._internal.exponential_histogram.mapping.logarithm_mapping import (
    LogarithmMapping,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6db0f4677f7b8084 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/aggregation.py:47

from opentelemetry.sdk.metrics._internal.instrument import _Instrument

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fcbdf9643c025ed8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/aggregation.py:48

from opentelemetry.sdk.metrics._internal.measurement import Measurement

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8341e2a4dfdd39be — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/aggregation.py:49

from opentelemetry.sdk.metrics._internal.point import Buckets as BucketsPoint

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9962ef13b17617f9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/aggregation.py:50

from opentelemetry.sdk.metrics._internal.point import (
    ExponentialHistogramDataPoint,
    HistogramDataPoint,
    NumberDataPoint,
    Sum,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #057c9a54cf25dddc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/aggregation.py:56

from opentelemetry.sdk.metrics._internal.point import Gauge as GaugePoint

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b0082f4f3c60b46c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/aggregation.py:57

from opentelemetry.sdk.metrics._internal.point import (
    Histogram as HistogramPoint,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c847af7c54b23a9a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/aggregation.py:60

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8390f8a99ff79d18 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exemplar/exemplar.py:6

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #48ceb6aded69f3b7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exemplar/exemplar_filter.py:6

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b882aeea9b302d99 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exemplar/exemplar_filter.py:7

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #66c772ff24aaa5df — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exemplar/exemplar_filter.py:8

from opentelemetry.trace.span import INVALID_SPAN

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #547c18e12b74490a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exemplar/exemplar_filter.py:9

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #aa851b88afdf1956 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exemplar/exemplar_reservoir.py:12

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b3c98142c618f2a6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exemplar/exemplar_reservoir.py:13

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8cb9eaf149cf267a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exemplar/exemplar_reservoir.py:14

from opentelemetry.trace.span import INVALID_SPAN

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0cb4256cca31ba8e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exemplar/exemplar_reservoir.py:15

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f1c7112c149b0103 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exponential_histogram/mapping/exponent_mapping.py:7

from opentelemetry.sdk.metrics._internal.exponential_histogram.mapping import (
    Mapping,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0c9782d2fecb67e8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exponential_histogram/mapping/exponent_mapping.py:10

from opentelemetry.sdk.metrics._internal.exponential_histogram.mapping.errors import (
    MappingOverflowError,
    MappingUnderflowError,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #82931e0fb5a06444 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exponential_histogram/mapping/exponent_mapping.py:14

from opentelemetry.sdk.metrics._internal.exponential_histogram.mapping.ieee_754 import (
    MANTISSA_WIDTH,
    MAX_NORMAL_EXPONENT,
    MIN_NORMAL_EXPONENT,
    MIN_NORMAL_VALUE,
    get_ieee_754_exponent,
    get_ieee_754_mantissa,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6c10d909bb2f1651 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exponential_histogram/mapping/logarithm_mapping.py:7

from opentelemetry.sdk.metrics._internal.exponential_histogram.mapping import (
    Mapping,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #16ad81fcc4aab44b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exponential_histogram/mapping/logarithm_mapping.py:10

from opentelemetry.sdk.metrics._internal.exponential_histogram.mapping.errors import (
    MappingOverflowError,
    MappingUnderflowError,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b8f8cbc0321eeb3e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/exponential_histogram/mapping/logarithm_mapping.py:14

from opentelemetry.sdk.metrics._internal.exponential_histogram.mapping.ieee_754 import (
    MAX_NORMAL_EXPONENT,
    MIN_NORMAL_EXPONENT,
    MIN_NORMAL_VALUE,
    get_ieee_754_exponent,
    get_ieee_754_mantissa,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8d5dc95ccbb95093 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/__init__.py:21

import opentelemetry.sdk.metrics._internal

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #618b901321c0c468 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/__init__.py:22

from opentelemetry.context import (
    _SUPPRESS_INSTRUMENTATION_KEY,
    attach,
    detach,
    set_value,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #71c337e45c06cdd0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/__init__.py:28

from opentelemetry.metrics import MeterProvider, NoOpMeterProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #67a07977b1adbdbb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/__init__.py:29

from opentelemetry.sdk.environment_variables import (
    OTEL_METRIC_EXPORT_INTERVAL,
    OTEL_METRIC_EXPORT_TIMEOUT,
    OTEL_PYTHON_SDK_INTERNAL_METRICS_ENABLED,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bfde910f83a7f1de — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/__init__.py:34

from opentelemetry.sdk.environment_variables._internal import (
    parse_boolean_environment_variable,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9dc359d60bddf4d4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/__init__.py:37

from opentelemetry.sdk.metrics._internal.aggregation import (
    AggregationTemporality,
    DefaultAggregation,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d911775555c815cf — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/__init__.py:41

from opentelemetry.sdk.metrics._internal.exceptions import MetricsTimeoutError

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #be306bba6e2b42a8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/__init__.py:42

from opentelemetry.sdk.metrics._internal.instrument import (
    Counter,
    Gauge,
    Histogram,
    ObservableCounter,
    ObservableGauge,
    ObservableUpDownCounter,
    UpDownCounter,
    _Counter,
    _Gauge,
    _Histogram,
    _ObservableCounter,
    _ObservableGauge,
    _ObservableUpDownCounter,
    _UpDownCounter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ef62eacca75fab41 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/__init__.py:58

from opentelemetry.sdk.metrics._internal.point import MetricsData

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0441a4c952817219 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/__init__.py:59

from opentelemetry.semconv._incubating.attributes.otel_attributes import (
    OtelComponentTypeValues,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9089d33412642f9b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/__init__.py:62

from opentelemetry.util._once import Once

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #833625b5221cac04 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/_metric_reader_metrics.py:7

from opentelemetry.metrics import MeterProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c43f0a94fafbe9a3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/_metric_reader_metrics.py:8

from opentelemetry.semconv._incubating.attributes.otel_attributes import (
    OTEL_COMPONENT_NAME,
    OTEL_COMPONENT_TYPE,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9992adbd0fd1a76c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/_metric_reader_metrics.py:12

from opentelemetry.semconv._incubating.metrics.otel_metrics import (
    create_otel_sdk_metric_reader_collection_duration,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b7adf3193ce3b26c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:19

from opentelemetry.context import Context, get_current

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #23e93e8ef2d0bb71 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:20

from opentelemetry.metrics import Asynchronous, CallbackT, Synchronous

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d4a7f00bbaf121fb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:21

from opentelemetry.metrics import Counter as APICounter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #67ff65ba5e3046c2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:22

from opentelemetry.metrics import Histogram as APIHistogram

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #85e6fb2ef35c7f8f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:23

from opentelemetry.metrics import ObservableCounter as APIObservableCounter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e12c8978721fa306 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:24

from opentelemetry.metrics import ObservableGauge as APIObservableGauge

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2969184d7aa3634a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:25

from opentelemetry.metrics import (
    ObservableUpDownCounter as APIObservableUpDownCounter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f3dd2e9af850296e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:28

from opentelemetry.metrics import UpDownCounter as APIUpDownCounter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7df2257ab024e985 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:29

from opentelemetry.metrics import _Gauge as APIGauge

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #12851d4cb00de549 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:30

from opentelemetry.metrics._internal.instrument import (
    CallbackOptions,
    _MetricsHistogramAdvisory,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4b02b450793c4db1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:34

from opentelemetry.sdk.metrics._internal.measurement import Measurement

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #08f343e146dfe378 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:37

    from opentelemetry.sdk.metrics._internal import (
        _ProxyMeterConfig,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fc229d596a17be19 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:40

    from opentelemetry.sdk.metrics._internal.measurement_consumer import (
        MeasurementConsumer,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fbf1eab8e07c3c5e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/instrument.py:43

    from opentelemetry.sdk.util.instrumentation import InstrumentationScope

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d369b6a882dbcaa6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/measurement.py:9

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #822eba2fc6619d1b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/measurement.py:10

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #df38bc9b939e18ae — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/measurement.py:13

    from opentelemetry.sdk.metrics._internal.instrument import _Instrument

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4c09a3ba84475a10 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/measurement_consumer.py:12

import opentelemetry.sdk.metrics

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #93f1ea637c15e89f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/measurement_consumer.py:13

import opentelemetry.sdk.metrics._internal.instrument

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #44de5b7a4bf682eb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/measurement_consumer.py:14

from opentelemetry.metrics._internal.instrument import CallbackOptions

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e348acae93ef8c63 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/measurement_consumer.py:15

from opentelemetry.sdk.metrics._internal.exceptions import MetricsTimeoutError

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f74971eb6f65e64c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/measurement_consumer.py:16

from opentelemetry.sdk.metrics._internal.measurement import Measurement

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b54b150ae6ccb220 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/measurement_consumer.py:17

from opentelemetry.sdk.metrics._internal.metric_reader_storage import (
    MetricReaderStorage,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #dfe7bc782b55f5c5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/measurement_consumer.py:20

from opentelemetry.sdk.metrics._internal.point import MetricsData

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1d070ce19ea5b0a1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/metric_reader_storage.py:8

from opentelemetry.metrics import (
    Asynchronous,
    Counter,
    ObservableCounter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f7a55df6aab9e935 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/metric_reader_storage.py:13

from opentelemetry.sdk.metrics._internal._view_instrument_match import (
    _ViewInstrumentMatch,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bcbd5f102ceeb7bf — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/metric_reader_storage.py:16

from opentelemetry.sdk.metrics._internal.aggregation import (
    Aggregation,
    AggregationTemporality,
    ExplicitBucketHistogramAggregation,
    _DropAggregation,
    _ExplicitBucketHistogramAggregation,
    _ExponentialBucketHistogramAggregation,
    _LastValueAggregation,
    _SumAggregation,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0b6c1168d7695345 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/metric_reader_storage.py:26

from opentelemetry.sdk.metrics._internal.instrument import _Instrument

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #87c60e3b3f4ff043 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/metric_reader_storage.py:27

from opentelemetry.sdk.metrics._internal.measurement import Measurement

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7d42bd5ccbc914ec — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/metric_reader_storage.py:28

from opentelemetry.sdk.metrics._internal.point import (
    ExponentialHistogram,
    Gauge,
    Histogram,
    Metric,
    MetricsData,
    ResourceMetrics,
    ScopeMetrics,
    Sum,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7201b804d5e4991a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/metric_reader_storage.py:38

from opentelemetry.sdk.metrics._internal.sdk_configuration import (
    SdkConfiguration,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #eb1d45d114f493e5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/metric_reader_storage.py:41

from opentelemetry.sdk.metrics._internal.view import View

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f7f5eeebfe4adf92 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/metric_reader_storage.py:42

from opentelemetry.sdk.util.instrumentation import InstrumentationScope

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6dc047fb652d5b13 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/point.py:11

import opentelemetry.sdk.metrics._internal

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6e2e480a373297d2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/point.py:12

from opentelemetry.sdk.metrics._internal.exemplar import Exemplar

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b2c197e62e7588bd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/point.py:13

from opentelemetry.sdk.resources import Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2682d150a712c423 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/point.py:14

from opentelemetry.sdk.util.instrumentation import InstrumentationScope

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #48c9d7686b517a4d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/point.py:15

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9c0abc423da7ad9a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/sdk_configuration.py:10

import opentelemetry.sdk.metrics

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #198b135941a49439 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/sdk_configuration.py:11

import opentelemetry.sdk.resources

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #af9c749f02aab312 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/view.py:9

from opentelemetry.metrics import Instrument

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b0800d2784ad9e8b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/view.py:10

from opentelemetry.sdk.metrics._internal.aggregation import (
    Aggregation,
    DefaultAggregation,
    _Aggregation,
    _ExplicitBucketHistogramAggregation,
    _ExponentialBucketHistogramAggregation,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #83a6db8ce9819733 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/view.py:17

from opentelemetry.sdk.metrics._internal.exemplar import (
    AlignedHistogramBucketExemplarReservoir,
    ExemplarReservoirBuilder,
    SimpleFixedSizeExemplarReservoir,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #31ae1f80b3a6989a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/view.py:22

from opentelemetry.sdk.metrics._internal.instrument import _Instrument

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9a27352f6c48641b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/export/__init__.py:5

from opentelemetry.sdk.metrics._internal.aggregation import (
    AggregationTemporality,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d558a82d91c5078c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/export/__init__.py:8

from opentelemetry.sdk.metrics._internal.export import (
    ConsoleMetricExporter,
    InMemoryMetricReader,
    MetricExporter,
    MetricExportResult,
    MetricReader,
    PeriodicExportingMetricReader,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #85320590eaa93e3b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/export/__init__.py:18

from opentelemetry.sdk.metrics._internal.point import (  # noqa: F401
    Buckets,
    DataPointT,
    DataT,
    ExponentialHistogram,
    ExponentialHistogramDataPoint,
    Gauge,
    Histogram,
    HistogramDataPoint,
    Metric,
    MetricsData,
    NumberDataPoint,
    ResourceMetrics,
    ScopeMetrics,
    Sum,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b7803980bb0c4627 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/view/__init__.py:4

from opentelemetry.sdk.metrics._internal.aggregation import (
    Aggregation,
    DefaultAggregation,
    DropAggregation,
    ExplicitBucketHistogramAggregation,
    ExponentialBucketHistogramAggregation,
    LastValueAggregation,
    SumAggregation,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fe80c29667917977 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/view/__init__.py:13

from opentelemetry.sdk.metrics._internal.view import View

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f759a27ce1e8c5a4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/resources/__init__.py:67

from opentelemetry.attributes import BoundedAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #987e052f9b32cf54 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/resources/__init__.py:68

from opentelemetry.sdk.environment_variables import (
    OTEL_EXPERIMENTAL_RESOURCE_DETECTORS,
    OTEL_RESOURCE_ATTRIBUTES,
    OTEL_SERVICE_NAME,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2f04d68633518ffe — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/resources/__init__.py:73

from opentelemetry.sdk.version import (
    __version__ as _OPENTELEMETRY_SDK_VERSION,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0e35b7e0d52b6363 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/resources/__init__.py:76

from opentelemetry.semconv.resource import ResourceAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e8b75853188de24f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/resources/__init__.py:77

from opentelemetry.util.types import AttributeValue

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #77e1e00abc80f382 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/resources/__init__.py:571

    from opentelemetry.util._importlib_metadata import (  # noqa: PLC0415
        entry_points,  # type: ignore[reportUnknownVariableType]

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a08c1da7f15862df — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:33

from opentelemetry import context as context_api

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c513d691a2dc6834 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:34

from opentelemetry import metrics as metrics_api

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c0e5959f1565aa15 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:35

from opentelemetry import trace as trace_api

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d48663348db16ecc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:36

from opentelemetry.attributes import BoundedAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3e084163a05556da — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:37

from opentelemetry.sdk import util

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f3824e8f5afe06f1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:38

from opentelemetry.sdk.environment_variables import (
    OTEL_ATTRIBUTE_COUNT_LIMIT,
    OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT,
    OTEL_EVENT_ATTRIBUTE_COUNT_LIMIT,
    OTEL_LINK_ATTRIBUTE_COUNT_LIMIT,
    OTEL_PYTHON_SDK_INTERNAL_METRICS_ENABLED,
    OTEL_SDK_DISABLED,
    OTEL_SPAN_ATTRIBUTE_COUNT_LIMIT,
    OTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMIT,
    OTEL_SPAN_EVENT_COUNT_LIMIT,
    OTEL_SPAN_LINK_COUNT_LIMIT,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a94d9085ceb4ddee — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:50

from opentelemetry.sdk.environment_variables._internal import (
    parse_boolean_environment_variable,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5d9f1a8b979179fe — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:53

from opentelemetry.sdk.resources import (
    Resource,
    _get_process_dependent_resource,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #30a399aef2046105 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:57

from opentelemetry.sdk.trace import sampling

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1e4b7f805bcb8146 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:58

from opentelemetry.sdk.trace._tracer_metrics import create_tracer_metrics

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e5e44e52dc1509b0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:59

from opentelemetry.sdk.trace.id_generator import IdGenerator, RandomIdGenerator

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #88b4f96f849f05ab — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:60

from opentelemetry.sdk.util import BoundedList

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5b64049b8cea7e0b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:61

from opentelemetry.sdk.util._configurator import RuleBasedConfigurator

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #27ad8a99f3d50ceb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:62

from opentelemetry.sdk.util.instrumentation import (
    InstrumentationInfo,
    InstrumentationScope,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5c84ad1254766cf4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:66

from opentelemetry.semconv.attributes.exception_attributes import (
    EXCEPTION_ESCAPED,
    EXCEPTION_MESSAGE,
    EXCEPTION_STACKTRACE,
    EXCEPTION_TYPE,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1cc7f3084fa650fe — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:72

from opentelemetry.trace import NoOpTracer, SpanContext

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ab7021e14fb17395 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:73

from opentelemetry.trace.status import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d4ec7efae4a890d7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:74

from opentelemetry.util import types

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #360a75f50fd5f23b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:75

from opentelemetry.util._decorator import _agnosticcontextmanager

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4bc9c1e04f1cc562 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_always_off.py:8

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3c0857574ec29b7d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_always_off.py:9

from opentelemetry.trace import Link, SpanKind, TraceState

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6af03fa571b68f82 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_always_off.py:10

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #310f78b9308b1475 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_always_on.py:8

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a6eaf9762e9a83b6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_always_on.py:9

from opentelemetry.trace import Link, SpanKind, TraceState

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #61398807879e5539 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_always_on.py:10

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2187d7ff48925962 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_composable.py:10

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #48a1a915173937a4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_composable.py:11

from opentelemetry.trace import Link, SpanKind, TraceState

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d60c0b3e6fa3e5fe — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_composable.py:12

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4d0b57fa34129ea2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_parent_threshold.py:8

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bca5e2e80f98c68d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_parent_threshold.py:9

from opentelemetry.trace import Link, SpanKind, TraceState, get_current_span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9c3714f6ca7d5827 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_parent_threshold.py:10

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7fd184f911bf3919 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_rule_based.py:11

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ee074fc26c0d8f63 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_rule_based.py:12

from opentelemetry.trace import (
    Link,
    SpanKind,
    TraceState,
    get_current_span,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5db2cc7b036f799e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_rule_based.py:18

from opentelemetry.util.types import AnyValue, Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c74ea7d19c63b73b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_sampler.py:8

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #876a6f7c49e5f6ea — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_sampler.py:9

from opentelemetry.sdk.trace.sampling import Decision, Sampler, SamplingResult

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #36736608101e2cc3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_sampler.py:10

from opentelemetry.trace import Link, SpanKind, TraceState

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #794de2409e1aa887 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_sampler.py:11

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ecd59efbdb4c5fde — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_trace_state.py:9

from opentelemetry.trace import TraceState

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4882e9910927f8ea — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_traceid_ratio.py:8

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #60c1024ffd5ced42 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_traceid_ratio.py:9

from opentelemetry.trace import Link, SpanKind, TraceState

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6b1c94beca9d866d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_sampling_experimental/_traceid_ratio.py:10

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #92fce70056b78f18 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_tracer_metrics.py:9

from opentelemetry import metrics as metrics_api

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0dfbb01def360fbc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_tracer_metrics.py:10

from opentelemetry.sdk.trace.sampling import Decision

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #18235d32cf6a83ab — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_tracer_metrics.py:11

from opentelemetry.semconv._incubating.attributes.otel_attributes import (
    OTEL_SPAN_PARENT_ORIGIN,
    OTEL_SPAN_SAMPLING_RESULT,
    OtelSpanSamplingResultValues,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #da2d2e931f8ac947 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_tracer_metrics.py:16

from opentelemetry.semconv._incubating.metrics.otel_metrics import (
    create_otel_sdk_span_live,
    create_otel_sdk_span_started,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #454980f4dd676f82 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/_tracer_metrics.py:20

from opentelemetry.trace.span import SpanContext

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f734c41d84590abc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:12

from opentelemetry.context import (
    _SUPPRESS_INSTRUMENTATION_KEY,
    Context,
    attach,
    detach,
    set_value,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4762cad89a597755 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:19

from opentelemetry.metrics import MeterProvider, get_meter_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fb45779a9be17e68 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:20

from opentelemetry.sdk._shared_internal import (
    BatchProcessor,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #197094eae297a977 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:23

from opentelemetry.sdk._shared_internal._processor_metrics import (
    create_processor_metrics,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #646cac4d38e7b808 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:26

from opentelemetry.sdk.environment_variables import (
    OTEL_BSP_EXPORT_TIMEOUT,
    OTEL_BSP_MAX_EXPORT_BATCH_SIZE,
    OTEL_BSP_MAX_QUEUE_SIZE,
    OTEL_BSP_SCHEDULE_DELAY,
    OTEL_PYTHON_SDK_INTERNAL_METRICS_ENABLED,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0031955927e9316e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:33

from opentelemetry.sdk.environment_variables._internal import (
    parse_boolean_environment_variable,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1e85bc3585f76728 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:36

from opentelemetry.sdk.trace import ReadableSpan, Span, SpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e5910e33331e8b1a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:37

from opentelemetry.semconv._incubating.attributes.otel_attributes import (
    OtelComponentTypeValues,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3e394367c729c36f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/in_memory_span_exporter.py:8

from opentelemetry.sdk.trace import ReadableSpan

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9b3e33671a91c95a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/in_memory_span_exporter.py:9

from opentelemetry.sdk.trace.export import SpanExporter, SpanExportResult

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ef43526354163733 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/id_generator.py:7

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f7108ef7cbeb4071 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/sampling.py:135

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2be66b2d8abd5114 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/sampling.py:136

from opentelemetry.sdk.environment_variables import (
    OTEL_TRACES_SAMPLER,
    OTEL_TRACES_SAMPLER_ARG,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4ae3368cd96f59e5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/sampling.py:140

from opentelemetry.trace import Link, SpanKind, get_current_span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f3a44f467d334bf4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/sampling.py:141

from opentelemetry.trace.span import TraceState

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5a17a31cbe18c532 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/sampling.py:142

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0d5b2f186ed7aadb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/util/__init__.pyi:28

from opentelemetry.util.types import AttributesAsKey, AttributeValue

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e1c8c55d08049e82 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/util/_configurator.py:6

from opentelemetry.sdk.util.instrumentation import (
    InstrumentationScope,
    _InstrumentationScopePredicateT,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b889ec012dc11eae — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/util/instrumentation.py:9

from opentelemetry.attributes import BoundedAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #428cb3b5ebd01472 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/sdk/util/instrumentation.py:10

from opentelemetry.util.types import (  # TODO: see if we can remove F401 when using new sphinx version # noqa: F401 # pylint: disable=unused-import
    AnyValue,
    Attributes,
    _ExtendedAttributes,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 44 low-confidence finding(s)

low env_fs dependency Excluded from app score #72db7dd6dd713022 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:154

    return environ.get(OTEL_TRACES_SAMPLER, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2be27505e7e0229e — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:158

    return environ.get(OTEL_PYTHON_ID_GENERATOR, _DEFAULT_ID_GENERATOR)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cea610fe93d6d012 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:162

    return environ.get(OTEL_PYTHON_TRACER_CONFIGURATOR, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af8052f6b2932a36 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:166

    return environ.get(OTEL_PYTHON_METER_CONFIGURATOR, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24bbaf52ee0390ed — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:170

    return environ.get(OTEL_PYTHON_LOGGER_CONFIGURATOR, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51d7c07949c40653 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:184

    otlp_protocol = environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd105da717d56f45 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:184

    otlp_protocol = environ.get(
        _PROTOCOL_ENV_BY_SIGNAL_TYPE[signal_type]
    ) or environ.get(OTEL_EXPORTER_OTLP_PROTOCOL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57a29d345155eba0 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:186

    ) or environ.get(OTEL_EXPORTER_OTLP_PROTOCOL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #deb9e86f1c3b8cfb — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:220

    names = environ.get(_EXPORTER_ENV_BY_SIGNAL_TYPE.get(signal_type, ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46a767539b829844 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:492

                rate = float(os.getenv(OTEL_TRACES_SAMPLER_ARG, ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59c43a8bf6413404 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:500

            arg = os.getenv(OTEL_TRACES_SAMPLER_ARG)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5890b0fe2f2950f8 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:649

            os.getenv(
                _OTEL_PYTHON_LOGGING_AUTO_INSTRUMENTATION_ENABLED, "false"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e3bf3fa0da9d788 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_configuration/__init__.py:710

        if config_file := environ.get(OTEL_CONFIG_FILE):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95d0891f9b00eb70 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:202

            if env_var not in environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c30b91f16686da8 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:205

            str_value = environ.get(env_var, "").strip().lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60202f20ef1b1b74 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/__init__.py:835

        disabled = environ.get(OTEL_SDK_DISABLED, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67b9c99be88405ed — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:363

                environ.get(OTEL_BLRP_MAX_QUEUE_SIZE, _DEFAULT_MAX_QUEUE_SIZE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #940c05d54176bc35 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:377

                environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba9c1721cacefa52 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:377

                environ.get(
                    OTEL_BLRP_SCHEDULE_DELAY, _DEFAULT_SCHEDULE_DELAY_MILLIS
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69846c1220f9c591 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:393

                environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d63d17364a13da94 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:393

                environ.get(
                    OTEL_BLRP_MAX_EXPORT_BATCH_SIZE,
                    _DEFAULT_MAX_EXPORT_BATCH_SIZE,
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1118e2da5c881fe — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:410

                environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc98a19c1bd1fe79 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/_logs/_internal/export/__init__.py:410

                environ.get(
                    OTEL_BLRP_EXPORT_TIMEOUT, _DEFAULT_EXPORT_TIMEOUT_MILLIS
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31ba5b17807f830b — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/environment_variables/_internal.py:13

    value = environ.get(environment_variable)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc9e0591cc1655c3 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:493

                    environ.get(OTEL_METRICS_EXEMPLAR_FILTER, "trace_based")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #439bb40cd489f394 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/__init__.py:504

        disabled = environ.get(OTEL_SDK_DISABLED, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24e5393b91929bb6 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/__init__.py:498

                    environ.get(OTEL_METRIC_EXPORT_INTERVAL, 60000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7beaf303d049b16 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/metrics/_internal/export/__init__.py:508

                    environ.get(OTEL_METRIC_EXPORT_TIMEOUT, 30000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4de08268ebfd3ef0 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/resources/__init__.py:315

        env_resources_items = environ.get(OTEL_RESOURCE_ATTRIBUTES)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #740f9ab260c12bb0 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/resources/__init__.py:332

        service_name = environ.get(OTEL_SERVICE_NAME)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #472747878038e56e — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/resources/__init__.py:557

                for name in environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e36cecc25dfb80da — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/resources/__init__.py:557

                for name in environ.get(
                    OTEL_EXPERIMENTAL_RESOURCE_DETECTORS, ""
                ).split(",")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1df8ce247f822b1f — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:738

            if env_var not in environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33d12d4934e647e1 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:741

            str_value = environ.get(env_var, "").strip().lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d498bb47474b04a — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/__init__.py:1341

        disabled = environ.get(OTEL_SDK_DISABLED, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #960014684c78d2b1 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:242

                environ.get(OTEL_BSP_MAX_QUEUE_SIZE, _DEFAULT_MAX_QUEUE_SIZE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92eb344286e674f9 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:256

                environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d3df268ef32db23 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:256

                environ.get(
                    OTEL_BSP_SCHEDULE_DELAY, _DEFAULT_SCHEDULE_DELAY_MILLIS
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c983f17adce6303a — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:272

                environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #071daf5288b1740e — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:272

                environ.get(
                    OTEL_BSP_MAX_EXPORT_BATCH_SIZE,
                    _DEFAULT_MAX_EXPORT_BATCH_SIZE,
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2011b4aaf6c8ef9a — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:289

                environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5572a7975075d17b — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/export/__init__.py:289

                environ.get(
                    OTEL_BSP_EXPORT_TIMEOUT, _DEFAULT_EXPORT_TIMEOUT_MILLIS
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cfcfeff08b512cf — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/sampling.py:421

    trace_sampler = os.getenv(
        OTEL_TRACES_SAMPLER, "parentbased_always_on"
    ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58b5f2106fdc0fa5 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/sdk/trace/sampling.py:430

            rate = float(os.getenv(OTEL_TRACES_SAMPLER_ARG, ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

azure-search-documents

python dependency

medium pii_flow dependency Excluded from app score #9b09355bcc9172e9 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:70 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:45 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:70

    print(f"Retrieved: knowledge source '{knowledge_source.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #8fe1b620d88e37bb — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:127 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:45 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:127

    print(f"Retrieved: knowledge base '{knowledge_base.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #7d04c2c6da9ef210 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:73 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:46 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:73

    print(f"Retrieved: knowledge source '{knowledge_source.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #24a5a5c42d70c9b9 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:134 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:46 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:134

    print(f"Retrieved: knowledge base '{knowledge_base.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #969edbb09898f49c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_authentication.py:39 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_authentication.py:32 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_authentication.py:39

    print(f"Document count: {document_count} (index '{index_name}')")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3cc0930098141fa4 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_authentication.py:55 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_authentication.py:48 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_authentication.py:55

    print(f"Indexes ({len(names)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #5d9dc69c17e7e9de — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_authentication_async.py:41 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_authentication_async.py:33 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_authentication_async.py:41

    print(f"Document count: {document_count} (index '{index_name}')")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #22ce81acc6dabfd3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_authentication_async.py:58 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_authentication_async.py:50 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_authentication_async.py:58

    print(f"Indexes ({len(names)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #8a0270170efe5634 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:59 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud.py:59

    print(f"Uploaded: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #bed23ed97d6669fb — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:72 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud.py:72

    print(f"Merged: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2919311ecd5023ac — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:87 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud.py:87

    print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c7d85f1f5c4b98d4 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:100 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud.py:100

    print(f"Deleted: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c028f9ee38bf6f2a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:115 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud.py:115

    print(f"Merge or upload: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #26c305359917887e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:61 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:61

    print(f"Uploaded: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #9c5eb1959871edae — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:77 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:77

    print(f"Merged: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #ed40290eeb0ed373 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:93 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:93

    print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c6c12755de90e801 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:107 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:107

    print(f"Deleted: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3560772f4a09ac77 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:123 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:123

    print(f"Merge or upload: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #91b58d86956beaff — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:42 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_alias_crud.py:27 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_alias_crud.py:42

    print(f"Created: alias '{result.name}' -> index '{index_name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d83531ba834f8f30 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:54 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_alias_crud.py:27 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_alias_crud.py:54

    print(f"Retrieved: alias '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #ce0d85aa1376be89 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:108 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_alias_crud.py:27 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_alias_crud.py:108

    print(f"Updated: alias '{result.name}' -> index '{new_index_name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #79eb893e67f7a195 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:44 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:44

    print(f"Created: alias '{result.name}' -> index '{index_name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #14c48d23e4591511 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:57 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:57

    print(f"Retrieved: alias '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #cb2a865c31bfb93e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:112 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:112

    print(f"Updated: alias '{result.name}' -> index '{new_index_name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f597a14e84abe0fa — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_analyze_text.py:43 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_analyze_text.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_analyze_text.py:43

        print(f"  Token: {token.token}, Start: {token.start_offset}, End: {token.end_offset}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3f921bd4f89ce27b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:45 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:27 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:45

        print(f"  Token: {token.token}, Start: {token.start_offset}, End: {token.end_offset}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #7e5f41c009996ad3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:46 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:33 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:46

    print(f"Response: {response_body}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #261c8816ad00693f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:51 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:37 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:51

    print(f"Response: {response_body}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e5475f2232054f89 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud.py:69 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud.py:69

    print(f"Created: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #7f660b95d78388b7 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud.py:80 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud.py:80

    print(f"Retrieved: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f058f95cc73ba280 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud.py:126 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud.py:126

    print(f"Updated: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a9b178d63a721664 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud.py:139 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud.py:139

        print(f"  - {name}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #ded05f48474f6073 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud_async.py:72 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud_async.py:27 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud_async.py:72

    print(f"Created: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #7e43e7447a3492fb — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud_async.py:84 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud_async.py:27 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud_async.py:84

    print(f"Retrieved: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #56b81bc790bb16a9 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud_async.py:132 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud_async.py:27 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_crud_async.py:132

    print(f"Updated: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #87be26c18f03fab9 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:43 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:43

    print(f"Created: synonym map '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #fa24cb81b6280cd5 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:59 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:59

        print(f"Created: synonym map '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3ab80b0f0bf3b110 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:71 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:71

    print(f"Synonym maps ({len(result)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #fc75d7a5fee45c0b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:85 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:85

            print(f"  {syn}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #ac1a5b52ec0ef6ea — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:45 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:45

    print(f"Created: synonym map '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #9a31e98343c37d27 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:62 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:62

        print(f"Created: synonym map '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c01547e49eb4f410 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:75 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:75

    print(f"Synonym maps ({len(result)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a057a44cfeecceef — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:90 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:90

            print(f"  {syn}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #8f20a101992dd327 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:74 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud.py:74

    print(f"Created: indexer '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2ab832b586820156 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:87 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud.py:87

    print(f"Indexers ({len(result)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1fcb456e5537548f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:99 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud.py:99

    print(f"Retrieved: indexer '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #057806c64c488a09 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:112 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud.py:112

    print(f"Status: indexer '{indexer_name}' is {status.status}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1d215a0ee2a17788 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:80 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:80

        print(f"Created: indexer '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #7b277c6eedfc00da — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:94 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:94

    print(f"Indexers ({len(result)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #03cfc683f0fd689f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:107 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:107

    print(f"Retrieved: indexer '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6af57bb57ff9154d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:121 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:121

    print(f"Status: indexer '{indexer_name}' is {result.status}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0d8246eab029faa8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:51 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:51

    print(f"Created: data source '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2d722df915634eeb — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:64 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:64

    print(f"Data sources ({len(result)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6445140daa5166be — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:76 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:76

    print(f"Retrieved: data source '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2044d122c0f58cf0 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:52 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:52

    print(f"Created: data source '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3a40f9da24989d2b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:66 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:66

    print(f"Data sources ({len(result)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #7b55155a2856479f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:79 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:79

    print(f"Retrieved: data source '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3ba5c58f27d6f17f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:119 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_workflow.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_workflow.py:119

    print(f"Retrieved: indexer '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e88f176c96513a49 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:130 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_workflow.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_workflow.py:130

        print(f"Scheduled: indexer every {updated_indexer.schedule.interval}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3684a385e58c0525 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:134 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_workflow.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_indexer_workflow.py:134

    print(f"Status: indexer '{updated_indexer.name}' is {status.status}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1a2517836ac8afad — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_autocomplete.py:40 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_autocomplete.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_autocomplete.py:40

        print(f"  Completion: {result['text']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #fad0152dd2ee7c7c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:43 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:28 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:43

            print(f"  Completion: {result['text']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #638043367d950a0a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_facets.py:43 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_facets.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_facets.py:43

            print(f"  {facet}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #106e582dee8b67bb — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_facets_async.py:46 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_facets_async.py:28 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_facets_async.py:46

                print(f"  {facet}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #ee6de19649b0cabc — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_filter.py:45 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_filter.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_filter.py:45

        print(f"  HotelName: {result['HotelName']} (rating {result['Rating']})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #85e1b947a5534d1d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_filter_async.py:48 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_filter_async.py:28 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_filter_async.py:48

            print(f"  HotelName: {result['HotelName']} (rating {result['Rating']})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #b683e990efe94ed4 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic.py:66 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic.py:24 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic.py:66

        print(f"  HotelId: {result['HotelId']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #fd95e8a333f55aba — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic.py:67 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic.py:24 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic.py:67

        print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #615b870a80d575d0 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic.py:89 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic.py:24 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic.py:89

        print(f"  HotelId: {result['HotelId']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c8d8da7df6e3e87a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic.py:90 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic.py:24 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic.py:90

        print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #56c45730af76419f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:69 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:69

            print(f"  HotelId: {result['HotelId']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f73c2925baa0d5a9 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:70 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:70

            print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #15eeeed36f2f6f08 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:91 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:91

            print(f"  HotelId: {result['HotelId']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1937e990f0c04a65 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:92 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:92

            print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1d3267cbe2c5d747 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_session.py:38 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_session.py:24 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_session.py:38

        print(f"  HotelName: {result['HotelName']} (rating {result['Rating']})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #fbc4be65c1e6b146 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_session_async.py:40 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_session_async.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_session_async.py:40

            print(f"  HotelName: {result['HotelName']} (rating {result['Rating']})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #832a782c888c8c31 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_simple.py:38 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_simple.py:24 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_simple.py:38

        print(f"  HotelName: {result['HotelName']} (rating {result['Rating']})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f44aa019acd65fdb — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_simple_async.py:41 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_simple_async.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_simple_async.py:41

            print(f"  HotelName: {result['HotelName']} (rating {result['Rating']})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #fa7d408837a56906 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_suggestions.py:39 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_suggestions.py:24 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_suggestions.py:39

        print(f"  Text: {result['text']!r}, HotelName: {hotel['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #081f0ef1a9eb888e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:42 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:42

            print(f"  Text: {result['text']!r}, HotelName: {hotel['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e4de483e88e5d588 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:130 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:130

    print(f"Created: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f7eed39fe8dc0031 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:148 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:148

    print(f"Uploaded: {len(result)} documents to index '{index_name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3d0f5695b5a5c1aa — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:170 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:170

        print(
            f"  HotelId: {result['HotelId']}, HotelName: {result['HotelName']}, " f"Category: {result.get('Category')}"
        )

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6dfed618f1571ea8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:196 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:196

        print(f"  HotelId: {result['HotelId']}, HotelName: {result['HotelName']}, " f"Tags: {result.get('Tags')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c4ec9c6557de1e39 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:221 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:221

        print(f"  Score: {score}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #dcb723fffdb1acb0 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:222 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:222

        print(f"  HotelId: {result['HotelId']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2cde8c1575d4fc9d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:223 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:223

        print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #53fd919974acc91a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:224 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:224

        print(f"  Description: {result.get('Description')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #521db8c982f56a40 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:225 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:225

        print(f"  Category: {result.get('Category')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #9df1687f7cd38386 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:226 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector.py:226

        print(f"  Tags: {result.get('Tags', 'N/A')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c03110462cabc936 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:134 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:134

    print(f"Created: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #780180c9c6cc8fac — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:153 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:153

    print(f"Uploaded: {len(result)} documents to index '{index_name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0d9f97e70bf8206c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:176 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:176

            print(
                f"  HotelId: {result['HotelId']}, HotelName: {result['HotelName']}, "
                f"Category: {result.get('Category')}"
            )

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #64d8fad160564f2c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:204 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:204

            print(f"  HotelId: {result['HotelId']}, HotelName: {result['HotelName']}, " f"Tags: {result.get('Tags')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #da59fba985038750 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:230 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:230

            print(f"  Score: {score}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #5ae68ffab7f54a09 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:231 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:231

            print(f"  HotelId: {result['HotelId']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1f2d211bae1ab65d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:232 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:232

            print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #ede442277bd27b9d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:233 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:233

            print(f"  Description: {result.get('Description')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d6105c2c583a291e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:234 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:234

            print(f"  Category: {result.get('Category')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #61aa061b26634e72 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:235 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_query_vector_async.py:235

            print(f"  Tags: {result.get('Tags', 'N/A')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1faa3437cdac53e3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:42 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:25 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:42

    print(f"Document count: {response_body} (index '{index_name}')")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #cc46029d9fe4a238 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:48 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:26 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:48

    print(f"Document count: {response_body} (index '{index_name}')")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 133 low-confidence finding(s)

low env_fs dependency Excluded from app score #c20cd5dc491610d5 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:43

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #628a33c91deeb43e — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:44

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0aad15812a9f33d6 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:45

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07a8450ce6216ba8 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:44

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03856821b79e0526 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:45

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16fe1270a97f0a8d — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:46

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd1d8f7331e8e343 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication.py:30

    service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da6fce6364654f15 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication.py:31

    index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5eed13e746b1cfbd — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication.py:32

    key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65b10e1534a94702 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication.py:47

    service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7094d7957091e214 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication.py:48

    key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b6cb8bbf08e0a7d — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication.py:63

    service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8bdaec55d7150628 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication.py:64

    index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7632108a4d3cfa43 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication.py:80

    service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8dd9cf167c6d902 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication_async.py:31

    service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50bed92f11dd4f2b — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication_async.py:32

    index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10409707c6f1c8eb — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication_async.py:33

    key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7698ccafd265407 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication_async.py:49

    service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d3a0f80e4b18c84 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication_async.py:50

    key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d18651ba086fb37 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication_async.py:66

    service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca65313adb903a64 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication_async.py:67

    index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46920e4f6ae3e3c0 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_authentication_async.py:84

    service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0418357edb8b7e13 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_documents_buffered_sender.py:24

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bda502f461724d1 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_documents_buffered_sender.py:25

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7bb56a2f0ff2386 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_documents_buffered_sender.py:26

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d51bdeb2da284a9 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_documents_buffered_sender_async.py:25

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd8aad5813b6fe8a — Environment-variable access.

pkgs/python/[email protected]/samples/sample_documents_buffered_sender_async.py:26

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3c869d36b921b19 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_documents_buffered_sender_async.py:27

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09023fbdf8bc6118 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_documents_crud.py:24

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #319c76bb016c1870 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_documents_crud.py:25

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4a69963bab0d19e — Environment-variable access.

pkgs/python/[email protected]/samples/sample_documents_crud.py:26

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f020e6be1b00c9b — Environment-variable access.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:25

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c45dc7006ae94c0 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:26

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02edad498ee52f4e — Environment-variable access.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3946d0a363868da0 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:25

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe89000fc1ff4405 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:26

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4397fc89f8b9660 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:27

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca4fe7272bb27f7c — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:26

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db556045c21f5b83 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:27

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24b23a5aef115df7 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #480e23a34dc9ec25 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_analyze_text.py:24

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9fb1748e4d0fbcf5 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_analyze_text.py:25

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f015f49ff042c102 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_analyze_text.py:26

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #994bea3a7ca0ddbc — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:25

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35d82c56727da796 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:26

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b0ad25b03b722dd — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:27

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e857f25a02e0c9ad — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:31

    endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70785d33ff822e7a — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:32

    index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e9d56a866ee80a2 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:33

    key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47d8a9a43d0fafba — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:35

    endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae6d61beeb55583f — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:36

    index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f53130b38143e0f — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:37

    key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ce1eb69ac71bdea — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_crud.py:25

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a175ba286e221b84 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_crud.py:26

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54ee1e08645cb593 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_crud_async.py:26

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3514fa4e520edd6 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_crud_async.py:27

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #486d726a15ebe8db — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:22

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc0765a72e5bb3d2 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0199eff80efa21d — Filesystem access.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:54

    with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e02302ed4256301 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:23

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d52aad8e1e95f8cd — Environment-variable access.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c53df0fe43253999 — Filesystem access.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:56

    with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b385da169efb91a4 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:24

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a688a98aa02a020b — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:25

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6b114faeff92eaa — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:26

connection_string = os.environ["AZURE_STORAGE_CONNECTION_STRING"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8673992d36a6e754 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:25

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #248a409560c8c6ac — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9da48b9966722998 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:27

connection_string = os.environ["AZURE_STORAGE_CONNECTION_STRING"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2aca024ebd0748e — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:24

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b7056650b0fafb1 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9de7f5c667d92425 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:26

connection_string = os.environ["AZURE_STORAGE_CONNECTION_STRING"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3f16a1a3198e64b — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:25

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a37b5cb73d225bd — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #45d340badbb832f6 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:27

connection_string = os.environ["AZURE_STORAGE_CONNECTION_STRING"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a85c62037e7f7ad — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:24

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76739328df482bf9 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:25

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #945454f58b462f8e — Environment-variable access.

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:26

connection_string = os.environ["AZURE_STORAGE_CONNECTION_STRING"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b4d0131808505ad — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_autocomplete.py:24

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6145034cc7510d0 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_autocomplete.py:25

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74c1e39d4dbe4e59 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_autocomplete.py:26

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7e0cba15f1861e7 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:26

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62c36bc2fa3ed4d0 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:27

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d615edfa2c9cf40 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:28

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4a3b1167b3568c0 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_facets.py:24

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03d6b9be50090b89 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_facets.py:25

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c09452aac75d417 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_facets.py:26

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f8a7dd161dbad5e — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_facets_async.py:26

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f0608da5f2e6140 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_facets_async.py:27

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6183ef71dfb6d785 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_facets_async.py:28

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9adde74f8b154df4 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_filter.py:24

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15585b4355eac0cb — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_filter.py:25

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9be6e3bac7ca7a56 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_filter.py:26

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8cf3ef797378aac6 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_filter_async.py:26

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #085e93e13a7e6340 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_filter_async.py:27

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47cfb214e5365bed — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_filter_async.py:28

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1452f54746986a75 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_semantic.py:22

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87a14875f9331a53 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_semantic.py:23

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7b1157fd36950d5 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_semantic.py:24

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17b9a4729804cc2f — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:23

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4ef502148723e66 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:24

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #403cc64f903a0748 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a43839df067aa6e — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_session.py:22

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #768da9c2dda6676d — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_session.py:23

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42bbd2ecb61ffc17 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_session.py:24

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #883f568679d3224c — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_session_async.py:23

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c51b5b15257617bd — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_session_async.py:24

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0c9dbb6200ad53b — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_session_async.py:25

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #faf6199e4c832b6e — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_simple.py:22

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4cd1a04203de10a2 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_simple.py:23

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #394c013aee0e93e7 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_simple.py:24

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f7142b1c0a294b7 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_simple_async.py:24

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5164a9ad4f057b88 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_simple_async.py:25

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5adfedece667ffb3 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_simple_async.py:26

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aca2f938e1d2fe2c — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_suggestions.py:22

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9505b7b6d1453b1 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_suggestions.py:23

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79deff313db682de — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_suggestions.py:24

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec927a5a237ee7d2 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:24

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84316df06f252c11 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:25

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a3a99de7bea83a5 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:26

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a9d34e22fc459fa — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_vector.py:49

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48b2ce7ac46d4bc2 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_vector.py:50

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10c9857af666f558 — Filesystem access.

pkgs/python/[email protected]/samples/sample_query_vector.py:60

    with open(query_vector_path, "r", encoding="utf-8") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d477b15bda10929 — Filesystem access.

pkgs/python/[email protected]/samples/sample_query_vector.py:134

    with open(documents_path, "r", encoding="utf-8") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69061f360b88425b — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:51

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c43613fb4474cfbb — Environment-variable access.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:52

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #601abe1704fcbbf0 — Filesystem access.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:63

    with open(query_vector_path, "r", encoding="utf-8") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99d3fbb533351d38 — Filesystem access.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:138

    with open(documents_path, "r", encoding="utf-8") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe390396c110cafc — Environment-variable access.

pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:23

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ad44d66940bebc4 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:24

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17e9cbb87169f507 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:25

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #edda170fb4d8bb80 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:24

service_endpoint = os.environ["AZURE_SEARCH_SERVICE_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e045a2d3a686bd7 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:25

index_name = os.environ["AZURE_SEARCH_INDEX_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46dac4e1ea0acb9c — Environment-variable access.

pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:26

key = os.environ["AZURE_SEARCH_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

google-cloud-aiplatform

python dependency

medium pii_flow dependency Excluded from app score #2c6b11d6ee305d82 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

pkgs/python/[email protected]/agentplatform/_genai/_agent_engines_utils.py:1849 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/agentplatform/_genai/_agent_engines_utils.py:1851 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/agentplatform/_genai/_agent_engines_utils.py:1849

                headers={
                    "Authorization": (
                        f"Bearer {self.api_client._api_client._credentials.token}"
                    )
                },

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

medium telemetry dependency Excluded from app score #2915b313d5befe3a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/_genai/_agent_engines_utils.py:2191

        import opentelemetry

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5aec33438d4b366c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/_genai/_agent_engines_utils.py:2205

        import opentelemetry.sdk.trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #977f571fd5c78f63 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/_genai/_agent_engines_utils.py:2233

        import opentelemetry.exporter.cloud_trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium pii_flow dependency Excluded from app score #d6d7ef37439d1119 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

pkgs/python/[email protected]/agentplatform/agent_engines/_agent_engines.py:1801 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/agentplatform/agent_engines/_agent_engines.py:1803 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/agentplatform/agent_engines/_agent_engines.py:1801

                headers={
                    "Authorization": (
                        f"Bearer {initializer.global_config.credentials.token}"
                    )
                }

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

medium telemetry dependency Excluded from app score #dae3c45bd169ff9f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:106

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b1c27c36e4a0c376 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:284

        import opentelemetry.trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c278ba419deae037 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:285

        import opentelemetry._logs

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0a0be19397a2c5e1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:293

        import opentelemetry.sdk.trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0752a61df8c7e741 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:294

        import opentelemetry.sdk._logs

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #882ebd1abd284ac7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:371

        import opentelemetry

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #17e7b811158fa730 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:372

        import opentelemetry.trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f508fe5bad3d7d9e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:373

        import opentelemetry._logs

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ac5dc467553acdfe — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:380

        import opentelemetry.sdk.resources

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #da57a1a4fcb4d015 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:381

        import opentelemetry.sdk.trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6b43f583f115e8c3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:382

        import opentelemetry.sdk.trace.export

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #152a933f323dc4f6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:383

        import opentelemetry.sdk._logs

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a1bc801a72b21084 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:384

        import opentelemetry.sdk._logs.export

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0619e4f0040de151 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:417

            import opentelemetry.exporter.otlp.proto.http.version

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9c995a0d85905522 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:418

            import opentelemetry.exporter.otlp.proto.http.trace_exporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c6da71fa9ca7fd06 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:494

            import opentelemetry.exporter.cloud_logging

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b25166238cade42b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:546

        from opentelemetry.instrumentation import google_genai

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9ab1f0574d1420c1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/ag2.py:37

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b7d3564c636cf447 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/langchain.py:54

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3b5363e1de242294 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/langgraph.py:49

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fbff7685476b2231 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/llama_index.py:42

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium pii_flow dependency Excluded from app score #03a2cb91a45076ed — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

pkgs/python/[email protected]/vertexai/_genai/_agent_engines_utils.py:1843 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/vertexai/_genai/_agent_engines_utils.py:1845 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/vertexai/_genai/_agent_engines_utils.py:1843

                headers={
                    "Authorization": (
                        f"Bearer {self.api_client._api_client._credentials.token}"
                    )
                },

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

medium pii_flow dependency Excluded from app score #1640a24a9ce49148 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

pkgs/python/[email protected]/vertexai/_genai/_agent_engines_utils.py:1958 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/vertexai/_genai/_agent_engines_utils.py:1960 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/vertexai/_genai/_agent_engines_utils.py:1958

                headers={
                    "Authorization": (
                        f"Bearer {self.api_client._api_client._credentials.token}"
                    )
                },

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

medium pii_flow dependency Excluded from app score #7e089cc457b6e1b3 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

pkgs/python/[email protected]/vertexai/agent_engines/_agent_engines.py:1792 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/vertexai/agent_engines/_agent_engines.py:1794 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/vertexai/agent_engines/_agent_engines.py:1792

                headers={
                    "Authorization": (
                        f"Bearer {initializer.global_config.credentials.token}"
                    )
                }

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

medium telemetry dependency Excluded from app score #f5bc76ddcc893feb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/_utils.py:712

        import opentelemetry  # noqa:F401

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d4a650e4aa31d65b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/_utils.py:726

        import opentelemetry.sdk.trace  # noqa:F401

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #80c9b383fd81423e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/_utils.py:754

        import opentelemetry.exporter.cloud_trace  # noqa:F401

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d46577271efb25ec — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:90

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #44ee2b77d76aad0a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:268

        import opentelemetry.trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #70a125f59ba7aef9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:269

        import opentelemetry._logs

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3bfb2ac5ca5d099c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:277

        import opentelemetry.sdk.trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1db9b84053dfcbe9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:278

        import opentelemetry.sdk._logs

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d2fc8c8203ef687d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:355

        import opentelemetry

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #74159dc0ba26b23c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:356

        import opentelemetry.trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c1cd990799d14e93 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:357

        import opentelemetry._logs

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d6da259a039015a7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:364

        import opentelemetry.sdk.resources

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #15d6d923a8ebcde2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:365

        import opentelemetry.sdk.trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #409cda99e3b61df3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:366

        import opentelemetry.sdk.trace.export

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #af12b4229965055d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:367

        import opentelemetry.sdk._logs

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c617cd5a6aea4cc2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:368

        import opentelemetry.sdk._logs.export

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #02f789898b82b559 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:401

            import opentelemetry.exporter.otlp.proto.http.version

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b17346c8edad5506 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:402

            import opentelemetry.exporter.otlp.proto.http.trace_exporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1b036b2523d76701 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:478

            import opentelemetry.exporter.cloud_logging

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0883ae51a3395859 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:530

        from opentelemetry.instrumentation import google_genai

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #68517da9b70d07b7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/ag2.py:37

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d16444536c680ee2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/langchain.py:54

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d8b7eb655543ebd3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/agent_engines/templates/langgraph.py:49

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #437930aaafc9abb8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:91

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7c57f91aa3108d3d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:329

        import opentelemetry.trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e076fcdbcd7bf777 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:330

        import opentelemetry._logs

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3a7acc91e41af948 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:338

        import opentelemetry.sdk.trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ee3aa8a770f54923 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:339

        import opentelemetry.sdk._logs

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #de801bbd5d956e55 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:416

        import opentelemetry

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b77e3a38abea5c95 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:417

        import opentelemetry.trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #abe5a2bab0ec2efc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:418

        import opentelemetry._logs

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d5c4a8cd73c0020b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:425

        import opentelemetry.sdk.resources

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6e2ed45b692c9a22 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:426

        import opentelemetry.sdk.trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d5699f09f5f76d6b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:427

        import opentelemetry.sdk.trace.export

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5158eb01d2e959b3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:428

        import opentelemetry.sdk._logs

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6ecde9fe5e1ac5c4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:429

        import opentelemetry.sdk._logs.export

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ac3e901f9f7223a8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:462

            import opentelemetry.exporter.otlp.proto.http.version

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a6a8a09700e19778 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:463

            import opentelemetry.exporter.otlp.proto.http.trace_exporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a830982e69c23d20 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:539

            import opentelemetry.exporter.cloud_logging

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1c7a686b4f3e4d78 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:591

        from opentelemetry.instrumentation import google_genai

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #90215b1f848e9704 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/ag2.py:37

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #14bef3eacd08bf9e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/langchain.py:54

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #11bba9411c08e51c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/langgraph.py:57

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f7313debc5493390 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/llama_index.py:42

        from opentelemetry.sdk import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #71c2437c01b84cd7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/reasoning_engines/_utils.py:365

        import opentelemetry  # noqa:F401

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #124ac97775735f1d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/reasoning_engines/_utils.py:379

        import opentelemetry.sdk.trace  # noqa:F401

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d30752de2ec31dc6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/vertexai/reasoning_engines/_utils.py:407

        import opentelemetry.exporter.cloud_trace  # noqa:F401

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 775 low-confidence finding(s)

low env_fs dependency Excluded from app score #167a0cb2508686d2 — Filesystem access.

pkgs/python/[email protected]/agentplatform/_genai/_agent_engines_utils.py:1463

            with open(requirements) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #a742607611dbeb21 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/_evals_common.py:892

        agent_resp = api_client.request("get", f"agents/{agent_short_id}", {}, None)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #025184d9dac4dce6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/_evals_common.py:947

        response = self._api_client.request(
            "get",
            f"interactions/{interaction_id}",
            {},
            http_options={"timeout": _INTERACTION_REQUEST_TIMEOUT_MS},
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c771e9f76d78811f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/_evals_common.py:1036

        interaction = interactions_client.get(interaction_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8125832041ac3c2c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/_evals_common.py:1574

            response = api_client.request("get", path, {}, None)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3a76d7abdc4f89de — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/_evals_utils.py:923

        response = api_client.request("get", operation.name, {}, None)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #1ed669e7c834fa1e — Filesystem access.

pkgs/python/[email protected]/agentplatform/_genai/_skills_utils.py:46

                with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #4987b94743d2f48c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/a2a_task_events.py:162

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #afffa1af07747f6d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/a2a_task_events.py:251

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #aec7ef656f5fd7b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/a2a_tasks.py:198

        self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b74e74f4db31e375 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/a2a_tasks.py:256

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b6c404c0f9820c83 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/a2a_tasks.py:340

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #61017e5bacddc3d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/a2a_tasks.py:428

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bc58b9ff86c60271 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/agent_engines.py:814

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #504995bc331e56b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/agent_engines.py:888

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f1ec4e8a206f360f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/agent_engines.py:965

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #602de9b09d5499b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/agent_engines.py:1038

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0d75c1c11787f28a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/agent_engines.py:1130

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a4c5b03808367998 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/agent_engines.py:1199

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #984715b5ca8f3e79 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/agent_engines.py:1270

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3ab348d46b58fb97 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/agent_engines.py:1341

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #46856030af09a672 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/agent_engines.py:1413

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #aa80e834a090bd2b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/agent_engines.py:1484

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e8cca238f88c2318 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/agent_engines.py:1631

        raw_response = self._api_client.request("get", name, {})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #09b5285d7f196438 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/datasets.py:298

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f2b95f2d41d3ae2b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/datasets.py:390

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a2714600dc1c7fe7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/datasets.py:472

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d196e7ca8a6f6dbd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/datasets.py:543

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #119317ddb6053aef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/datasets.py:615

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f0bb48619d3af2c5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/datasets.py:693

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d9420e69f067c281 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/datasets.py:763

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e8243b9d3d2f3ccc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/datasets.py:843

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4059e191fcda3b1a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:1069

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #514c33f91554dcd4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:1145

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7668397f8ab1f899 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:1234

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c02a06100199998a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:1311

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e3e42ac2aeb09fca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:1383

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #72d02e1f6400bfdb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:1487

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ea10fead506b644a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:1571

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #44ac3e2cc48a8c1b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:1649

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #84d2ea676be5b2ee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:1729

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4d7a23d9f167fbdf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:1801

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7462ef7e38793b66 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:1873

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #00864d14b8c03f79 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:1945

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #257597ff8b222543 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:2014

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e755cfb7f979061e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:2082

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c594b84d06075b62 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/evals.py:2360

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #962b19d427621eb5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/feedback_contexts.py:155

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4c97aee245d2ebeb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/feedback_contexts.py:225

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3f7a864a419c0860 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/feedback_contexts.py:301

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4d700a6495574be9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/feedback_entries.py:271

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #eade283117cc7e7d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/feedback_entries.py:341

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fe5ef9ccafa79152 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/feedback_entries.py:425

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8df2d427f2a4872c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/feedback_entries.py:495

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f71707cb1e34c65a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/feedback_entries.py:579

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #70977e2c6641513b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/feedback_entries.py:649

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5be1b9ed8d6184a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/feedback_entries.py:719

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4188954a0c6685c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memories.py:619

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #80c81728b471a0ee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memories.py:701

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bc7767171c1bb6d4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memories.py:789

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #23ff73443600cb96 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memories.py:869

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #91da6cabf4e831ee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memories.py:953

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2654f0b34d3b01a5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memories.py:1027

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bb3b76df167fd399 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memories.py:1097

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #78e196f5fe82f632 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memories.py:1167

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3dfe46295f8d1b34 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memories.py:1251

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #be457052954ebb4f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memories.py:1353

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5a1756be7cc0b928 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memories.py:1429

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #86d7269b11319b31 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memories.py:1507

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #08e48893379cef8b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memories.py:1589

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4cf6853321ff6113 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memory_revisions.py:140

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #eea96d13e3f85579 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/memory_revisions.py:224

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0ec751c6551c3da6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/model_garden.py:207

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e3d71b78296878d6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/model_garden.py:278

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #27ce1381d2bf49e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/model_garden.py:352

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bb90f7dbe03ef53f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompt_optimizer.py:251

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a705a4854356f9b2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompt_optimizer.py:323

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5b8137ebeb39f3d8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompt_optimizer.py:395

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8a1fde717b1cd51b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompt_optimizer.py:586

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #22d3a9cbc74a9a06 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:512

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #73c3b255329ae9dd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:592

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #35e60667276b26d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:664

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e291ddd5bd155ef9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:740

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #50fd82791f99b884 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:816

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #27c292d4622f9569 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:884

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #16df770aa7b7fb4b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:962

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fe5a16c07a9d43be — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:1027

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8f772d40dd31617f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:1101

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f58848d4e1223fe8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:1177

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #03f3c58e85a65bbf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:1261

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5e994737017308ab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:1333

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c304c209c9a80df2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:1405

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b77fd241b3fffe0d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:1480

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a3f03cf18d22fb35 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/prompts.py:2305

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f8562aaf8ed54df5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:1699

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7acf43b5c54c9e96 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:1771

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #67a0a6ee3e52ab5b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:1839

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e3a1294ada193456 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:1919

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6632d3040b7db1ad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:1997

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #122bce973f8afcdd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:2077

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #935516b10f03ec30 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:2154

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #67bf3a039f4540ec — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:2229

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8deaa4aa6ab523f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:2306

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d8a15baa60866d59 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:2378

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f48f9643b277b028 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:2447

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #06e7136c6be4dc87 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:2519

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7840a7f34a3c7917 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:2604

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7f276fb8d77ca2d9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:2672

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c39c131174f420b4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:2746

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #504747ca8272ba84 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:2814

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fcb2f0344be7e91c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:2886

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #10c2bf0f2106d14b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/rag.py:3257

        response = self._api_client.request(
            "post",
            request_path,
            request_dict,
            http_options,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9b33dd625e266968 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/runtime_revisions.py:189

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7e1630ac62a2fde9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/runtime_revisions.py:273

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5a41af17f5403296 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/runtime_revisions.py:359

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c833eadc1fffe8db — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/runtime_revisions.py:433

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5d0c522dffdaa24b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/runtime_revisions.py:507

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #52cb026e23ebbbde — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandbox_snapshots.py:206

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0919dc665be54abc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandbox_snapshots.py:281

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0a7c65554091fc38 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandbox_snapshots.py:356

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9b499907223ad2dd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandbox_snapshots.py:431

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c7d2fbdd57c107c8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandbox_snapshots.py:501

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #16c6ea00bd8c64d4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandbox_templates.py:217

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #167ada5b19bc892a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandbox_templates.py:299

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #03a73167cfce5c20 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandbox_templates.py:385

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #076b1434035e5e11 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandbox_templates.py:467

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #062ec8b2d905902f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandbox_templates.py:537

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f279721fb5174ebd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandboxes.py:232

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cbdcd1ce85b49f74 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandboxes.py:312

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #999b9dbbd5d13ec2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandboxes.py:388

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #916e59f60cb8a4ad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandboxes.py:468

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8ddd0c9aa06a7476 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandboxes.py:552

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #920ff8fe7fa02979 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandboxes.py:622

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8d83e4ed71912504 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sandboxes.py:966

        response = http_client._api_client.request(http_method, path, request_dict)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c92ba0382b7e824f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/session_events.py:191

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #14694c4de05811c6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/session_events.py:275

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #74b8b5dc7e3c2358 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sessions.py:273

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #77a2d60b6d0c6303 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sessions.py:357

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a0250c41a57901d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sessions.py:441

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #95ea24f6069317c4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sessions.py:525

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #12a48d1359f71ecd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sessions.py:595

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cbc00fd591c7ad7a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/sessions.py:679

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #19a1eee621f2bfef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/skill_revisions.py:126

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ed040dbda8c5ef80 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/skill_revisions.py:200

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #699a144972e0a6e9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/skills.py:268

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0e5f40f5514204a5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/skills.py:337

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a36dfb2375c97ea1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/skills.py:413

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #207b827d43c83467 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/skills.py:482

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ee58a6ed2791e189 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/skills.py:546

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6e41e04ff7319065 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/skills.py:615

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d6685c4a24e223ca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/_genai/skills.py:683

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #5aea71c935159188 — Filesystem access.

pkgs/python/[email protected]/agentplatform/_genai/types/common.py:1956

        with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75c117e4b9ace431 — Filesystem access.

pkgs/python/[email protected]/agentplatform/_genai/types/common.py:2063

                with open(config_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf9d9f5847437050 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/_agent_engines.py:1133

        if GOOGLE_CLOUD_AGENT_ENGINE_ENABLE_TELEMETRY not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ef256e8d8bea031 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/_agent_engines.py:1134

            os.environ[GOOGLE_CLOUD_AGENT_ENGINE_ENABLE_TELEMETRY] = "unspecified"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a3e32c7c623c182 — Filesystem access.

pkgs/python/[email protected]/agentplatform/agent_engines/_agent_engines.py:1158

            with open(requirements) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32c29acd12e8055b — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/_agent_engines.py:1372

        if env_var not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a89bbb64d87fb6dc — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/_agent_engines.py:1375

            aip_types.EnvVar(name=env_var, value=os.environ[env_var])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ec526daedfc6948 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/a2a.py:320

        os.environ["GOOGLE_GENAI_USE_VERTEXAI"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d688f459ae78dd1f — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/a2a.py:322

        os.environ["GOOGLE_CLOUD_PROJECT"] = project

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f398f553f03b1d5d — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/a2a.py:324

        os.environ["GOOGLE_CLOUD_LOCATION"] = location

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3be0adc0f2d4b60 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/a2a.py:325

        agent_engine_id = os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_ID", "test-agent-engine")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3b452d94d3cc80a — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:362

        location = os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_LOCATION", "") or os.getenv(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b386b188dbfd0fa — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:362

        location = os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_LOCATION", "") or os.getenv(
            "GOOGLE_CLOUD_LOCATION", ""
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d64b82b809aa6615 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:365

        agent_engine_id = os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9053dcb1606a7ad — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:401

            "service.name": os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_ID", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8dc6db2e83b60e8 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:404

                os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_LOCATION", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91868f4aa6880d19 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:405

                or os.getenv("GOOGLE_CLOUD_LOCATION", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a686b0cd86bc1f65 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:517

        if "gen_ai_latest_experimental" in os.getenv(
            "OTEL_SEMCONV_STABILITY_OPT_IN", ""
        ).split(","):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6cf586d5ea5d3a1c — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:524

                        default_log_name=os.getenv(
                            "GCP_DEFAULT_LOG_NAME", "adk-on-agent-engine"
                        ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #762dbed4a679a1f4 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:535

                        default_log_name=os.getenv(
                            "GCP_DEFAULT_LOG_NAME", "adk-on-agent-engine"
                        ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #778f4decf768715d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:614

    r = session.post(endpoint, data=None)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #d1d74c3610bdef20 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:628

    use_mtls_endpoint_str = os.getenv(
        "GOOGLE_API_USE_MTLS_ENDPOINT", _MtlsEndpoint.AUTO.value
    ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b590b5e04a7de524 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:666

        use_client_cert_str = os.getenv(
            "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
        ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #045324176c24778b — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:779

                initializer.global_config.api_key or os.environ.get("GOOGLE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08075c437da459e7 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:949

        os.environ["GOOGLE_GENAI_USE_VERTEXAI"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8a364e5a7720a9f — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:952

            os.environ["GOOGLE_CLOUD_PROJECT"] = project

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b8efc2371e63e06 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:955

            if "GOOGLE_CLOUD_AGENT_ENGINE_LOCATION" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3827e85d4fb9683a — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:956

                os.environ["GOOGLE_CLOUD_AGENT_ENGINE_LOCATION"] = location

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e68287d6ab52d83 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:957

            if "GOOGLE_CLOUD_LOCATION" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9488a8b6eba8d5e4 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:958

                os.environ["GOOGLE_CLOUD_LOCATION"] = location

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d0f66b7b533e4e5 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:959

        agent_engine_location = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #beb85b81cb2453e1 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:959

        agent_engine_location = os.environ.get(
            "GOOGLE_CLOUD_AGENT_ENGINE_LOCATION",  # the runtime env var (if set)
            location,  # the location set in the AdkApp template
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23adf3cba467e3d8 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:965

            os.environ["GOOGLE_API_KEY"] = express_mode_api_key

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24e798e0dafe3361 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:967

            os.environ.pop("GOOGLE_CLOUD_AGENT_ENGINE_LOCATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a00e5c24634ab07 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:968

            os.environ.pop("GOOGLE_CLOUD_LOCATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e9b249a9c76d3da — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:969

            os.environ.pop("GOOGLE_CLOUD_PROJECT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #089302875e93706b — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:976

            os.environ["ADK_CAPTURE_MESSAGE_CONTENT_IN_SPANS"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6c6aeb20cf68a70 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:978

            os.environ["ADK_CAPTURE_MESSAGE_CONTENT_IN_SPANS"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bff274e60a0e2233 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:1024

            if "GOOGLE_CLOUD_AGENT_ENGINE_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69755664b098cdac — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:1025

                self._tmpl_attrs["app_name"] = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b187ee2162d4c53 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:1025

                self._tmpl_attrs["app_name"] = os.environ.get(
                    "GOOGLE_CLOUD_AGENT_ENGINE_ID",
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f378bfdc3802801a — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:1040

        elif "GOOGLE_CLOUD_AGENT_ENGINE_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #73d303ef1833e51e — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:1051

                    agent_engine_id=os.environ.get("GOOGLE_CLOUD_AGENT_ENGINE_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c05f17d307fbfe8 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:1063

                    agent_engine_id=os.environ.get("GOOGLE_CLOUD_AGENT_ENGINE_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb80a7d8551e95e4 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:1072

        elif "GOOGLE_CLOUD_AGENT_ENGINE_ID" in os.environ and is_version_sufficient(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #487451c5c8257c6e — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:1085

                    agent_engine_id=os.environ.get("GOOGLE_CLOUD_AGENT_ENGINE_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43298c2b744eb262 — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:1097

                    agent_engine_id=os.environ.get("GOOGLE_CLOUD_AGENT_ENGINE_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2a9c496898748ae — Environment-variable access.

pkgs/python/[email protected]/agentplatform/agent_engines/templates/adk.py:2106

        env_value = os.getenv(
            GOOGLE_CLOUD_AGENT_ENGINE_ENABLE_TELEMETRY, "unspecified"
        ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e16302fa16446a9 — Filesystem access.

pkgs/python/[email protected]/agentplatform/preview/rag/rag_data.py:449

        "file": open(path, "rb"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41a942c469815717 — Filesystem access.

pkgs/python/[email protected]/agentplatform/rag/rag_data.py:427

        "file": open(path, "rb"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a1186b84ceefbf91 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/docker_utils/run.py:52

    return os.environ.get(_ADC_ENVIRONMENT_VARIABLE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4cf02062a0a24c66 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/explain/lit.py:219

        if os.environ.get("LIT_PROXY_URL"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64e15eecffeaa6ed — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/initializer.py:92

            project_number = os.environ.get("GOOGLE_CLOUD_PROJECT") or os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd88ae9fc7a65e3d — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/initializer.py:92

            project_number = os.environ.get("GOOGLE_CLOUD_PROJECT") or os.environ.get(
                "CLOUD_ML_PROJECT_ID"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b22c7e4732cd9ac2 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/initializer.py:379

        location = os.getenv("GOOGLE_CLOUD_REGION") or os.getenv("CLOUD_ML_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #327eebcf4cb97d32 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/initializer.py:429

        vertex_product = os.getenv("VERTEX_PRODUCT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25c077dad492ec4c — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/jobs.py:2147

                with open(autolog_script_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04b8808a5837b6f9 — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/jobs.py:2157

                    trainer_script = open(script_path, "r").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f036c3f6acaba4ff — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/metadata/_models.py:60

    with open(path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac8780ba7f46aec3 — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/metadata/_models.py:156

    with open(model_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d851161a122b114 — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/metadata/_models.py:340

    with open(example_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c488d0b4e63debee — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/metadata/_models.py:895

            with open(destination_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #78b408be01fdd221 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/metadata/metadata.py:267

        if os.getenv(constants.ENV_EXPERIMENT_KEY):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6555d4c6656fc587 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/metadata/metadata.py:269

                os.getenv(constants.ENV_EXPERIMENT_KEY)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6865e035ea41e990 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/metadata/metadata.py:280

        env_experiment_run = os.getenv(constants.ENV_EXPERIMENT_RUN_KEY)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #3953b9f4825ca7a7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/local_endpoint.py:392

                response = requests.post(url, data=request, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #103efe60f01a3944 — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/local_endpoint.py:396

                with open(request_file) as data:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #59460ac73344e3c9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/local_endpoint.py:397

                    response = requests.post(url, data=data, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #87626546e85015a1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/local_endpoint.py:425

            response = requests.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #2d4f947bf3a709ba — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:61

        if "HANDLER_MODULE" not in os.environ or "HANDLER_CLASS" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a6c6f4be2e2e763 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:66

        handler_module = importlib.import_module(os.environ.get("HANDLER_MODULE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83736620004edcc3 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:67

        handler_class = getattr(handler_module, os.environ.get("HANDLER_CLASS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2cfbd6646a3789a6 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:73

        if "PREDICTOR_MODULE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e6258a95f27b08a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:75

                os.environ.get("PREDICTOR_MODULE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0bb30edd0292909 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:78

                predictor_module, os.environ.get("PREDICTOR_CLASS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd9ec744c027968e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:82

            os.environ.get("AIP_STORAGE_URI"), predictor=predictor_class

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #487c2f4502c35acf — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:85

        if "AIP_HTTP_PORT" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a42e9add94b4f46f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:90

            "AIP_HEALTH_ROUTE" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e02f3d14f4c8bbc — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:91

            or "AIP_PREDICT_ROUTE" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #602f5cf4d242121f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:97

        self.http_port = int(os.environ.get("AIP_HTTP_PORT"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97f02755b2f962bd — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:98

        self.health_route = os.environ.get("AIP_HEALTH_ROUTE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ec39e209de02e02 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:99

        self.predict_route = os.environ.get("AIP_PREDICT_ROUTE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #350ac368f2aac0e2 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:183

    workers_per_core_str = os.getenv("VERTEX_CPR_WORKERS_PER_CORE", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0468a1c0eb197ff9 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:184

    max_workers_str = os.getenv("VERTEX_CPR_MAX_WORKERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4fc441c764a1a90f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:188

    web_concurrency_str = os.getenv("VERTEX_CPR_WEB_CONCURRENCY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b96f40ee1964a65 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:198

    os.environ["WEB_CONCURRENCY"] = web_concurrency_str

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b1e1dfa823b4fb5 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:200

        f'Set the number of model server workers to {os.environ["WEB_CONCURRENCY"]}.'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68e58aed9eb5980c — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/model_server.py:209

        port=int(os.environ.get("AIP_HTTP_PORT")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aebc98ad5909b12e — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/sklearn/predictor.py:86

            self._model = pickle.load(open(prediction.MODEL_FILENAME_PKL, "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #271df2443dd4d911 — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/prediction/xgboost/predictor.py:104

            booster = pickle.load(open(prediction.MODEL_FILENAME_PKL, "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3024caef9d67b50b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/training_utils/environment_variables.py:36

    env = os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63adae90296fd3bb — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/training_utils/environment_variables.py:44

training_data_uri = os.environ.get("AIP_TRAINING_DATA_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #938923c15037f5b0 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/training_utils/environment_variables.py:47

validation_data_uri = os.environ.get("AIP_VALIDATION_DATA_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #184d38d01106a65a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/training_utils/environment_variables.py:50

test_data_uri = os.environ.get("AIP_TEST_DATA_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd5d134bc36b2c8e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/training_utils/environment_variables.py:53

model_dir = os.environ.get("AIP_MODEL_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3b032ab5eab0e8c — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/training_utils/environment_variables.py:56

checkpoint_dir = os.environ.get("AIP_CHECKPOINT_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c333b33fb6ef3b4b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/training_utils/environment_variables.py:59

tensorboard_log_dir = os.environ.get("AIP_TENSORBOARD_LOG_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4e3895d079c3b45 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/training_utils/environment_variables.py:68

tf_profiler_port = os.environ.get("AIP_TF_PROFILER_PORT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #296b5e3fc133b026 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/training_utils/environment_variables.py:71

tensorboard_api_uri = os.environ.get("AIP_TENSORBOARD_API_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae02fd0882d003ed — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/training_utils/environment_variables.py:75

tensorboard_resource_name = os.environ.get("AIP_TENSORBOARD_RESOURCE_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f92b2e7d76b44ad — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/training_utils/environment_variables.py:78

cloud_ml_job_id = os.environ.get("CLOUD_ML_JOB_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bad8c61d54431db3 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform/training_utils/environment_variables.py:81

http_handler_port = os.environ.get("AIP_HTTP_HANDLER_PORT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26455e6876bc02b4 — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/utils/yaml_utils.py:117

    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #728cf22fdbed572d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/cloud/aiplatform/utils/yaml_utils.py:144

    response = request.urlopen(req)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #055afb6305b47038 — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/vertex_ray/bigquery_datasink.py:119

                        with open(fp, "rb") as source_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b30a7a9402fe48d — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/vertex_ray/predict/sklearn/register.py:160

        with open(model_path, mode="rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6dd5e5eefa9ce958 — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/vertex_ray/predict/sklearn/register.py:167

                with open(f"{temp_dir}/{model_file_name}", mode="rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0535f95601974c07 — Filesystem access.

pkgs/python/[email protected]/google/cloud/aiplatform/vertex_ray/render.py:26

        with open(pathlib.Path(__file__).parent / "templates" / file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #427bcb47dd3e7be9 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/data_foundry_service/client.py:193

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c366692daf034f7 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/data_foundry_service/client.py:369

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3062630147d044f5 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/data_foundry_service/client.py:410

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ca78b4c6d8947bc — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/data_foundry_service/client.py:411

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b6b1d3793ee3712 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/dataset_service/client.py:210

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2580e0e23bf2b2e7 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/dataset_service/client.py:530

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92032dd46f5481f0 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/dataset_service/client.py:571

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c37fcdbdb6250ec — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/dataset_service/client.py:572

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7955dbd75b5a0cfe — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/deployment_resource_pool_service/client.py:211

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #004044af4a7d56e6 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/deployment_resource_pool_service/client.py:477

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a20e2f7fa8c6044b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/deployment_resource_pool_service/client.py:520

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aef2a8dbf4061166 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/deployment_resource_pool_service/client.py:521

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a60883c5dcfb37c — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/endpoint_service/client.py:202

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfa3cbfa9ff10066 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/endpoint_service/client.py:507

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #916a98700ffd5466 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/endpoint_service/client.py:548

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f7956a46dedfbd2 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/endpoint_service/client.py:549

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6726d8ad1f1c048 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/evaluation_service/client.py:191

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6be82ed4d7bf5db3 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/evaluation_service/client.py:367

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f62184c0126dfd5c — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/evaluation_service/client.py:408

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47506900dc8ea751 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/evaluation_service/client.py:409

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1418a2fccc226f46 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/feature_online_store_admin_service/client.py:223

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7454cce6ee663a6d — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/feature_online_store_admin_service/client.py:471

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4668d3e69ec1283b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/feature_online_store_admin_service/client.py:514

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2cbb6e23537d28e6 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/feature_online_store_admin_service/client.py:515

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2ebecbecf544383 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/feature_online_store_service/client.py:198

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84a27b6890fee4e6 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/feature_online_store_service/client.py:398

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1e00b35990261b1 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/feature_online_store_service/client.py:439

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bfe207b4022974b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/feature_online_store_service/client.py:440

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4c8018158667845 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/feature_registry_service/client.py:205

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #810c2c865dec8f22 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/feature_registry_service/client.py:429

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40c2033948713f0d — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/feature_registry_service/client.py:470

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c153a2d0ce03e67b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/feature_registry_service/client.py:471

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84e2ddea0808560f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/featurestore_online_serving_service/client.py:205

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #840dfea9892ac947 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/featurestore_online_serving_service/client.py:407

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a701b444ed84ccd — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/featurestore_online_serving_service/client.py:450

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29875c4c4f5f3ed7 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/featurestore_online_serving_service/client.py:451

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3c7108d16c216fc — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/featurestore_service/client.py:208

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab0383430ad77d58 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/featurestore_service/client.py:456

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2211ad3c7fceffa7 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/featurestore_service/client.py:497

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c6f7b56f197b407 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/featurestore_service/client.py:498

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e11ab81c3813fd9a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/gen_ai_cache_service/client.py:200

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d4f0e854afa4daf — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/gen_ai_cache_service/client.py:420

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #524ef9ad8264d44f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/gen_ai_cache_service/client.py:461

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2df044f9ceb39b4e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/gen_ai_cache_service/client.py:462

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac563db3ab0ffb30 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/gen_ai_tuning_service/client.py:200

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42510312cb3774ed — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/gen_ai_tuning_service/client.py:488

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec588cec08ab5dd8 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/gen_ai_tuning_service/client.py:529

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c3d4fbf7655c0f5 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/gen_ai_tuning_service/client.py:530

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77986c03da09edfc — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/index_endpoint_service/client.py:202

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e5be1d53de96146 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/index_endpoint_service/client.py:444

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c423b00e203817d — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/index_endpoint_service/client.py:485

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb226a8d4e6523fc — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/index_endpoint_service/client.py:486

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17338178a3401818 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/index_service/client.py:203

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17d537695cc2a980 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/index_service/client.py:423

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a79082a11bb73559 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/index_service/client.py:464

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d36d2d021abe67b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/index_service/client.py:465

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce3f8fa5a448da8e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/job_service/client.py:228

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed2fcca7a4949d23 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/job_service/client.py:803

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f3a0627c293a0ef — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/job_service/client.py:844

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #193ddf116a593bed — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/job_service/client.py:845

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #054a150422b4f699 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/llm_utility_service/client.py:194

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e79bea59a86cc3ec — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/llm_utility_service/client.py:414

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1528617291a7305f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/llm_utility_service/client.py:455

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17082483f6c7dfa4 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/llm_utility_service/client.py:456

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b790c49ce87baf71 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/match_service/client.py:192

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #601fa360e64fec41 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/match_service/client.py:390

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89ce75c4e58ae516 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/match_service/client.py:431

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4849cff7827db6a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/match_service/client.py:432

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32c91452b15a9a91 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/metadata_service/client.py:212

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe53b2a279ebc4b0 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/metadata_service/client.py:506

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d897a1907b931be0 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/metadata_service/client.py:547

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6985e1d991a22484 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/metadata_service/client.py:548

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f00e33251dfb5927 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/migration_service/client.py:197

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24b9dc9db7bb08ce — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/migration_service/client.py:522

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b7570fe66474a47 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/migration_service/client.py:563

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2742fdaa38b3f2c7 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/migration_service/client.py:564

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd74cb363ca07db4 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/model_garden_service/client.py:195

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66e79b9098439778 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/model_garden_service/client.py:454

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca84f0d4b539fa55 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/model_garden_service/client.py:495

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0519eea395cfa600 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/model_garden_service/client.py:496

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32e471f79c8193a9 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/model_service/client.py:206

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #579c9a0c0c494409 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/model_service/client.py:520

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b680111fd1ba8d7 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/model_service/client.py:561

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e81089b42ed4a8b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/model_service/client.py:562

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5ccc63b8cc9cb0d — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/notebook_service/client.py:216

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01afe5c6dd46cb77 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/notebook_service/client.py:543

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21397419a6731870 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/notebook_service/client.py:584

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dca98f9e4ce28c11 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/notebook_service/client.py:585

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #641ec51e7c60b580 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/persistent_resource_service/client.py:209

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2eca8c284e4243f0 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/persistent_resource_service/client.py:470

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9fba487241b2d126 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/persistent_resource_service/client.py:511

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #705bc5a102486aee — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/persistent_resource_service/client.py:512

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ece7f03ca951b90d — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/pipeline_service/client.py:211

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3beb46d9333c493 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/pipeline_service/client.py:610

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7def7a2fbb9c0b7 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/pipeline_service/client.py:651

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #333ccfcb40e1cc2a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/pipeline_service/client.py:652

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6855a78972e0e5bd — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/prediction_service/client.py:202

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bedbd9445682078f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/prediction_service/client.py:488

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac228dff3832c81b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/prediction_service/client.py:529

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43b0db114bb630af — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/prediction_service/client.py:530

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ece07a60c165ad5c — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/reasoning_engine_execution_service/client.py:208

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea6df64f78d8ebb8 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/reasoning_engine_execution_service/client.py:408

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #717487d6df3f50cf — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/reasoning_engine_execution_service/client.py:451

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36dbe18e75baa55a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/reasoning_engine_execution_service/client.py:452

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48c8b420240cd287 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/reasoning_engine_service/client.py:201

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd9cba7f701677f3 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/reasoning_engine_service/client.py:445

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f29dc920b5fe547 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/reasoning_engine_service/client.py:486

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd52b89cd8cad5cb — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/reasoning_engine_service/client.py:487

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d0304f88d24f1eb — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/schedule_service/client.py:205

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88e234854fca4c1d — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/schedule_service/client.py:648

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d7a95e13b470744 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/schedule_service/client.py:689

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed6e788a23371981 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/schedule_service/client.py:690

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3aa6be0b4c416357 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/session_service/client.py:202

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd716268de1531b3 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/session_service/client.py:450

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4d5b4949b84f9ba — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/session_service/client.py:491

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b90fc5491a52059e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/session_service/client.py:492

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f19e79883c238f98 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/specialist_pool_service/client.py:205

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40282bff942c6eaa — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/specialist_pool_service/client.py:403

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39ca7ccb904fb027 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/specialist_pool_service/client.py:444

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9de18c8bf88b5168 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/specialist_pool_service/client.py:445

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d05b39016faa295 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/tensorboard_service/client.py:213

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c41e606cf335df47 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/tensorboard_service/client.py:491

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9903be2a435fdd0 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/tensorboard_service/client.py:532

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91b626bfbecf8ec2 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/tensorboard_service/client.py:533

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a51077febd3a8b51 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/vertex_rag_data_service/client.py:201

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b3e1ba72ba07dfb — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/vertex_rag_data_service/client.py:509

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e958c03483825b53 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/vertex_rag_data_service/client.py:550

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb9605ef683fd329 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/vertex_rag_data_service/client.py:551

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d389d739bb1b0d2 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/vertex_rag_service/client.py:196

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0407b8cd4afa5967 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/vertex_rag_service/client.py:394

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac1ebc11d67795ca — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/vertex_rag_service/client.py:435

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bad00a218a8e3611 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/vertex_rag_service/client.py:436

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfbd7d8edb2fcc97 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/vizier_service/client.py:200

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #034a320351a50fc3 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/vizier_service/client.py:444

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #157c4d70c017bbd8 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/vizier_service/client.py:485

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #007e8ba9e260a6b0 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1/services/vizier_service/client.py:486

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fb82929f8ec916e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/dataset_service/client.py:210

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f834b24e7a877076 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/dataset_service/client.py:618

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bcacba0a73dab3d6 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/dataset_service/client.py:659

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1f9e0a1ccffd6fe — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/dataset_service/client.py:660

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eca89e9ccf05da80 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/deployment_resource_pool_service/client.py:213

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b282e745b77c3e70 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/deployment_resource_pool_service/client.py:479

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25e682071d00a52c — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/deployment_resource_pool_service/client.py:522

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3615c87e5738b7c0 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/deployment_resource_pool_service/client.py:523

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8e982ccd089e004 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/endpoint_service/client.py:202

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b13dec575d6893d7 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/endpoint_service/client.py:507

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d34daeaa6f0d6fb6 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/endpoint_service/client.py:548

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #541105fc99647700 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/endpoint_service/client.py:549

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ca2411d3110fcb2 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/evaluation_service/client.py:194

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83dce56ee592d6ce — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/evaluation_service/client.py:392

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8990d66e057104f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/evaluation_service/client.py:433

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #068a21247b126c38 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/evaluation_service/client.py:434

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #031ee1470c2c62d1 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/example_store_service/client.py:199

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3032ab0f182c210 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/example_store_service/client.py:397

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e24d73d17927e04 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/example_store_service/client.py:438

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7f6c304c830ab0c — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/example_store_service/client.py:439

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3ec4f6fff002d0f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/extension_execution_service/client.py:194

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2de208e3dcd20599 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/extension_execution_service/client.py:414

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf4325fea3424f92 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/extension_execution_service/client.py:455

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #369e4f1832bc10c6 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/extension_execution_service/client.py:456

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5a052f4ad8d7563 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/extension_registry_service/client.py:201

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19aaa84503dbd3db — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/extension_registry_service/client.py:445

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae8362b252066362 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/extension_registry_service/client.py:486

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9614356a52f25c22 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/extension_registry_service/client.py:487

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc54ef691b62604d — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/feature_online_store_admin_service/client.py:223

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8c06104cc786b0a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/feature_online_store_admin_service/client.py:471

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01198f57535f927a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/feature_online_store_admin_service/client.py:514

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e18fadcb8667d8fc — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/feature_online_store_admin_service/client.py:515

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2c324b47a6df53c — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/feature_online_store_service/client.py:198

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b6b98e36956594e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/feature_online_store_service/client.py:398

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e7b0d98c5a60562 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/feature_online_store_service/client.py:439

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f883fc884976e68 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/feature_online_store_service/client.py:440

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90842d939326ef1c — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/feature_registry_service/client.py:214

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5282557f0ed0933b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/feature_registry_service/client.py:488

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7910f13720341f2 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/feature_registry_service/client.py:529

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b2e692a1e74f909 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/feature_registry_service/client.py:530

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba561b4f039dadcf — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/featurestore_online_serving_service/client.py:205

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76ac9bf00a8a9ee8 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/featurestore_online_serving_service/client.py:407

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3c4f6489b2a836d — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/featurestore_online_serving_service/client.py:450

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44f4a99e27623b5b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/featurestore_online_serving_service/client.py:451

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23ee6be4487f2376 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/featurestore_service/client.py:210

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bedbdba55411d951 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/featurestore_service/client.py:458

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9176b75a46886e89 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/featurestore_service/client.py:499

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #167a8e42660b14b0 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/featurestore_service/client.py:500

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1022ff9d90efc38 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/gen_ai_cache_service/client.py:200

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf47f631b4823cba — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/gen_ai_cache_service/client.py:420

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #853d1fab42144891 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/gen_ai_cache_service/client.py:461

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0cf60e68a8d9ff9 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/gen_ai_cache_service/client.py:462

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8695b4f6cd9f8190 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/gen_ai_tuning_service/client.py:200

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cbb4a9caf4b2a917 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/gen_ai_tuning_service/client.py:488

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9881fa767fdcfb5e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/gen_ai_tuning_service/client.py:529

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdac0916a545587a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/gen_ai_tuning_service/client.py:530

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b547de5a355a04e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/index_endpoint_service/client.py:202

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6cb0a35b64adff6 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/index_endpoint_service/client.py:444

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9947189f081b8334 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/index_endpoint_service/client.py:485

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ccbd8933ed09eda5 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/index_endpoint_service/client.py:486

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f42b4aebe4b5b929 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/index_service/client.py:203

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e96269136b3c1d63 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/index_service/client.py:423

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #239395b67298db2d — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/index_service/client.py:464

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79154456d0be3219 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/index_service/client.py:465

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a7a0893b96a5b21 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/job_service/client.py:230

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11431352ee59585e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/job_service/client.py:805

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad8aab35a3c975ec — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/job_service/client.py:846

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ad32cad7e12623f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/job_service/client.py:847

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd4f96682ab2ab89 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/llm_utility_service/client.py:192

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43ac38929f7dbe9a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/llm_utility_service/client.py:390

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89770797795f30b1 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/llm_utility_service/client.py:431

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9700384c5131406 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/llm_utility_service/client.py:432

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a886e91d6a71abc7 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/match_service/client.py:192

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd3c638108600dfb — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/match_service/client.py:390

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2a57bfa460f8328 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/match_service/client.py:431

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c9ae652cf896508 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/match_service/client.py:432

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1a3debb0ffff4c9 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/memory_bank_service/client.py:199

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a00caa4ce010ff5e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/memory_bank_service/client.py:445

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ad89e7d5729c24b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/memory_bank_service/client.py:486

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ec6b8de44da3cdd — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/memory_bank_service/client.py:487

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc47890cc95aea1b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/metadata_service/client.py:212

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16eb8ada0af87191 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/metadata_service/client.py:506

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c3427ce123a524a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/metadata_service/client.py:547

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f28fc33d9f299bf — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/metadata_service/client.py:548

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddb68d51e30f961b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/migration_service/client.py:197

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2c510f6ed2e352d — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/migration_service/client.py:522

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e914b8a868c3265b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/migration_service/client.py:563

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #132f410c0a119c75 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/migration_service/client.py:564

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80cba9056b884375 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/model_garden_service/client.py:196

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdd3b05ba33b0532 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/model_garden_service/client.py:455

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94b7302fac158ead — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/model_garden_service/client.py:496

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #602a1a45f145b215 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/model_garden_service/client.py:497

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6fb8e02d6046eeb — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/model_monitoring_service/client.py:213

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ae557831c5edeb3 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/model_monitoring_service/client.py:567

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de2a6acc186bbd1e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/model_monitoring_service/client.py:608

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a794963c8f6fc4c1 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/model_monitoring_service/client.py:609

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8c90a4d84cd5714 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/model_service/client.py:208

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c62b4c5fd6e11713 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/model_service/client.py:522

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e052639601dff424 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/model_service/client.py:563

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec123bb19aa3af41 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/model_service/client.py:564

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51097ad2ddaa3fa9 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/notebook_service/client.py:218

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd7692e936e08633 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/notebook_service/client.py:545

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a04ef1a5aa40d6c — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/notebook_service/client.py:586

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b2c23b25c452e98 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/notebook_service/client.py:587

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abe9808f0f3c314b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/online_evaluator_service/client.py:204

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d1a3aa9688d1737 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/online_evaluator_service/client.py:402

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d24307c235ec5b48 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/online_evaluator_service/client.py:443

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3779f27a09643d3f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/online_evaluator_service/client.py:444

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f61875cc8a566256 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/persistent_resource_service/client.py:209

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5b95457a14f3348 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/persistent_resource_service/client.py:492

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1926288d3a2e70a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/persistent_resource_service/client.py:533

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0965c11b1b51a04d — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/persistent_resource_service/client.py:534

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39623732f6011a68 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/pipeline_service/client.py:213

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e288253974d5c17 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/pipeline_service/client.py:612

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ed2be22c6d1b72f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/pipeline_service/client.py:653

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a225d3b0a344262f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/pipeline_service/client.py:654

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27ed00f620c97146 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/prediction_service/client.py:202

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cf744ad75ab31f3 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/prediction_service/client.py:488

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16fd46786a5a235a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/prediction_service/client.py:529

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47361d201798356e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/prediction_service/client.py:530

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10c50c0bc0f4cba7 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/reasoning_engine_execution_service/client.py:208

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8fc7107f3fe8e9e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/reasoning_engine_execution_service/client.py:408

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc4de66e5dc2f218 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/reasoning_engine_execution_service/client.py:451

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43364db68003a553 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/reasoning_engine_execution_service/client.py:452

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0889bf98b143c066 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/reasoning_engine_runtime_revision_service/client.py:215

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a81e73c4901b08f — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/reasoning_engine_runtime_revision_service/client.py:485

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e4d13f25627dbae — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/reasoning_engine_runtime_revision_service/client.py:528

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #212a3e4412e7cba1 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/reasoning_engine_runtime_revision_service/client.py:529

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb1046fc09e8c700 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/reasoning_engine_service/client.py:203

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ca3a8f546eda48e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/reasoning_engine_service/client.py:493

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be2ac2c7696670b7 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/reasoning_engine_service/client.py:534

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9efaa572c43aa923 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/reasoning_engine_service/client.py:535

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66e870fffef6ba60 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/schedule_service/client.py:206

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28b0392d039c26ea — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/schedule_service/client.py:761

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ff47202e9a430dc — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/schedule_service/client.py:802

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad5c6319a6a0014a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/schedule_service/client.py:803

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43ac20cd58877ea8 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/session_service/client.py:202

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0c5d8df7b72a3ea — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/session_service/client.py:450

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca997fd708613325 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/session_service/client.py:491

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90e0163e5a2ab951 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/session_service/client.py:492

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1132b8d91b061af — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/specialist_pool_service/client.py:205

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad29ec1725bf75e6 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/specialist_pool_service/client.py:403

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51debb0b3d822fca — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/specialist_pool_service/client.py:444

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #394fbaf0f7202f18 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/specialist_pool_service/client.py:445

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7660739129e2dc68 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/tensorboard_service/client.py:213

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e150a630dfc7411 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/tensorboard_service/client.py:491

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3102e07ec32eef46 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/tensorboard_service/client.py:532

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8fa76224e788833 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/tensorboard_service/client.py:533

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8189506cccd2ec1e — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/vertex_rag_data_service/client.py:201

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e93bb8225ce977e7 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/vertex_rag_data_service/client.py:559

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #444d99c6b2f7ff04 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/vertex_rag_data_service/client.py:600

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d5c0ee69539edba — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/vertex_rag_data_service/client.py:601

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c5ed03552af3c3a — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/vertex_rag_service/client.py:196

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #763606cbf0c02f15 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/vertex_rag_service/client.py:394

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a632b900dac8c31 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/vertex_rag_service/client.py:435

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52e31962d9ef6970 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/vertex_rag_service/client.py:436

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bea4bb7c8f5f5bde — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/vizier_service/client.py:200

            use_client_cert_str = os.getenv(
                "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
            ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #edd8a6f520cb58b6 — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/vizier_service/client.py:444

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c92301216e612f2b — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/vizier_service/client.py:485

        use_mtls_endpoint = os.getenv("GOOGLE_API_USE_MTLS_ENDPOINT", "auto").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79940263d710341d — Environment-variable access.

pkgs/python/[email protected]/google/cloud/aiplatform_v1beta1/services/vizier_service/client.py:486

        universe_domain_env = os.getenv("GOOGLE_CLOUD_UNIVERSE_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #114ac7f92651c37d — Filesystem access.

pkgs/python/[email protected]/setup.py:28

with io.open(readme_filename, encoding="utf-8") as readme_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c310601ffadec6e9 — Filesystem access.

pkgs/python/[email protected]/setup.py:32

with open(os.path.join(package_root, "google/cloud/aiplatform/version.py")) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83629cbc7085418f — Filesystem access.

pkgs/python/[email protected]/vertexai/_genai/_agent_engines_utils.py:1461

            with open(requirements) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e84443ce6efc302 — Environment-variable access.

pkgs/python/[email protected]/vertexai/_genai/_evals_common.py:2150

    original_location = os.environ.get("GOOGLE_CLOUD_LOCATION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #803129f1e29526ea — Environment-variable access.

pkgs/python/[email protected]/vertexai/_genai/_evals_common.py:2172

                os.environ["GOOGLE_CLOUD_LOCATION"] = "global"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b7280be7788e753 — Environment-variable access.

pkgs/python/[email protected]/vertexai/_genai/_evals_common.py:2201

                del os.environ["GOOGLE_CLOUD_LOCATION"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e7acf89102ea8f9 — Environment-variable access.

pkgs/python/[email protected]/vertexai/_genai/_evals_common.py:2203

                os.environ["GOOGLE_CLOUD_LOCATION"] = original_location

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #5c154738bd1dccb6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/_evals_utils.py:923

        response = api_client.request("get", operation.name, {}, None)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #b5bf75fd71713e2f — Filesystem access.

pkgs/python/[email protected]/vertexai/_genai/_skills_utils.py:50

                with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #1040e4754e77f64e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/a2a_task_events.py:161

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f882827c9215d991 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/a2a_task_events.py:250

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b4c75d0a21e0c020 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/a2a_tasks.py:198

        self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #59a6c121194755a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/a2a_tasks.py:256

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2745333c157caa3d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/a2a_tasks.py:340

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #47da0d7b2d1f1e24 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/a2a_tasks.py:428

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #87ee6c15a8f1806a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/agent_engines.py:813

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #36c17fa1135ac71c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/agent_engines.py:887

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8b26dee29a4fda08 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/agent_engines.py:964

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #042596b9f95bb5f2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/agent_engines.py:1037

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6e61c5845823e94e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/agent_engines.py:1129

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1181c2bb3bda6da6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/agent_engines.py:1198

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #50b051d99673ca9c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/agent_engines.py:1269

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d6f52e4d1f648ca5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/agent_engines.py:1340

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ee58c2eea6301279 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/agent_engines.py:1412

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f356216e21e025dd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/agent_engines.py:1483

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #62e1fbb3d44d0e98 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/agent_engines.py:1630

        raw_response = self._api_client.request("get", name, {})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #22ab6ba7be26f120 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/datasets.py:298

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d201666af43daecb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/datasets.py:390

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c00c39b32d54e3bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/datasets.py:472

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cb2c0f5e3521f310 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/datasets.py:543

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e54ef54652647ccf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/datasets.py:615

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #49651011cceabf51 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/datasets.py:693

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f9200aa697369a57 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/datasets.py:763

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #587ea7b3e7dc8d4d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/datasets.py:843

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #62c2420ea6a23323 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:1057

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #21f13fdb4b50edc1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:1133

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #17dcbf3799a0d69a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:1222

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1ada1a7dd517273b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:1299

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #90dbc525f6468dc9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:1371

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e5369240b8728063 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:1475

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e4d307cb7c6f3a3a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:1557

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f009dcfb2530d859 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:1635

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b078271dd33a6020 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:1715

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6b8248e22164350f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:1787

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #70ed93aec0950171 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:1859

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #425322d62eb9368c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:1931

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5c4004946c406ddb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:2000

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ecba774bc50a2470 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:2068

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f03c0ae9919e4a53 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/evals.py:2331

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5bc859dc1f69a0fc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memories.py:584

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8764cb3a5f6fdce5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memories.py:666

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f5049afc88a45171 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memories.py:754

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1be932997f95dbab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memories.py:834

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ca0797fac7f646f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memories.py:918

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fdfcc13562527eda — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memories.py:992

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #245d8e5744b5857b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memories.py:1062

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3f70883e167a4788 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memories.py:1132

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5527d5298e83eee4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memories.py:1216

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f717241239e1170c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memories.py:1318

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b84b8483a664a8be — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memories.py:1394

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5c4fd8303f177146 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memories.py:1472

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f78034444e4fd4f5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memories.py:1552

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8517beefed28e845 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memory_revisions.py:140

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #30a0abb47ae274de — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/memory_revisions.py:224

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #08978ac146c26da9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompt_optimizer.py:251

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #05907843e9d8e7a5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompt_optimizer.py:323

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #791d9ddef3960208 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompt_optimizer.py:395

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #533e2978a0fbd073 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompt_optimizer.py:586

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0f538fd71c48713d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:512

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d1c4be735b857326 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:592

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5e40a31fa706a289 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:664

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b434a439b776ccdc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:740

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a5c76e254c9c38e3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:816

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d4d59b72de49b69e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:884

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9f2eae7c3af59a91 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:962

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2c0568bc5d3daf3d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:1027

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #570b9adc76e4c582 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:1101

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #df807666d41f611b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:1177

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3376611e72f15b0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:1261

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7d5e4583ed65bb5a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:1333

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #13252883fda2549c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:1405

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6ae760aef47c8ea9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:1480

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #64edde547643776d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/prompts.py:2311

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5fd76827bb07cf13 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/runtime_revisions.py:189

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3dd4ea7b1f6f1b27 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/runtime_revisions.py:273

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b812bc4c5855c9d6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/runtime_revisions.py:359

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #43511cdbc2bf75fa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/runtime_revisions.py:433

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c2061e6458b99245 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/runtime_revisions.py:507

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0faa28b7338d0ded — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandbox_snapshots.py:206

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9e97e7d65566dac3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandbox_snapshots.py:281

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #381a96a71594cf32 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandbox_snapshots.py:356

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #de6f2966b552f393 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandbox_snapshots.py:431

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #88d85aed99f72466 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandbox_snapshots.py:501

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d5f7541816eecfe7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandbox_templates.py:217

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #53a29705b8ab0ae3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandbox_templates.py:299

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7a94df714778e6c2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandbox_templates.py:385

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #39de733bb961f660 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandbox_templates.py:467

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #67224781f0cbc6e2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandbox_templates.py:537

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #69bd356e2d9f6cc7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandboxes.py:231

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #faacdbae0fa5611f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandboxes.py:311

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a12b101fd2dff6b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandboxes.py:387

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1ec78ffe673bef9b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandboxes.py:467

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c179f271d7a5c8c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandboxes.py:551

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1c360153810fae5e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandboxes.py:621

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dbc43fd150243264 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sandboxes.py:965

        response = http_client._api_client.request(http_method, path, request_dict)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f86e835b4eff2c81 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/session_events.py:191

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e27992a230c9f145 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/session_events.py:275

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #aceb2a53185fd64a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sessions.py:273

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6b31cb56319bab30 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sessions.py:357

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #64af1493f89ac58f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sessions.py:441

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0fe667357b3e7a0f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sessions.py:525

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4c6ee3fdcecfe872 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sessions.py:595

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0620600c3af96c64 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/sessions.py:679

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fc6bb22a30997956 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/skill_revisions.py:126

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8722edd5cc4f048d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/skill_revisions.py:200

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c37cc0c23240d35a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/skills.py:267

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #805f8bfb314e2f4b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/skills.py:336

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #00613a0ba487abc9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/skills.py:410

        response = self._api_client.request("post", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7869e8164e16921f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/skills.py:479

        response = self._api_client.request("patch", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b7aae9b44ae5a6ee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/skills.py:547

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2c277dce09931beb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/skills.py:616

        response = self._api_client.request("delete", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #20068d741a80c59d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/_genai/skills.py:684

        response = self._api_client.request("get", path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #9e01115192945a04 — Filesystem access.

pkgs/python/[email protected]/vertexai/_genai/types/common.py:1837

        with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21e6a4879c6bcf3c — Filesystem access.

pkgs/python/[email protected]/vertexai/_genai/types/common.py:1944

                with open(config_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #678fb5dd6f9bf573 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/_agent_engines.py:1131

        if GOOGLE_CLOUD_AGENT_ENGINE_ENABLE_TELEMETRY not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bc908b18305c96b — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/_agent_engines.py:1132

            os.environ[GOOGLE_CLOUD_AGENT_ENGINE_ENABLE_TELEMETRY] = "unspecified"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71c14f3dc4273887 — Filesystem access.

pkgs/python/[email protected]/vertexai/agent_engines/_agent_engines.py:1156

            with open(requirements) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b85b8656415c99dd — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/_agent_engines.py:1369

        if env_var not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f8e7cf215c34f8d — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/_agent_engines.py:1372

            aip_types.EnvVar(name=env_var, value=os.environ[env_var])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0c6a5a54ea0a6ed — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/a2a.py:320

        os.environ["GOOGLE_GENAI_USE_VERTEXAI"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0262378489fad8e2 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/a2a.py:322

        os.environ["GOOGLE_CLOUD_PROJECT"] = project

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8f10362b6ca3128 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/a2a.py:324

        os.environ["GOOGLE_CLOUD_LOCATION"] = location

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #111474aeb212313d — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/a2a.py:325

        agent_engine_id = os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_ID", "test-agent-engine")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb7561f8119257ad — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:346

        location = os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_LOCATION", "") or os.getenv(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4aa4cb47a058e12f — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:346

        location = os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_LOCATION", "") or os.getenv(
            "GOOGLE_CLOUD_LOCATION", ""
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb2a93f1bad964b1 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:349

        agent_engine_id = os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb0bca72d5297ee7 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:385

            "service.name": os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_ID", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05ccff4b5493a5b8 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:388

                os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_LOCATION", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24bf346dddd42bcf — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:389

                or os.getenv("GOOGLE_CLOUD_LOCATION", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d66cc22a0664333 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:501

        if "gen_ai_latest_experimental" in os.getenv(
            "OTEL_SEMCONV_STABILITY_OPT_IN", ""
        ).split(","):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #657448c1d07eaf13 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:508

                        default_log_name=os.getenv(
                            "GCP_DEFAULT_LOG_NAME", "adk-on-agent-engine"
                        ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #720fa4dc21825d26 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:519

                        default_log_name=os.getenv(
                            "GCP_DEFAULT_LOG_NAME", "adk-on-agent-engine"
                        ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #c9eb8951a7a6f9ed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:598

    r = session.post(endpoint, data=None)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #6465490a4c32d951 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:612

    use_mtls_endpoint_str = os.getenv(
        "GOOGLE_API_USE_MTLS_ENDPOINT", _MtlsEndpoint.AUTO.value
    ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4935e8d7cf9d9ad — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:650

        use_client_cert_str = os.getenv(
            "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
        ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85e93e441df12d4b — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:756

                initializer.global_config.api_key or os.environ.get("GOOGLE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63bc63ac11466e62 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:920

        os.environ["GOOGLE_GENAI_USE_VERTEXAI"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cc8847ac114472b — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:921

        os.environ["GOOGLE_GENAI_USE_ENTERPRISE"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #401725f3dffe1856 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:924

            os.environ["GOOGLE_CLOUD_PROJECT"] = project

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05eaa7bcf2ba66ac — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:927

            if "GOOGLE_CLOUD_AGENT_ENGINE_LOCATION" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e76ef28aa3a2237d — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:928

                os.environ["GOOGLE_CLOUD_AGENT_ENGINE_LOCATION"] = location

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b235ade63a6e2abb — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:929

            if "GOOGLE_CLOUD_LOCATION" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32e56541dbcb6d1b — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:930

                os.environ["GOOGLE_CLOUD_LOCATION"] = location

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88d28155a14783b0 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:931

        agent_engine_location = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #891032b8cade251d — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:931

        agent_engine_location = os.environ.get(
            "GOOGLE_CLOUD_AGENT_ENGINE_LOCATION",  # the runtime env var (if set)
            location,  # the location set in the AdkApp template
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb59f87f78b9144a — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:937

            os.environ["GOOGLE_API_KEY"] = express_mode_api_key

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a4f1faa575be5ae — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:939

            os.environ.pop("GOOGLE_CLOUD_AGENT_ENGINE_LOCATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d98d48a9b3aef79 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:940

            os.environ.pop("GOOGLE_CLOUD_LOCATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24a059c64b9a0ebc — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:941

            os.environ.pop("GOOGLE_CLOUD_PROJECT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55cd5a6065b0b8ef — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:948

            os.environ["ADK_CAPTURE_MESSAGE_CONTENT_IN_SPANS"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66375986f4c8098e — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:950

            os.environ["ADK_CAPTURE_MESSAGE_CONTENT_IN_SPANS"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd7543e81b579917 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:996

            if "GOOGLE_CLOUD_AGENT_ENGINE_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #769d0136e51c147d — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:997

                self._tmpl_attrs["app_name"] = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #060309c398d6b736 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:997

                self._tmpl_attrs["app_name"] = os.environ.get(
                    "GOOGLE_CLOUD_AGENT_ENGINE_ID",
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29297c74723b8cb5 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:1012

        elif "GOOGLE_CLOUD_AGENT_ENGINE_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34518277eaa5a572 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:1023

                    agent_engine_id=os.environ.get("GOOGLE_CLOUD_AGENT_ENGINE_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf6618afee07b0b8 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:1035

                    agent_engine_id=os.environ.get("GOOGLE_CLOUD_AGENT_ENGINE_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22305ffbb14b73a9 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:1044

        elif "GOOGLE_CLOUD_AGENT_ENGINE_ID" in os.environ and is_version_sufficient(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50585ef7dc8b4b9a — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:1057

                    agent_engine_id=os.environ.get("GOOGLE_CLOUD_AGENT_ENGINE_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #992cec5edb8e9ee0 — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:1069

                    agent_engine_id=os.environ.get("GOOGLE_CLOUD_AGENT_ENGINE_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c04ec4856c88ecde — Environment-variable access.

pkgs/python/[email protected]/vertexai/agent_engines/templates/adk.py:1802

        env_value = os.getenv(
            GOOGLE_CLOUD_AGENT_ENGINE_ENABLE_TELEMETRY, "unspecified"
        ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4173e11fa42a6f9f — Filesystem access.

pkgs/python/[email protected]/vertexai/evaluation/utils.py:214

        with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d51a23a0f083716 — Filesystem access.

pkgs/python/[email protected]/vertexai/evaluation/utils.py:323

        json.dump(summary, open(local_summary_path, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6519f977b6c2ce3e — Filesystem access.

pkgs/python/[email protected]/vertexai/generative_models/_generative_models.py:3257

        image_bytes = pathlib.Path(location).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff7634a6a461c461 — Filesystem access.

pkgs/python/[email protected]/vertexai/preview/evaluation/metric_utils.py:72

        with open(file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #828644fbb9d96ff8 — Filesystem access.

pkgs/python/[email protected]/vertexai/preview/evaluation/metric_utils.py:203

    with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8d59c973264a8eb — Filesystem access.

pkgs/python/[email protected]/vertexai/preview/evaluation/utils.py:272

        with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f00787c2a8dc24d2 — Filesystem access.

pkgs/python/[email protected]/vertexai/preview/evaluation/utils.py:408

        json.dump(summary, open(local_summary_path, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1d71518259e2f99 — Filesystem access.

pkgs/python/[email protected]/vertexai/preview/rag/rag_data.py:490

        "file": open(path, "rb"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07223a3d7e2265b8 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/a2a.py:241

        os.environ["GOOGLE_GENAI_USE_VERTEXAI"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec61c5638fb94c5b — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/a2a.py:243

        os.environ["GOOGLE_CLOUD_PROJECT"] = project

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5921732431953862 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/a2a.py:245

        os.environ["GOOGLE_CLOUD_LOCATION"] = location

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e327c0a716a05c0f — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/a2a.py:246

        agent_engine_id = os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_ID", "test-agent-engine")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddfd142e443d4843 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:278

    use_mtls_endpoint_str = os.getenv(
        "GOOGLE_API_USE_MTLS_ENDPOINT", _MtlsEndpoint.AUTO.value
    ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20dd6bbb4a0ada0f — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:316

        use_client_cert_str = os.getenv(
            "GOOGLE_API_USE_CLIENT_CERTIFICATE", "false"
        ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f358cbd95f3f2706 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:407

        location = os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_LOCATION", "") or os.getenv(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9899a87cef5ccdd1 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:407

        location = os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_LOCATION", "") or os.getenv(
            "GOOGLE_CLOUD_LOCATION", ""
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e826109a511d1db4 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:410

        agent_engine_id = os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c30c4cee910d9c9 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:446

            "service.name": os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_ID", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a455728c6e358d9c — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:449

                os.getenv("GOOGLE_CLOUD_AGENT_ENGINE_LOCATION", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95d80ed4f84a3ce5 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:450

                or os.getenv("GOOGLE_CLOUD_LOCATION", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6ad5fbd8bd96a7c — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:562

        if "gen_ai_latest_experimental" in os.getenv(
            "OTEL_SEMCONV_STABILITY_OPT_IN", ""
        ).split(","):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9339093524d2945b — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:569

                        default_log_name=os.getenv(
                            "GCP_DEFAULT_LOG_NAME", "adk-on-agent-engine"
                        ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85333cdcbe3afdae — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:580

                        default_log_name=os.getenv(
                            "GCP_DEFAULT_LOG_NAME", "adk-on-agent-engine"
                        ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6628d188d8034c2b — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:833

        os.environ["GOOGLE_GENAI_USE_VERTEXAI"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f8bd21a92b063fd — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:835

        os.environ["GOOGLE_CLOUD_PROJECT"] = project

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #007d120675268d06 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:838

            if "GOOGLE_CLOUD_AGENT_ENGINE_LOCATION" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15155954b670253f — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:839

                os.environ["GOOGLE_CLOUD_AGENT_ENGINE_LOCATION"] = location

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32f9e4f5fc6f5928 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:840

            if "GOOGLE_CLOUD_LOCATION" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02231e54715b2992 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:841

                os.environ["GOOGLE_CLOUD_LOCATION"] = location

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4a357a1e5a542a9 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:847

            os.environ["ADK_CAPTURE_MESSAGE_CONTENT_IN_SPANS"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2558f62afcd46086 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:849

            os.environ["ADK_CAPTURE_MESSAGE_CONTENT_IN_SPANS"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62e3e6ce5fbcfcd2 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:889

            os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c728ca4af85337dc — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:890

        if "GOOGLE_CLOUD_AGENT_ENGINE_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa2d31f8ca62bb58 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:891

            self._tmpl_attrs["app_name"] = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8caca09b467b0a1d — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:891

            self._tmpl_attrs["app_name"] = os.environ.get(
                "GOOGLE_CLOUD_AGENT_ENGINE_ID",
                self._tmpl_attrs.get("app_name"),
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4bb16ce4760780e — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:905

        elif "GOOGLE_CLOUD_AGENT_ENGINE_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39de189c883d4c70 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:915

                        agent_engine_id=os.environ.get("GOOGLE_CLOUD_AGENT_ENGINE_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9ce0dd7bb2a924b — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:930

                    agent_engine_id=os.environ.get("GOOGLE_CLOUD_AGENT_ENGINE_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #166d62e7f6ed7140 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:939

        elif "GOOGLE_CLOUD_AGENT_ENGINE_ID" in os.environ and is_version_sufficient(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8cedb9608baef711 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:950

                    agent_engine_id=os.environ.get("GOOGLE_CLOUD_AGENT_ENGINE_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5296ad2fcc71136 — Environment-variable access.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:1674

        env_value = os.getenv(
            GOOGLE_CLOUD_AGENT_ENGINE_ENABLE_TELEMETRY, "unspecified"
        ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #21a8fc74112466fd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/preview/reasoning_engines/templates/adk.py:1730

        r = session.post(endpoint, data=None)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #0bac3462769f0e37 — Filesystem access.

pkgs/python/[email protected]/vertexai/rag/rag_data.py:429

        "file": open(path, "rb"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db49b6fc840b4c28 — Filesystem access.

pkgs/python/[email protected]/vertexai/reasoning_engines/_reasoning_engines.py:603

            with open(requirements) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #026f69fa39c46a87 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vertexai/tokenization/_tokenizer_loading.py:57

    resp = requests.get(file_url_path)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #61a8cbcfaf84d992 — Filesystem access.

pkgs/python/[email protected]/vertexai/tokenization/_tokenizer_loading.py:84

    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b2789b43563ee57 — Filesystem access.

pkgs/python/[email protected]/vertexai/tokenization/_tokenizer_loading.py:98

        with open(tmp_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eeba5ef4d7a45dbb — Filesystem access.

pkgs/python/[email protected]/vertexai/vision_models/_vision_models.py:186

        image_bytes = pathlib.Path(location).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2616852e63e7a377 — Filesystem access.

pkgs/python/[email protected]/vertexai/vision_models/_vision_models.py:531

        video_bytes = pathlib.Path(location).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

opentelemetry-api

python dependency

medium telemetry dependency Excluded from app score #8da649ef14285e3c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/_logs/__init__.py:25

from opentelemetry._logs._internal import (
    Logger,
    LoggerProvider,
    LogRecord,
    NoOpLogger,
    NoOpLoggerProvider,
    get_logger,
    get_logger_provider,
    set_logger_provider,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b8e3c39184ec4069 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/_logs/__init__.py:35

from opentelemetry._logs.severity import SeverityNumber

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c3bd952391eb8128 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/_logs/_internal/__init__.py:35

from opentelemetry._logs.severity import SeverityNumber

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7357df19d2d242d1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/_logs/_internal/__init__.py:36

from opentelemetry.context import get_current

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b778dbf62101b5a7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/_logs/_internal/__init__.py:37

from opentelemetry.context.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c071a24bbf922c95 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/_logs/_internal/__init__.py:38

from opentelemetry.environment_variables import _OTEL_PYTHON_LOGGER_PROVIDER

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bcc22ab645a8b76e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/_logs/_internal/__init__.py:39

from opentelemetry.trace import get_current_span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #308c9be728bf3136 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/_logs/_internal/__init__.py:40

from opentelemetry.trace.span import TraceFlags

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d0b395e87adee7dd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/_logs/_internal/__init__.py:41

from opentelemetry.util._once import Once

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9aa86887252bdcee — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/_logs/_internal/__init__.py:42

from opentelemetry.util._providers import _load_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ecf7202ea6a01bcb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/_logs/_internal/__init__.py:43

from opentelemetry.util.types import AnyValue, _ExtendedAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d67c7a820fe8a9ca — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/attributes/__init__.py:10

from opentelemetry.util import types

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9ed5e0bfbb6dd2eb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/baggage/__init__.py:9

from opentelemetry.context import create_key, get_value, set_value

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2433fa19843ae7cd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/baggage/__init__.py:10

from opentelemetry.context.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6d84591bb3f75882 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/baggage/__init__.py:11

from opentelemetry.util.re import (
    _BAGGAGE_PROPERTY_FORMAT,
    _KEY_FORMAT,
    _VALUE_FORMAT,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9d7c51d94ab4fdb6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/baggage/propagation/__init__.py:9

from opentelemetry.baggage import _is_valid_pair, get_all, set_baggage

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b76b7237d190118b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/baggage/propagation/__init__.py:10

from opentelemetry.context import get_current

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #babf46dc7a3df357 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/baggage/propagation/__init__.py:11

from opentelemetry.context.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a145213b6094807a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/baggage/propagation/__init__.py:12

from opentelemetry.propagators import textmap

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d90646130020006e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/baggage/propagation/__init__.py:13

from opentelemetry.util.re import _DELIMITER_PATTERN

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a9cef69a0413c428 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/context/__init__.py:12

from opentelemetry.context.context import Context, _RuntimeContext  # noqa

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7f3147e1e31bfd7f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/context/__init__.py:13

from opentelemetry.context.contextvars_context import ContextVarsRuntimeContext

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #688ce699dea1c5a6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/context/__init__.py:14

from opentelemetry.environment_variables import OTEL_PYTHON_CONTEXT

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b6a2e4962422c2b3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/context/__init__.py:30

    from opentelemetry.util._importlib_metadata import (  # noqa: PLC0415
        entry_points,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #52942da31c11e942 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/context/contextvars_context.py:8

from opentelemetry.context.context import Context, _RuntimeContext

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0e4fb83ccdbee76d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/__init__.py:31

from opentelemetry.metrics._internal import (
    Meter,
    MeterProvider,
    NoOpMeter,
    NoOpMeterProvider,
    get_meter,
    get_meter_provider,
    set_meter_provider,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bbd2a4546172ee93 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/__init__.py:40

from opentelemetry.metrics._internal.instrument import (
    Asynchronous,
    CallbackOptions,
    CallbackT,
    Counter,
    Histogram,
    Instrument,
    NoOpCounter,
    NoOpHistogram,
    NoOpObservableCounter,
    NoOpObservableGauge,
    NoOpObservableUpDownCounter,
    NoOpUpDownCounter,
    ObservableCounter,
    ObservableGauge,
    ObservableUpDownCounter,
    Synchronous,
    UpDownCounter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2d6d15534354d6e9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/__init__.py:59

from opentelemetry.metrics._internal.instrument import Gauge as _Gauge

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3ba7e34ebccc4fc5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/__init__.py:60

from opentelemetry.metrics._internal.instrument import NoOpGauge as _NoOpGauge

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #53f4d82f0e891c08 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/__init__.py:61

from opentelemetry.metrics._internal.observation import Observation

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a09457471d1ee4ed — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/_internal/__init__.py:41

from opentelemetry.environment_variables import OTEL_PYTHON_METER_PROVIDER

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #32a4d653eeb26624 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/_internal/__init__.py:42

from opentelemetry.metrics._internal.instrument import (
    CallbackT,
    Counter,
    Gauge,
    Histogram,
    NoOpCounter,
    NoOpGauge,
    NoOpHistogram,
    NoOpObservableCounter,
    NoOpObservableGauge,
    NoOpObservableUpDownCounter,
    NoOpUpDownCounter,
    ObservableCounter,
    ObservableGauge,
    ObservableUpDownCounter,
    UpDownCounter,
    _MetricsHistogramAdvisory,
    _ProxyCounter,
    _ProxyGauge,
    _ProxyHistogram,
    _ProxyObservableCounter,
    _ProxyObservableGauge,
    _ProxyObservableUpDownCounter,
    _ProxyUpDownCounter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #29215e254c0d3cd3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/_internal/__init__.py:67

from opentelemetry.util._once import Once

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #215f5d38a5d641b4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/_internal/__init__.py:68

from opentelemetry.util._providers import _load_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #158fa17efc856593 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/_internal/__init__.py:69

from opentelemetry.util.types import (
    Attributes,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cb1dd3eb89a1aa2c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/_internal/instrument.py:18

from opentelemetry import metrics

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #79c59606bca25f5e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/_internal/instrument.py:19

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2ae5be7a853f9539 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/_internal/instrument.py:20

from opentelemetry.metrics._internal.observation import Observation

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #dfdf6fcb2a32e10b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/_internal/instrument.py:21

from opentelemetry.util.types import (
    Attributes,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5e2c99a64a33ac0c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/_internal/observation.py:5

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6dbed1d5ed27bcdb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/metrics/_internal/observation.py:6

from opentelemetry.util.types import Attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #02aa1b92a2e9b595 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/propagate/__init__.py:63

from opentelemetry.context.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fa8e3bf0db389220 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/propagate/__init__.py:64

from opentelemetry.environment_variables import OTEL_PROPAGATORS

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #173f973c53bcc6a6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/propagate/__init__.py:65

from opentelemetry.propagators import composite, textmap

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f2a26ff918535e8e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/propagate/__init__.py:115

        from opentelemetry.baggage.propagation import (  # noqa: PLC0415
            W3CBaggagePropagator,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #47980cdb2a5f0253 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/propagate/__init__.py:120

        from opentelemetry.trace.propagation.tracecontext import (  # noqa: PLC0415
            TraceContextTextMapPropagator,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b1cee1778653b1fc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/propagate/__init__.py:129

    from opentelemetry.util._importlib_metadata import (  # noqa: PLC0415
        entry_points,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6228bab7a9755478 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/propagators/_envcarrier.py:15

from opentelemetry.propagators.textmap import Getter, Setter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1dbc861ea9889625 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/propagators/composite.py:8

from opentelemetry.context.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #487a8b0135e6472c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/propagators/composite.py:9

from opentelemetry.propagators import textmap

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d9765a67028b04d8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/propagators/textmap.py:8

from opentelemetry.context.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #13cd02bb5e1ea8e5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/__init__.py:74

from opentelemetry import context as context_api

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #84b308b75ae5b284 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/__init__.py:75

from opentelemetry.attributes import BoundedAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ef82876f97ce78aa — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/__init__.py:76

from opentelemetry.context.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #aa0df2bf07f967ff — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/__init__.py:77

from opentelemetry.environment_variables import OTEL_PYTHON_TRACER_PROVIDER

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d369fb0f5582f6a4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/__init__.py:78

from opentelemetry.trace.propagation import (
    _SPAN_KEY,
    get_current_span,
    set_span_in_context,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a9d1fe150f651a27 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/__init__.py:83

from opentelemetry.trace.span import (
    DEFAULT_TRACE_OPTIONS,
    DEFAULT_TRACE_STATE,
    INVALID_SPAN,
    INVALID_SPAN_CONTEXT,
    INVALID_SPAN_ID,
    INVALID_TRACE_ID,
    NonRecordingSpan,
    Span,
    SpanContext,
    TraceFlags,
    TraceState,
    format_span_id,
    format_trace_id,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #95e6994b318d82ac — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/__init__.py:98

from opentelemetry.trace.status import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2e3678556731af42 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/__init__.py:99

from opentelemetry.util import types

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #14ee6bcd63f2aa64 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/__init__.py:100

from opentelemetry.util._decorator import _agnosticcontextmanager

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #66b943ab70fb4999 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/__init__.py:101

from opentelemetry.util._once import Once

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4af5937157d09904 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/__init__.py:102

from opentelemetry.util._providers import _load_provider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #132d385254274b96 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/propagation/__init__.py:4

from opentelemetry.context import create_key, get_value, set_value

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #faf48c7f0fefd0db — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/propagation/__init__.py:5

from opentelemetry.context.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #faa461b9725d2117 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/propagation/__init__.py:6

from opentelemetry.trace.span import INVALID_SPAN, Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b1399eb10257dd83 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/propagation/tracecontext.py:6

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #34c320737e0ce699 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/propagation/tracecontext.py:7

from opentelemetry.context.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #911c86ad4fff76f7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/propagation/tracecontext.py:8

from opentelemetry.propagators import textmap

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7d6cd7a06a42a3cd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/propagation/tracecontext.py:9

from opentelemetry.trace import format_span_id, format_trace_id

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #346ecd10b9b55e56 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/propagation/tracecontext.py:10

from opentelemetry.trace.span import TraceState

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #24af64a094c611dc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/span.py:14

from opentelemetry.trace.status import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cc71dcb41e8871b6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/trace/span.py:15

from opentelemetry.util import types

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #206f19ccafe53f5a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/util/_providers.py:9

    from opentelemetry.metrics import MeterProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #644e97d80ba9d811 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/util/_providers.py:10

    from opentelemetry.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bafa2377489a7852 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/opentelemetry/util/_providers.py:21

    from opentelemetry.util._importlib_metadata import (  # noqa: PLC0415
        entry_points,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 7 low-confidence finding(s)

low env_fs dependency Excluded from app score #039987e82bd6e7ea — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/_logs/_internal/__init__.py:394

        if _OTEL_PYTHON_LOGGER_PROVIDER not in environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df9db847c50b6678 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/context/__init__.py:25

    configured_context = os.environ.get(OTEL_PYTHON_CONTEXT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e43cc8739e38b07d — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/metrics/_internal/__init__.py:868

        if OTEL_PYTHON_METER_PROVIDER not in environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6879ad121d2fa3b8 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/propagate/__init__.py:112

    configured = environ.get(OTEL_PROPAGATORS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7df31d72c5c74ccc — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/propagate/__init__.py:167

environ_propagators = environ.get(OTEL_PROPAGATORS, "tracecontext,baggage")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34da0a7d0a8f41f0 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/trace/__init__.py:573

        if OTEL_PYTHON_TRACER_PROVIDER not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51aebbe16f8ef0d1 — Environment-variable access.

pkgs/python/[email protected]/src/opentelemetry/util/_providers.py:28

            environ.get(provider_environment_variable, f"default_{provider}"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

azure-core-tracing-opentelemetry

python dependency

medium telemetry dependency Excluded from app score #a858f1e4a86797f2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/azure/core/tracing/ext/opentelemetry_span/__init__.py:9

from opentelemetry import context, trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #07224a0b91d66c0b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/azure/core/tracing/ext/opentelemetry_span/__init__.py:10

from opentelemetry.trace import (
    Span,
    Status,
    StatusCode,
    Tracer,
    NonRecordingSpan,
    SpanKind as OpenTelemetrySpanKind,
    Link as OpenTelemetryLink,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #96398ab889f98995 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/azure/core/tracing/ext/opentelemetry_span/__init__.py:19

from opentelemetry.propagate import extract, inject  # type: ignore[attr-defined]

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1c3abb1a9df1577d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/azure/core/tracing/ext/opentelemetry_span/__init__.py:20

from opentelemetry.trace.propagation import get_current_span as get_span_from_context  # type: ignore[attr-defined]

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #df318f69b1b4f8b1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/azure/core/tracing/ext/opentelemetry_span/__init__.py:24

    from opentelemetry.context import _SUPPRESS_HTTP_INSTRUMENTATION_KEY  # type: ignore[attr-defined]

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ffe42dce248c2834 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_custom_span_processor.py:31

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #59fcd5fd96e352d7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_custom_span_processor.py:32

from opentelemetry.sdk.trace import ReadableSpan, TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #129ffd32ced21014 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_custom_span_processor.py:33

from opentelemetry.sdk.trace.export import BatchSpanProcessor, ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1e277c38dcce746b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_eventgrid.py:29

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #96083b715416b19e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_eventgrid.py:30

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7f62ffc20e7ee6ef — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_eventgrid.py:31

from opentelemetry.sdk.trace.export import ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #69f5cce5222e38b2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_eventgrid.py:32

from opentelemetry.sdk.trace.export import SimpleSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2d489adf2e3d67c6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_eventhubs.py:27

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #073b271e6d8cfd7c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_eventhubs.py:28

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f4c862b88844d59d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_eventhubs.py:29

from opentelemetry.sdk.trace.export import ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7da1e1f339d94fa8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_eventhubs.py:30

from opentelemetry.sdk.trace.export import SimpleSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c7fae5c1bc52aab6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_receive_eh.py:28

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6e723e3ad9471103 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_receive_eh.py:29

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9e43d4fec3915f3e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_receive_eh.py:30

from opentelemetry.sdk.trace.export import ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #77c568acf4dd9fad — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_receive_eh.py:31

from opentelemetry.sdk.trace.export import SimpleSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1365f3960fd4296d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_receive_sb.py:30

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5c9e9d0bd905b4d8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_receive_sb.py:31

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #878bb5b0bd3d9c9a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_receive_sb.py:37

from opentelemetry.sdk.trace.export import ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3d220349fc26bcfe — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_receive_sb.py:38

from opentelemetry.sdk.trace.export import SimpleSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7360684f8b0fda6d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_servicebus.py:28

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #560959f04551e666 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_servicebus.py:29

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #603a47f779f29599 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_servicebus.py:30

from opentelemetry.sdk.trace.export import ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b08e456fd25ddb22 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_servicebus.py:31

from opentelemetry.sdk.trace.export import SimpleSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1e79c9875750c402 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_storage.py:28

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d1dce38a7864428e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_storage.py:29

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e6434341eacc811e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_storage.py:30

from opentelemetry.sdk.trace.export import ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #de44112060af8df9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_storage.py:31

from opentelemetry.sdk.trace.export import SimpleSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 15 low-confidence finding(s)

low env_fs dependency Excluded from app score #b2e457f950f804d1 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_custom_span_processor.py:83

connection_string = os.environ["AZURE_STORAGE_CONNECTION_STRING"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48dafade22e39e81 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_eventgrid.py:48

hostname = os.environ["CLOUD_TOPIC_HOSTNAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b410e72f52b563e — Environment-variable access.

pkgs/python/[email protected]/samples/sample_eventgrid.py:49

key = AzureKeyCredential(os.environ["CLOUD_ACCESS_KEY"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bded328b90e7ca2b — Environment-variable access.

pkgs/python/[email protected]/samples/sample_eventhubs.py:43

FULLY_QUALIFIED_NAMESPACE = os.environ["EVENT_HUB_HOSTNAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89d23b95b79b26d5 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_eventhubs.py:44

EVENTHUB_NAME = os.environ["EVENT_HUB_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #366295309a1f0abc — Environment-variable access.

pkgs/python/[email protected]/samples/sample_eventhubs.py:46

credential = os.environ["EVENTHUB_CONN_STR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #372658ca4d6ef6fe — Environment-variable access.

pkgs/python/[email protected]/samples/sample_receive_eh.py:44

FULLY_QUALIFIED_NAMESPACE = os.environ["EVENT_HUB_HOSTNAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e20070edc08654b9 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_receive_eh.py:45

EVENTHUB_NAME = os.environ["EVENT_HUB_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa4ef39728daf55c — Environment-variable access.

pkgs/python/[email protected]/samples/sample_receive_eh.py:47

credential = os.environ["EVENTHUB_CONN_STR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81645e7880ae1f03 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_receive_sb.py:49

connstr = os.environ["SERVICE_BUS_CONN_STR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f6a5c24f5e468fa — Environment-variable access.

pkgs/python/[email protected]/samples/sample_receive_sb.py:50

queue_name = os.environ["SERVICE_BUS_QUEUE_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #113f0d25c160e828 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_servicebus.py:46

connstr = os.environ["SERVICE_BUS_CONN_STR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5e93a53bd28ba55 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_servicebus.py:47

queue_name = os.environ["SERVICE_BUS_QUEUE_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d76cb914fa9dbddb — Environment-variable access.

pkgs/python/[email protected]/samples/sample_storage.py:45

connection_string = os.environ["AZURE_STORAGE_CONNECTION_STRING"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2887d29c76a896b — Environment-variable access.

pkgs/python/[email protected]/samples/sample_storage.py:46

container_name = os.environ["AZURE_STORAGE_BLOB_CONTAINER_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

azure-ai-agents

python dependency

medium telemetry dependency Excluded from app score #50581e0dfa04b45b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/azure/ai/agents/telemetry/_ai_agents_instrumentor.py:81

    from opentelemetry.trace import Span, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6d98f436019cd2ef — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/azure/ai/agents/telemetry/_instrument_paged_wrappers.py:8

from opentelemetry.trace import Span, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #401df14668e7b960 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/azure/ai/agents/telemetry/_trace_function.py:11

    from opentelemetry import trace as opentelemetry_trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #76c70bb054da4f0f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/azure/ai/agents/telemetry/_utils.py:14

    from opentelemetry.trace import StatusCode, Span  # noqa: F401 # pylint: disable=unused-import

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #82c7079b35ceaf83 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_multiagent/utils/agent_team.py:9

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0dfc2ea10db00133 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_multiagent/utils/agent_team.py:10

from opentelemetry.trace import Span  # noqa: F401 # pylint: disable=unused-import

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #81f6970ba683b9e6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_multiagent/utils/agent_trace_configurator.py:8

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bfe99631fc9bbf54 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_multiagent/utils/agent_trace_configurator.py:9

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #dea997e637a0fd7f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_multiagent/utils/agent_trace_configurator.py:10

from opentelemetry.sdk.trace.export import SimpleSpanProcessor, ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c7afc140a9b9e7ee — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_multiagent/utils/user_functions_with_traces.py:10

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b41f713adcfe4fbb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_async_with_azure_monitor_tracing.py:36

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #75ac0eafcf0e8886 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_async_with_console_tracing.py:36

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b2ad13150f75e215 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_async_with_console_tracing.py:37

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e958f37689b22231 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_async_with_console_tracing.py:38

from opentelemetry.sdk.trace.export import SimpleSpanProcessor, ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3f8e776a3df1907a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_async_with_console_tracing.py:42

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d0b7a2bfc991d567 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_azure_monitor_tracing.py:43

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #25585b2a934f91db — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_console_tracing.py:38

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ccadc566eb04e00e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_console_tracing.py:39

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6c795dcd3566345a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_console_tracing.py:40

from opentelemetry.sdk.trace.export import SimpleSpanProcessor, ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a481a21c298ed7a9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_console_tracing_custom_attributes.py:40

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #deb10ea39678737b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_console_tracing_custom_attributes.py:41

from opentelemetry.sdk.trace import TracerProvider, SpanProcessor, ReadableSpan, Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b9cb1af8502955e7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_console_tracing_custom_attributes.py:42

from opentelemetry.sdk.trace.export import SimpleSpanProcessor, ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7c173b0ee201eea0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_stream_eventhandler_with_azure_monitor_tracing.py:44

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1f30e64bbd7ab61d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_stream_eventhandler_with_console_tracing.py:37

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fe1398c5db7aabbf — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_stream_eventhandler_with_console_tracing.py:38

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #39309e5a17531b0b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_stream_eventhandler_with_console_tracing.py:39

from opentelemetry.sdk.trace.export import SimpleSpanProcessor, ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3aa7b410cf9f1f5b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_toolset_with_azure_monitor_tracing.py:41

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c8ecf864ca064737 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_toolset_with_console_tracing.py:39

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0d19c80420ae36ae — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_toolset_with_console_tracing.py:40

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3074c0faebf06c2e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_toolset_with_console_tracing.py:41

from opentelemetry.sdk.trace.export import SimpleSpanProcessor, ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 184 low-confidence finding(s)

low env_fs dependency Excluded from app score #00823f44ef986c58 — Environment-variable access.

pkgs/python/[email protected]/azure/ai/agents/_patch.py:62

        if os.environ.get("AZURE_AI_AGENTS_TESTS_IS_TEST_RUN") == "True" and len(parts) == 4:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1cc7098b38dbd7f — Environment-variable access.

pkgs/python/[email protected]/azure/ai/agents/aio/_patch.py:63

        if os.environ.get("AZURE_AI_AGENTS_TESTS_IS_TEST_RUN") == "True" and len(parts) == 4:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e93141ac3bc3a8ee — Filesystem access.

pkgs/python/[email protected]/azure/ai/agents/aio/operations/_patch.py:1428

                with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6753cc3e2b09db8 — Filesystem access.

pkgs/python/[email protected]/azure/ai/agents/aio/operations/_patch.py:1640

                with open(target_file_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b86b2cbcb79646a0 — Filesystem access.

pkgs/python/[email protected]/azure/ai/agents/operations/_patch.py:1438

                with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58dda5069e4f17fa — Environment-variable access.

pkgs/python/[email protected]/azure/ai/agents/telemetry/_ai_agents_instrumentor.py:200

            var_value = os.environ.get("AZURE_TRACING_GEN_AI_CONTENT_RECORDING_ENABLED")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4678b5723dea7f41 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_auto_function_call_async.py:38

        endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d0fb47d0dfd8cfe — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_auto_function_call_async.py:65

            model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #902f175bf2765586 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_azure_functions_async.py:47

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0930a34650580028 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_azure_functions_async.py:51

            storage_service_endpoint = os.environ["STORAGE_SERVICE_ENDPONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aff8533e140d7901 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_azure_functions_async.py:73

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28ee9242730fe184 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_basics_async.py:38

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6d5f1f4e858e47a — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_basics_async.py:44

                model=os.environ["MODEL_DEPLOYMENT_NAME"], name="my-agent", instructions="You are helpful agent"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa988c94eb0c0cc7 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_basics_create_thread_and_process_run_async.py:42

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d422a261d137d68 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_basics_create_thread_and_process_run_async.py:48

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94f59aef68f9524d — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_basics_create_thread_and_run_async.py:40

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #562d302516c282fb — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_basics_create_thread_and_run_async.py:46

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a61d5706a50e02ba — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_code_interpreter_async.py:43

        async with AgentsClient(endpoint=os.environ["PROJECT_ENDPOINT"], credential=creds) as agents_client:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e21d3a9ad99f8667 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_code_interpreter_async.py:51

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09e9a273b7348d5e — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_code_interpreter_attachment_async.py:42

        async with AgentsClient(endpoint=os.environ["PROJECT_ENDPOINT"], credential=creds) as agents_client:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4f361fccc5da451 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_code_interpreter_attachment_async.py:51

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1800528683ac31e4 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_code_interpreter_attachment_enterprise_search_async.py:40

        async with AgentsClient(endpoint=os.environ["PROJECT_ENDPOINT"], credential=credential) as agents_client:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a047dcf2bb0bbe5f — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_code_interpreter_attachment_enterprise_search_async.py:46

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77e19491ef01dd72 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_code_interpreter_attachment_enterprise_search_async.py:57

            asset_uri = os.environ["AZURE_BLOB_URI"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b225e805f1311e4 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_functions_async.py:45

        async with AgentsClient(endpoint=os.environ["PROJECT_ENDPOINT"], credential=creds) as agents_client:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #45c314723ae0928c — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_functions_async.py:53

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #444e5ba037ea3933 — Filesystem access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_image_input_base64_async.py:54

        with open(image_path, "rb") as image_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03ef208072a6ae4e — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_image_input_base64_async.py:63

        async with AgentsClient(endpoint=os.environ["PROJECT_ENDPOINT"], credential=creds) as agents_client:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f29cc1e861cade2 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_image_input_base64_async.py:66

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e86a5e5bfbe4ea05 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_image_input_file_async.py:44

        async with AgentsClient(endpoint=os.environ["PROJECT_ENDPOINT"], credential=creds) as agents_client:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3a9f99c25c62edc — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_image_input_file_async.py:47

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c182e29450fba79c — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_image_input_url_async.py:42

        async with AgentsClient(endpoint=os.environ["PROJECT_ENDPOINT"], credential=creds) as agents_client:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b25b679e6744927 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_image_input_url_async.py:45

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #231b49e398332f82 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_json_schema_async.py:56

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d7c5d6770c28e02 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_json_schema_async.py:61

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b6f7162449a9d7b — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_run_with_toolset_async.py:35

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aae1e074084c57ba — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_run_with_toolset_async.py:48

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #729648ecb595f886 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_stream_eventhandler_async.py:69

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef81b2a273b17675 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_stream_eventhandler_async.py:73

                model=os.environ["MODEL_DEPLOYMENT_NAME"], name="my-agent", instructions="You are helpful agent"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80e92cd3eef012cc — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_stream_eventhandler_with_functions_async.py:97

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #166b9c323ccec0a3 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_stream_eventhandler_with_functions_async.py:102

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71f8d7fb10e79c47 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_stream_eventhandler_with_toolset_async.py:73

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62ab4007ef445960 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_stream_eventhandler_with_toolset_async.py:84

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5320173cdf0cce6a — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_stream_iteration_async.py:43

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fc02492e263998f — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_stream_iteration_async.py:47

                model=os.environ["MODEL_DEPLOYMENT_NAME"], name="my-agent", instructions="You are helpful agent"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6fb36ebb98410a5 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_stream_with_base_override_eventhandler_async.py:82

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8ee1cfcc23de9c3 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_stream_with_base_override_eventhandler_async.py:86

                model=os.environ["MODEL_DEPLOYMENT_NAME"], name="my-agent", instructions="You are helpful agent"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ef1c4d3b4089de7 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_vector_store_batch_enterprise_file_search_async.py:41

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #caee1129b2f66029 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_vector_store_batch_enterprise_file_search_async.py:45

            asset_uri = os.environ["AZURE_BLOB_URI"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4adfa34c325c8c89 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_vector_store_batch_enterprise_file_search_async.py:64

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b13e10d1dbc63186 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_vector_store_batch_file_search_async.py:37

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8e0fa5cc35c7bed — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_vector_store_batch_file_search_async.py:59

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #626f1f403e67775e — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_vector_store_enterprise_file_search_async.py:39

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3f3634aee0574c5 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_vector_store_enterprise_file_search_async.py:43

            asset_uri = os.environ["AZURE_BLOB_URI"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3103a718376b77a7 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_vector_store_enterprise_file_search_async.py:55

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #acc0e1a7cb83ed4d — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_vector_store_file_search_async.py:35

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b8f1c155616be56 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_vector_store_file_search_async.py:53

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #603b6562c7e12c6f — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_with_file_search_attachment_async.py:39

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e805c7bfbc833d9 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_async/sample_agents_with_file_search_attachment_async.py:47

                model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58a22aef027a6cfb — Filesystem access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_image_input_base64.py:53

        with open(image_path, "rb") as image_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36979db09e613a4d — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_image_input_base64.py:61

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdcb3e2f92c886d5 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_image_input_base64.py:68

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4661e14d090faf7 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_image_input_file.py:42

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #334ac5372c91f0ad — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_image_input_file.py:49

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21fd36ac71e9fcc6 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_image_input_url.py:40

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0b0c95e270d30d0 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_image_input_url.py:47

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68523114dbc1ceba — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_json_schema.py:40

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ab55612de433a82 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_json_schema.py:61

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abd7bdde80abefba — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_vector_store_batch_enterprise_file_search.py:29

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e2b6e1ea4c977d1 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_vector_store_batch_enterprise_file_search.py:36

    asset_uri = os.environ["AZURE_BLOB_URI"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e2d57e47ba4238b — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_vector_store_batch_enterprise_file_search.py:56

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12c8c0ae0fed40cb — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_vector_store_batch_file_search.py:33

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82f95524219157cb — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_vector_store_batch_file_search.py:59

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83df4b60055ae23c — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_vector_store_file_search.py:31

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f48902957c399326 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_vector_store_file_search.py:50

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c84b9ff430d6390 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_with_code_interpreter_file_attachment.py:39

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f8c61eb9f555414 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_with_code_interpreter_file_attachment.py:53

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81f34e9d5f7ec232 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_with_file_search_attachment.py:33

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #116ecee51c2d254b — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_with_file_search_attachment.py:45

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #179de092fd060e8f — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_with_resources_in_thread.py:33

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9f3f5ffa8c8e09d — Environment-variable access.

pkgs/python/[email protected]/samples/agents_files_images_inputs/sample_agents_with_resources_in_thread.py:51

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9579b68313977a81 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_multiagent/sample_agents_agent_team.py:43

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea763c5f0909489d — Environment-variable access.

pkgs/python/[email protected]/samples/agents_multiagent/sample_agents_agent_team.py:49

model_deployment_name = os.getenv("MODEL_DEPLOYMENT_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a1e1cbf8f594228 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_multiagent/sample_agents_agent_team_custom_team_leader.py:33

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44ecd4deba4c39ee — Environment-variable access.

pkgs/python/[email protected]/samples/agents_multiagent/sample_agents_agent_team_custom_team_leader.py:37

model_deployment_name = os.getenv("MODEL_DEPLOYMENT_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f4431a93168c444 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_multiagent/sample_agents_multi_agent_team.py:56

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca679d503bb2d454 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_multiagent/sample_agents_multi_agent_team.py:76

model_deployment_name = os.getenv("MODEL_DEPLOYMENT_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05b01d72a0ec0d3c — Filesystem access.

pkgs/python/[email protected]/samples/agents_multiagent/utils/agent_team.py:95

        with open(file_path, "r") as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #78a0e852f69a76f8 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_multiagent/utils/agent_trace_configurator.py:20

        application_insights_connection_string = os.environ.get("APPLICATIONINSIGHTS_CONNECTION_STRING")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c83d5f5513dd37b8 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_eventhandler_with_bing_grounding.py:83

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7143baec2cffbd98 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_eventhandler_with_bing_grounding.py:89

    bing_connection_id = os.environ["AZURE_BING_CONNECTION_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2cc1493b846d35fa — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_eventhandler_with_bing_grounding.py:96

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #568163357030ee16 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_eventhandler_with_functions.py:50

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1880f36cf14595dd — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_eventhandler_with_functions.py:117

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85af5d2733fe9549 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_eventhandler_with_toolset.py:48

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f2b748cd741599a — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_eventhandler_with_toolset.py:90

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88ec23ee5ffeeb72 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_iteration_with_bing_grounding.py:44

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35f9f99d0a014e71 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_iteration_with_bing_grounding.py:49

    bing_connection_id = os.environ["AZURE_BING_CONNECTION_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cae75a1c0112a579 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_iteration_with_bing_grounding.py:54

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b20bf8f3b550e21 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_iteration_with_file_search.py:35

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3ac799184624291 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_iteration_with_file_search.py:52

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19d75c0a3809660d — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_iteration_with_toolset.py:45

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84f269f4a34e9e2a — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_iteration_with_toolset.py:56

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #612002d63cf1bf9d — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_with_base_override_eventhandler.py:78

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1eda5ee3a92592ef — Environment-variable access.

pkgs/python/[email protected]/samples/agents_streaming/sample_agents_stream_with_base_override_eventhandler.py:84

        model=os.environ["MODEL_DEPLOYMENT_NAME"], name="my-agent", instructions="You are helpful agent"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c583a5be5160a38c — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_async_with_azure_monitor_tracing.py:48

            endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #497aa2e6531c8324 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_async_with_azure_monitor_tracing.py:53

        application_insights_connection_string = os.environ["APPLICATIONINSIGHTS_CONNECTION_STRING"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b64586deeee0e10 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_async_with_azure_monitor_tracing.py:59

                    model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea4938839acbbf9b — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_async_with_console_tracing.py:64

        async with AgentsClient(endpoint=os.environ["PROJECT_ENDPOINT"], credential=creds) as agent_client:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c55fcf1a8ac0819 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_async_with_console_tracing.py:67

                model=os.environ["MODEL_DEPLOYMENT_NAME"], name="my-agent", instructions="You are helpful agent"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1aae0627478b912 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_azure_monitor_tracing.py:38

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf796058efb33e22 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_azure_monitor_tracing.py:47

application_insights_connection_string = os.environ["APPLICATIONINSIGHTS_CONNECTION_STRING"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #205db23aecd995bf — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_azure_monitor_tracing.py:57

            model=os.environ["MODEL_DEPLOYMENT_NAME"], name="my-agent", instructions="You are helpful agent"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ece4c8c157794407 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_console_tracing.py:57

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #284ec5d1319cea9d — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_console_tracing.py:65

            model=os.environ["MODEL_DEPLOYMENT_NAME"], name="my-agent", instructions="You are helpful agent"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3454bed5dc24ed3a — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_console_tracing_custom_attributes.py:79

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21e52893e654e67a — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_basics_with_console_tracing_custom_attributes.py:93

            model=os.environ["MODEL_DEPLOYMENT_NAME"], name="my-agent", instructions="You are helpful agent"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62d960ebcb531d33 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_stream_eventhandler_with_azure_monitor_tracing.py:48

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #823050a45245ab67 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_stream_eventhandler_with_azure_monitor_tracing.py:83

application_insights_connection_string = os.environ["APPLICATIONINSIGHTS_CONNECTION_STRING"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33a57d65795b3092 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_stream_eventhandler_with_azure_monitor_tracing.py:93

            model=os.environ["MODEL_DEPLOYMENT_NAME"], name="my-agent", instructions="You are a helpful agent"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #386b74fc251a6dd2 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_stream_eventhandler_with_console_tracing.py:67

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6deb82f2bfa3704b — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_stream_eventhandler_with_console_tracing.py:108

            model=os.environ["MODEL_DEPLOYMENT_NAME"], name="my-agent", instructions="You are a helpful agent"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #171eedd0fbc6078f — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_toolset_with_azure_monitor_tracing.py:46

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08f855d401dfa5b7 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_toolset_with_azure_monitor_tracing.py:51

application_insights_connection_string = os.environ["APPLICATIONINSIGHTS_CONNECTION_STRING"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f999ed65a1e9d3c8 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_toolset_with_azure_monitor_tracing.py:99

            model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #edd66fee569ec14e — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_toolset_with_console_tracing.py:66

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #144f04a20519e2a2 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_telemetry/sample_agents_toolset_with_console_tracing.py:112

            model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d26424a605031e89 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_auto_function_call.py:33

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af43902f888484df — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_auto_function_call.py:41

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b4d76ebac9da838 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_auto_function_call.py:66

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dcc9363c05910a45 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_azure_ai_search.py:43

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef6085e75cad8252 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_azure_ai_search.py:48

conn_id = os.environ["AI_AZURE_AI_CONNECTION_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e513f0d2b7daae6 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_azure_ai_search.py:60

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f0fdf947d656650 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_azure_functions.py:35

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f0959b0bdf1c9ee — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_azure_functions.py:42

    storage_service_endpoint = os.environ["STORAGE_SERVICE_ENDPONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30e063e1d23a20d1 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_azure_functions.py:65

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e1718ea14afb488 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_bing_grounding.py:35

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c57aa8034085a0e9 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_bing_grounding.py:40

conn_id = os.environ["AZURE_BING_CONNECTION_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8da5c7742cd081bd — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_bing_grounding.py:48

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39e742ac4ba52988 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_code_interpreter.py:38

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84f825717d31737b — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_code_interpreter.py:53

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #104e6dba2f244f8d — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_code_interpreter_attachment_enterprise_search.py:39

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb2c1f7e802acda6 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_code_interpreter_attachment_enterprise_search.py:49

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9047120b298b24f — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_code_interpreter_attachment_enterprise_search.py:61

    asset_uri = os.environ["AZURE_BLOB_URI"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59a035e76737a8ae — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_connected_agent.py:32

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e72e20b6e47b9a9 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_connected_agent.py:39

    model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa6ebaac3aa3afdb — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_connected_agent.py:55

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #247bff77114eae71 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_enterprise_file_search.py:32

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85f46b7857a3a890 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_enterprise_file_search.py:40

    asset_uri = os.environ["AZURE_BLOB_URI"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #564a52aa7586aae4 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_enterprise_file_search.py:52

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed2c9a4cf58f21c6 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_file_search.py:37

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a6dff8e46bfb9c4 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_file_search.py:55

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0acd58dbb369cbd5 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_functions.py:42

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2885d302e3cea742 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_functions.py:52

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77ccf77454c56628 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_logic_apps.py:61

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b25d272f52c372a — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_logic_apps.py:66

subscription_id = os.environ["SUBSCRIPTION_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2002e3440fd33ff — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_logic_apps.py:67

resource_group = os.environ["resource_group_name"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e79a2c035f2bab3 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_logic_apps.py:97

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28f8a5d58fdeb6ae — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_multiple_connected_agents.py:33

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f03a8968e9507e72 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_multiple_connected_agents.py:41

    model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bddcb66f928b1dfe — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_multiple_connected_agents.py:49

    model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af45b519081ffc61 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_multiple_connected_agents.py:67

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df263efe0961dcb8 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_openapi.py:38

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0a3f25c00c5fc86 — Filesystem access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_openapi.py:43

with open(weather_asset_file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58a6e867da31844f — Filesystem access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_openapi.py:46

with open(countries_asset_file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04b22aece163f6ae — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_openapi.py:63

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56b1434f001cecab — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_openapi_connection_auth.py:46

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8d52049e9b2b7a3 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_openapi_connection_auth.py:50

model_name = os.environ["MODEL_DEPLOYMENT_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c65b24b34e047788 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_openapi_connection_auth.py:51

connection_id = os.environ["OPENAPI_CONNECTION_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b27cfa79a8420e0e — Filesystem access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_openapi_connection_auth.py:55

with open(asset_file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f03eef3829c1e09 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_run_with_toolset.py:37

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcdcfe1725261fc6 — Environment-variable access.

pkgs/python/[email protected]/samples/agents_tools/sample_agents_run_with_toolset.py:56

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e2f18eccb194519 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agents_basics.py:32

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9b1441487948273 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agents_basics.py:42

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdf71e711d7d9b85 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agents_basics_stream_eventhandler.py:40

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60e9622d4a4b5dee — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agents_basics_stream_eventhandler.py:77

        model=os.environ["MODEL_DEPLOYMENT_NAME"], name="my-agent", instructions="You are a helpful agent"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b30c049b6a5b3d1 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agents_basics_stream_iteration.py:37

    endpoint=os.environ["PROJECT_ENDPOINT"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2aeb6056a58c986 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agents_basics_stream_iteration.py:44

        model=os.environ["MODEL_DEPLOYMENT_NAME"], name="my-agent", instructions="You are a helpful agent"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bcff6147628fb8c2 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agents_basics_thread_and_process_run.py:32

agents_client = AgentsClient(endpoint=os.environ["PROJECT_ENDPOINT"], credential=DefaultAzureCredential())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ab3f4bf67f1fe71 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agents_basics_thread_and_process_run.py:36

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4efb30601382c25 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agents_basics_thread_and_run.py:33

agents_client = AgentsClient(endpoint=os.environ["PROJECT_ENDPOINT"], credential=DefaultAzureCredential())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0dadc10a87ad2cc7 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_agents_basics_thread_and_run.py:37

        model=os.environ["MODEL_DEPLOYMENT_NAME"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5870f9541184c2b6 — Filesystem access.

pkgs/python/[email protected]/setup.py:22

with open(os.path.join(package_folder_path, "_version.py"), "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d871763baaa80ae7 — Filesystem access.

pkgs/python/[email protected]/setup.py:33

    long_description=open("README.md", "r").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

chromadb

python dependency

medium telemetry dependency Excluded from app score #9e5e91f4c2f25a19 — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/rust.py:226

        self.product_telemetry_client.capture(
            ClientCreateCollectionEvent(
                collection_uuid=str(id),
                # embedding_function=embedding_function.__class__.__name__,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a8d347cebd50fb16 — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/rust.py:429

        self.product_telemetry_client.capture(
            CollectionGetEvent(
                collection_uuid=str(collection_id),
                ids_count=ids_amount,
                limit=limit if limit else 0,
                include_metadata=ids_amount if "metadatas" in include else 0,
                include_documents=ids_amount if "documents" in include else 0,
                include_uris=ids_amount if "uris" in include else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c765231975f6a2cf — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/rust.py:474

        self.product_telemetry_client.capture(
            CollectionAddEvent(
                collection_uuid=str(collection_id),
                add_amount=len(ids),
                with_metadata=len(ids) if metadatas is not None else 0,
                with_documents=len(ids) if documents is not None else 0,
                with_uris=len(ids) if uris is not None else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #466244079003c204 — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/rust.py:507

        self.product_telemetry_client.capture(
            CollectionUpdateEvent(
                collection_uuid=str(collection_id),
                update_amount=len(ids),
                with_embeddings=len(embeddings) if embeddings else 0,
                with_metadata=len(metadatas) if metadatas else 0,
                with_documents=len(documents) if documents else 0,
                with_uris=len(uris) if uris else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #694bb1f07d37c7ca — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/rust.py:567

        self.product_telemetry_client.capture(
            CollectionQueryEvent(
                collection_uuid=str(collection_id),
                query_amount=query_amount,
                filtered_ids_amount=filtered_ids_amount,
                n_results=n_results,
                with_metadata_filter=query_amount if where is not None else 0,
                with_document_filter=query_amount if where_document is not None else 0,
                include_metadatas=query_amount if "metadatas" in include else 0,
                include_documents=query_amount if "documents" in include else 0,
                include_uris=query_amount if "uris" in include else 0,
                include_distances=query_amount if "distances" in include else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f62e4da3a9eb782e — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/rust.py:626

        self.product_telemetry_client.capture(
            CollectionDeleteEvent(
                collection_uuid=str(collection_id),
                delete_amount=deleted,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6fa090deeadb35cf — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/segment.py:285

        self._product_telemetry_client.capture(
            ClientCreateCollectionEvent(
                collection_uuid=str(id),
                # embedding_function=embedding_function.__class__.__name__,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #85e2dc48d12a4a54 — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/segment.py:552

        self._product_telemetry_client.capture(
            CollectionAddEvent(
                collection_uuid=str(collection_id),
                add_amount=len(ids),
                with_metadata=len(ids) if metadatas is not None else 0,
                with_documents=len(ids) if documents is not None else 0,
                with_uris=len(ids) if uris is not None else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c0e00f8d13fbced9 — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/segment.py:607

        self._product_telemetry_client.capture(
            CollectionUpdateEvent(
                collection_uuid=str(collection_id),
                update_amount=len(ids),
                with_embeddings=len(embeddings) if embeddings else 0,
                with_metadata=len(metadatas) if metadatas else 0,
                with_documents=len(documents) if documents else 0,
                with_uris=len(uris) if uris else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bb98a2361347310a — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/segment.py:714

        self._product_telemetry_client.capture(
            CollectionGetEvent(
                collection_uuid=str(collection_id),
                ids_count=ids_amount,
                limit=limit if limit else 0,
                include_metadata=ids_amount if "metadatas" in include else 0,
                include_documents=ids_amount if "documents" in include else 0,
                include_uris=ids_amount if "uris" in include else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7f7efcf7a4f50f62 — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/segment.py:825

        self._product_telemetry_client.capture(
            CollectionDeleteEvent(
                collection_uuid=str(collection_id), delete_amount=deleted_count
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #61aafd1fa37c4cf2 — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/segment.py:890

        self._product_telemetry_client.capture(
            CollectionQueryEvent(
                collection_uuid=str(collection_id),
                query_amount=query_amount,
                filtered_ids_amount=ids_amount,
                n_results=n_results,
                with_metadata_filter=query_amount if where is not None else 0,
                with_document_filter=query_amount if where_document is not None else 0,
                include_metadatas=query_amount if "metadatas" in include else 0,
                include_documents=query_amount if "documents" in include else 0,
                include_uris=query_amount if "uris" in include else 0,
                include_distances=query_amount if "distances" in include else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3e1106966879854e — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/shared_system_client.py:137

        telemetry_client.capture(ClientStartEvent())

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cd1a90275a92d064 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/execution/executor/distributed.py:22

from opentelemetry.trace import Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c012a0f59544d945 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/proto/utils.py:4

from opentelemetry.trace import Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4cf34d93bcc9ecf9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/server/fastapi/__init__.py:77

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #63f0bf8fa175b2ea — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/server/fastapi/__init__.py:245

        telemetry_client.capture(ServerStartEvent())

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e1add6d6b4c0d625 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:7

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d0ab1c9dc5cfec07 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:8

from opentelemetry.sdk.resources import SERVICE_NAME, Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c703a7de172e5061 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:9

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #43687af578c56ad2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:10

from opentelemetry.sdk.trace.export import (
    BatchSpanProcessor,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #edcf7837194950e4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:13

from opentelemetry.exporter.otlp.proto.grpc.trace_exporter import OTLPSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b8cb1ffeff457326 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/fastapi.py:3

from opentelemetry.instrumentation.fastapi import FastAPIInstrumentor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ddfc98cd32efad23 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/grpc.py:5

from opentelemetry.trace import StatusCode, SpanKind

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 67 low-confidence finding(s)

low env_fs dependency Excluded from app score #262b5e5f7d87f707 — Environment-variable access.

pkgs/python/[email protected]/chromadb/__init__.py:407

            arg.value = arg.value or os.environ.get(arg.env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e06b93892e193ef7 — Environment-variable access.

pkgs/python/[email protected]/chromadb/__init__.py:420

    tenant = tenant or os.environ.get("CHROMA_TENANT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fff40c8781d5c39 — Environment-variable access.

pkgs/python/[email protected]/chromadb/__init__.py:423

    database = database or os.environ.get("CHROMA_DATABASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #9ade7de6686641f7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/api/async_fastapi.py:167

        response = await self._get_client().request(method, url, **cast(Any, kwargs))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a490eef8b982b9b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/api/fastapi.py:131

        response = self._session.request(method, url, **cast(Any, kwargs))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #47db316dfd7da72b — Filesystem access.

pkgs/python/[email protected]/chromadb/auth/__init__.py:124

            with open(_creds_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b80299e0141229b — Filesystem access.

pkgs/python/[email protected]/chromadb/auth/__init__.py:235

            with open(_config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #4924bd3abc591681 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/cli/cli.py:25

        response = requests.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #1c23677b76a19127 — Filesystem access.

pkgs/python/[email protected]/chromadb/cli/utils.py:12

    with open(f"{log_config_path}", "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a5714d27f9cf35f — Filesystem access.

pkgs/python/[email protected]/chromadb/db/migrations.py:256

    sql = file["path"].read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24f9c4a89ec40949 — Filesystem access.

pkgs/python/[email protected]/chromadb/segment/impl/vector/local_persistent_hnsw.py:74

        with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ecd75d0c1ebb0bb — Filesystem access.

pkgs/python/[email protected]/chromadb/segment/impl/vector/local_persistent_hnsw.py:255

        with open(self._get_metadata_file(), "wb") as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b149bb518ac9c2e1 — Environment-variable access.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:139

                        {"pod_name": os.environ.get("HOSTNAME")}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f246615ede5f4b6 — Environment-variable access.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:155

                        {"pod_name": os.environ.get("HOSTNAME")}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06f87d7d0d911829 — Filesystem access.

pkgs/python/[email protected]/chromadb/telemetry/product/__init__.py:88

                with open(self.USER_ID_PATH, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b123bfb015e09340 — Filesystem access.

pkgs/python/[email protected]/chromadb/telemetry/product/__init__.py:93

                with open(self.USER_ID_PATH, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #78277a7f3df5c646 — Environment-variable access.

pkgs/python/[email protected]/chromadb/telemetry/product/events.py:20

        self.is_cli = os.environ.get("CHROMA_CLI", "False") == "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2c0a479b49feb33 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/baseten_embedding_function.py:39

        if os.getenv("BASETEN_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1281b59648924ffc — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/baseten_embedding_function.py:45

        resolved_api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13b6a8dbebc95885 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/chroma_cloud_qwen_embedding_function.py:61

        self.api_key = os.getenv(api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #47e922dd30a9b51a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/chroma_cloud_qwen_embedding_function.py:127

        response = self._session.post(self._api_url, json=payload, timeout=60).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #853993a9b32057b1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/chroma_cloud_qwen_embedding_function.py:149

        response = self._session.post(self._api_url, json=payload, timeout=60).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #798c9494c4a2bcb4 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/chroma_cloud_splade_embedding_function.py:42

        self.api_key = os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #c07299010bc8a706 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/chroma_cloud_splade_embedding_function.py:99

            response = self._session.post(self._api_url, json=payload, timeout=60)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #539de254e5c7ee05 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/cloudflare_workers_ai_embedding_function.py:57

        if os.getenv("CLOUDFLARE_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #997e8c21a2ddbd53 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/cloudflare_workers_ai_embedding_function.py:62

        self.api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #eff931f155deb324 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/cloudflare_workers_ai_embedding_function.py:99

        resp = self._session.post(self._api_url, json=payload).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #9faa568ce784ca37 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/cohere_embedding_function.py:46

        if os.getenv("COHERE_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8c27b006fb6e6d8 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/cohere_embedding_function.py:51

        self.api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9cf5355b28a38fc — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:57

        self.api_key = os.getenv(self.api_key_env_var) if self.api_key_env_var else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e8cf374c3ff3a26 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:251

        if os.getenv("GOOGLE_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #753b29a400155ccc — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:256

        self.api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f3b80fafcc4ae14 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:401

        if os.getenv("GOOGLE_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97ce48be90746b29 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:406

        self.api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7771e95b47c183fc — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:529

        if os.getenv("GOOGLE_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19622b84cb052a06 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:534

        self.api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eeefe7a91bb64ac1 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/huggingface_embedding_function.py:43

        if os.getenv("HUGGINGFACE_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd7b65b543b9ae99 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/huggingface_embedding_function.py:48

        self.api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #a4a48937dc5eee40 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/huggingface_embedding_function.py:76

        response = self._session.post(
            self._api_url,
            json={"inputs": input, "options": {"wait_for_model": True}},
        ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #e32e274afb72fa08 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/huggingface_embedding_function.py:169

        if os.getenv("HUGGINGFACE_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1734ee3d4425a2e3 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/huggingface_embedding_function.py:173

            self.api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #b83c299a430792c3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/huggingface_embedding_function.py:199

        response = self._session.post(self._api_url, json={"inputs": input}).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #5c1872a4e8e4113e — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/jina_embedding_function.py:84

        if os.getenv("JINA_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a1f6a5def87ae24e — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/jina_embedding_function.py:89

        self.api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #a40d51bffab19d09 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/jina_embedding_function.py:202

        resp = self._session.post(self._api_url, json=payload, timeout=60).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #02968d3d2850d937 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/jina_embedding_function.py:210

        resp = self._session.post(self._api_url, json=payload, timeout=60).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #70ec2089ca315504 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/mistral_embedding_function.py:29

        self.api_key = os.getenv(api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68d0d286cae1bf0e — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/morph_embedding_function.py:49

        self.api_key = api_key or os.getenv(api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e4c420850430d4b — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/nomic_embedding_function.py:50

        self.api_key = os.getenv(api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6b20ae1d4391a31 — Filesystem access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/onnx_mini_lm_l6_v2.py:24

    with open(fname, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7142b708d4f42f69 — Filesystem access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/onnx_mini_lm_l6_v2.py:109

            with open(fname, "wb") as file, self.tqdm(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e70bc5b95912ae5 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/openai_embedding_function.py:60

        if os.getenv("OPENAI_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a07d8dfa9edbaf4b — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/openai_embedding_function.py:65

        self.api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d58471a673f03a18 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/perplexity_embedding_function.py:52

        if os.getenv("PERPLEXITY_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb765615c1ab6267 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/perplexity_embedding_function.py:57

        self.api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f1550bcc0973cd5 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/roboflow_embedding_function.py:48

        if os.getenv("ROBOFLOW_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6d29bd2e11b1f4c — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/roboflow_embedding_function.py:53

        self.api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #7819699f66a9bd67 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/roboflow_embedding_function.py:97

                res = self._httpx.post(
                    f"{self.api_url}/clip/embed_image?api_key={self.api_key}",
                    json=infer_clip_payload_image,
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3cf08b3b2d9152e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/roboflow_embedding_function.py:110

                res = self._httpx.post(
                    f"{self.api_url}/clip/embed_text?api_key={self.api_key}",
                    json=infer_clip_payload_text,
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #0910d9fc01954e40 — Filesystem access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/schemas/registry.py:38

        with open(schema_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77a0c1dac4efb2cf — Filesystem access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/schemas/schema_utils.py:36

    with open(schema_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c22af546237a5a2b — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/together_ai_embedding_function.py:52

        if os.getenv("TOGETHER_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02fbb17278734241 — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/together_ai_embedding_function.py:57

        self.api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #d7008dab256e6a4d — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/together_ai_embedding_function.py:89

        response = self._session.post(
            ENDPOINT,
            json={"model": self.model_name, "input": input},
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #ff1d6a203a23341a — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/utils.py:11

    return (os.environ.get("CHROMA_EMBED_URL") or DEFAULT_CHROMA_EMBED_URL).rstrip("/")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7261bf89ae6f147b — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/voyageai_embedding_function.py:50

        if os.getenv("VOYAGE_API_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c3af3a0c762a8ef — Environment-variable access.

pkgs/python/[email protected]/chromadb/utils/embedding_functions/voyageai_embedding_function.py:55

        self.api_key = api_key or os.getenv(self.api_key_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

azure-ai-inference

python dependency

medium telemetry dependency Excluded from app score #81a719506e1d21e5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/azure/ai/inference/tracing.py:24

    from opentelemetry.trace import StatusCode, Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c761cf4c0463c15a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_chat_completions_with_azure_monitor_tracing.py:31

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fcc1f585fcd6b5a1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_chat_completions_with_azure_monitor_tracing.py:39

from opentelemetry.trace import get_tracer

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #83cde49e7cb4b699 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_chat_completions_with_tracing.py:32

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #358f2e46e889f47c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_chat_completions_with_tracing.py:35

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #064621758f2639a1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_chat_completions_with_tracing.py:36

from opentelemetry.sdk.trace.export import SimpleSpanProcessor, ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7c6292f148818e29 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/sample_chat_completions_with_tracing.py:55

from opentelemetry.trace import get_tracer

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 93 low-confidence finding(s)

low env_fs dependency Excluded from app score #b06eff32ee36f151 — Filesystem access.

pkgs/python/[email protected]/azure/ai/inference/models/_patch.py:320

        with open(image_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ead8aea3e8edf4c6 — Filesystem access.

pkgs/python/[email protected]/azure/ai/inference/models/_patch.py:346

        with open(image_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #056b43ec787bd0a1 — Filesystem access.

pkgs/python/[email protected]/azure/ai/inference/models/_patch.py:548

        with open(audio_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4ad4f168f0cc64d — Environment-variable access.

pkgs/python/[email protected]/azure/ai/inference/prompts/_core.py:190

        if variable in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71bfe0f97fdc7e02 — Environment-variable access.

pkgs/python/[email protected]/azure/ai/inference/prompts/_core.py:191

            return os.environ[variable]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #367a6e3863dafa97 — Filesystem access.

pkgs/python/[email protected]/azure/ai/inference/prompts/_parsers.py:64

        with open(image_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9dabbb799afdaf7b — Filesystem access.

pkgs/python/[email protected]/azure/ai/inference/prompts/_tracer.py:306

        with open(trace_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e542e1c2c82ca82 — Filesystem access.

pkgs/python/[email protected]/azure/ai/inference/prompts/_utils.py:22

    with open(file_path, "r", encoding=encoding) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5ced824f0e9f2c3 — Environment-variable access.

pkgs/python/[email protected]/azure/ai/inference/tracing.py:147

            var_value = os.environ.get("AZURE_TRACING_GEN_AI_CONTENT_RECORDING_ENABLED")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e41baf679a570f6 — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_chat_completions_async.py:35

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b81bea07a3bb07e4 — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_chat_completions_async.py:36

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1791fcf7d978ec8 — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_chat_completions_from_input_bytes_async.py:37

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #300f1de6a095d94f — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_chat_completions_from_input_bytes_async.py:38

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d69c24a50137cfc4 — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_chat_completions_from_input_dict_async.py:38

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53e09d1eef7f5bb2 — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_chat_completions_from_input_dict_async.py:39

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b4fb0fb9fd7d5ca — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_chat_completions_streaming_async.py:36

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca64eec23fc241fc — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_chat_completions_streaming_async.py:37

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab472e746d4c38d5 — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_chat_completions_streaming_azure_openai_async.py:38

        endpoint = os.environ["AZURE_OPENAI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9baf4e6a9589632a — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_chat_completions_streaming_azure_openai_async.py:50

            key = os.environ["AZURE_OPENAI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7699fdbf68a78f3e — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_embeddings_async.py:34

        endpoint = os.environ["AZURE_AI_EMBEDDINGS_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7db6c370465cbdc6 — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_embeddings_async.py:35

        key = os.environ["AZURE_AI_EMBEDDINGS_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfb91b413cf242e2 — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_image_embeddings_async.py:32

        endpoint = os.environ["AZURE_AI_IMAGE_EMBEDDINGS_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04a32bc7fd66e0ff — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_image_embeddings_async.py:33

        key = os.environ["AZURE_AI_IMAGE_EMBEDDINGS_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6027ad47514987ea — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_load_client_async.py:30

        endpoint = os.environ["AZURE_AI_EMBEDDINGS_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7c19326e96e3c51 — Environment-variable access.

pkgs/python/[email protected]/samples/async_samples/sample_load_client_async.py:31

        key = os.environ["AZURE_AI_EMBEDDINGS_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #061cea6934e563a0 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions.py:31

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9a69f96c50f4e69 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions.py:32

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c822dd643338b347 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_azure_openai.py:36

        endpoint = os.environ["AZURE_OPENAI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b2f1991aa6e0c74 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_azure_openai.py:48

            key = os.environ["AZURE_OPENAI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0473d8c3daef9680 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_from_input_bytes.py:37

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2259d8c72be7f857 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_from_input_bytes.py:38

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d145560c6dde5760 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_from_input_dict.py:38

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c8405d74116e214 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_from_input_dict.py:39

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e48b00228e6675ce — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_from_input_dict_with_image_url.py:42

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff264d50d7b410ac — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_from_input_dict_with_image_url.py:43

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f79ab841732cbec — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_from_input_dict_with_image_url.py:50

        model_deployment = os.environ["AZURE_AI_CHAT_DEPLOYMENT_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67d50fdcbe144e38 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_from_input_prompt_string.py:36

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ec47633173458e0 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_from_input_prompt_string.py:37

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80d67c5e77a862c5 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_from_input_prompty.py:36

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3eed9a664c18eebf — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_from_input_prompty.py:37

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c915ce40b37bc5e2 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_streaming.py:31

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #958bb58e779440d0 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_streaming.py:32

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a890e4f03b0ad5e0 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_streaming_with_entra_id_auth.py:31

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcdfca2dfce8f3fd — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_streaming_with_entra_id_auth.py:38

        model_deployment = os.environ["AZURE_AI_CHAT_DEPLOYMENT_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5eb776ab1fdb917f — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_streaming_with_tools.py:45

            endpoint = os.environ["AZURE_OPENAI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b06c2a591973bc2 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_streaming_with_tools.py:46

            key = os.environ["AZURE_OPENAI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3667e744019dcac0 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_streaming_with_tools.py:48

            endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94604cc89c7fe035 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_streaming_with_tools.py:49

            key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2d603541f7f93bd — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_audio_data.py:47

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59d913eeaaccc9bd — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_audio_data.py:48

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb2a18c67ee7635c — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_audio_data.py:55

        model_deployment = os.environ["AZURE_AI_CHAT_DEPLOYMENT_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #397748fa4af2cab1 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_azure_monitor_tracing.py:151

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e16b18996aec956 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_azure_monitor_tracing.py:152

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d871a8ba384e4445 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_defaults.py:33

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd763edb9e9ab2ea — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_defaults.py:34

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #707c47a36a189cb5 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_entra_id_auth.py:42

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b3f93acfff78858 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_entra_id_auth.py:43

        model_deployment_name = os.environ["AZURE_AI_CHAT_MODEL_DEPLOYMENT_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d34cd9ef422656aa — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_history.py:32

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f77eea39437f420 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_history.py:33

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90519c12fc3b782f — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_image_data.py:47

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9f1245e7c65149e — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_image_data.py:48

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cef8fa4b57a1e179 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_image_data.py:55

        model_deployment = os.environ["AZURE_AI_CHAT_DEPLOYMENT_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ef5b4c9bbfcd55e — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_image_url.py:47

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04747cd46300a84d — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_image_url.py:48

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #785cf583295b7c12 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_image_url.py:55

        model_deployment = os.environ["AZURE_AI_CHAT_DEPLOYMENT_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4881079adc6e3f4c — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_model_extras.py:33

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e33f7ddfea798a2 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_model_extras.py:34

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8b057fd7c72390b — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_structured_output.py:54

        endpoint = os.environ["AZURE_OPENAI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffde80e8a7748560 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_structured_output.py:55

        key = os.environ["AZURE_OPENAI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ad84b3340401fd7 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_structured_output_pydantic.py:57

        endpoint = os.environ["AZURE_OPENAI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8ea3b99abf4434c — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_structured_output_pydantic.py:58

        key = os.environ["AZURE_OPENAI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff06105220f94207 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_tools.py:34

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c52f2caf69eea3ac — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_tools.py:35

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3a5fa9b0b6b30bd — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_tracing.py:170

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1b8a5884b023329 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_chat_completions_with_tracing.py:171

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b713f013d9345e2 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_embeddings.py:32

        endpoint = os.environ["AZURE_AI_EMBEDDINGS_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a2085f1444817dc — Environment-variable access.

pkgs/python/[email protected]/samples/sample_embeddings.py:33

        key = os.environ["AZURE_AI_EMBEDDINGS_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32e789102304c753 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_embeddings_azure_openai.py:36

        endpoint = os.environ["AZURE_OPENAI_EMBEDDINGS_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b68055b5b7ecd903 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_embeddings_azure_openai.py:48

            key = os.environ["AZURE_OPENAI_EMBEDDINGS_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0ce2ced2ced08b4 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_embeddings_with_base64_encoding.py:32

        endpoint = os.environ["AZURE_AI_EMBEDDINGS_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df9c4a90a2714f0d — Environment-variable access.

pkgs/python/[email protected]/samples/sample_embeddings_with_base64_encoding.py:33

        key = os.environ["AZURE_AI_EMBEDDINGS_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ac8c8ffafe44501 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_embeddings_with_defaults.py:33

        endpoint = os.environ["AZURE_AI_EMBEDDINGS_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c56ab4ca255f1fc1 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_embeddings_with_defaults.py:34

        key = os.environ["AZURE_AI_EMBEDDINGS_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74e8b59d3d12a333 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_get_model_info.py:30

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e412abc69ce1e70 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_get_model_info.py:31

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a17ae8e2029a160 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_image_embeddings.py:31

        endpoint = os.environ["AZURE_AI_IMAGE_EMBEDDINGS_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #adbf6b36f3abb4ac — Environment-variable access.

pkgs/python/[email protected]/samples/sample_image_embeddings.py:32

        key = os.environ["AZURE_AI_IMAGE_EMBEDDINGS_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92f644f3b8f201c4 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_image_embeddings_with_defaults.py:33

        endpoint = os.environ["AZURE_AI_IMAGE_EMBEDDINGS_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f85ebaa2ef7662a — Environment-variable access.

pkgs/python/[email protected]/samples/sample_image_embeddings_with_defaults.py:34

        key = os.environ["AZURE_AI_IMAGE_EMBEDDINGS_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d25f6fc147390365 — Environment-variable access.

pkgs/python/[email protected]/samples/sample_load_client.py:30

        endpoint = os.environ["AZURE_AI_CHAT_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #893e9814474138ae — Environment-variable access.

pkgs/python/[email protected]/samples/sample_load_client.py:31

        key = os.environ["AZURE_AI_CHAT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14a24ff45c4b398c — Filesystem access.

pkgs/python/[email protected]/setup.py:22

with open(os.path.join(package_folder_path, "_version.py"), "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e98011585a15108 — Filesystem access.

pkgs/python/[email protected]/setup.py:33

    long_description=open("README.md", "r").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

azure-cosmos

python dependency

medium telemetry dependency Excluded from app score #ef224ecc7de44587 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/tracing_open_telemetry.py:36

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e4e38a19e9501122 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/tracing_open_telemetry.py:37

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #996a9fc90aafe592 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/samples/tracing_open_telemetry.py:38

from opentelemetry.sdk.trace.export import SimpleSpanProcessor, ConsoleSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 56 low-confidence finding(s)

low env_fs dependency Excluded from app score #f7eef02169d2a803 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_cosmos_client_connection.py:246

            scope_override = os.environ.get(Constants.AAD_SCOPE_OVERRIDE, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f33b923960c995e0 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_cosmos_http_logging_policy.py:324

                multi_record = os.environ.get(HttpLoggingPolicy.MULTI_RECORD_LOG, False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a785ad93f00dead6 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_cosmos_http_logging_policy.py:461

                multi_record = os.environ.get(HttpLoggingPolicy.MULTI_RECORD_LOG, False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d22922cfce861c5 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_execution_context/aio/execution_dispatcher.py:139

            if total_item_buffer > int(os.environ.get(Constants.MAX_ITEM_BUFFER_VS_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6beba2222497d37 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_execution_context/aio/execution_dispatcher.py:139

            if total_item_buffer > int(os.environ.get(Constants.MAX_ITEM_BUFFER_VS_CONFIG,
                                                      Constants.MAX_ITEM_BUFFER_VS_CONFIG_DEFAULT)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fc1d81409608d97 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_execution_context/execution_dispatcher.py:60

    if hybrid_search_query_info['take'] > int(os.environ.get(Constants.HS_MAX_ITEMS_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bef8d2a0c6703543 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_execution_context/execution_dispatcher.py:60

    if hybrid_search_query_info['take'] > int(os.environ.get(Constants.HS_MAX_ITEMS_CONFIG,
                                                             Constants.HS_MAX_ITEMS_CONFIG_DEFAULT)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a02ca45cbdbac15 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_execution_context/execution_dispatcher.py:169

            if total_item_buffer > int(os.environ.get(Constants.MAX_ITEM_BUFFER_VS_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca1434bf783722dc — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_execution_context/execution_dispatcher.py:169

            if total_item_buffer > int(os.environ.get(Constants.MAX_ITEM_BUFFER_VS_CONFIG,
                                                      Constants.MAX_ITEM_BUFFER_VS_CONFIG_DEFAULT)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c524ffd6d6c2b29e — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_global_partition_endpoint_manager_circuit_breaker_core.py:64

        circuit_breaker_enabled = os.environ.get(Constants.CIRCUIT_BREAKER_ENABLED_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4671f08b2b05d77 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_global_partition_endpoint_manager_circuit_breaker_core.py:64

        circuit_breaker_enabled = os.environ.get(Constants.CIRCUIT_BREAKER_ENABLED_CONFIG,
                                                 Constants.CIRCUIT_BREAKER_ENABLED_CONFIG_DEFAULT).lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d752bb2a2c18bb7a — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_global_partition_endpoint_manager_per_partition_automatic_failover.py:132

                    >= int(os.environ.get(Constants.TIMEOUT_ERROR_THRESHOLD_PPAF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d6a43afa1607080 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_global_partition_endpoint_manager_per_partition_automatic_failover.py:132

                    >= int(os.environ.get(Constants.TIMEOUT_ERROR_THRESHOLD_PPAF,
                                          Constants.TIMEOUT_ERROR_THRESHOLD_PPAF_DEFAULT))):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0634d82a029aaa18 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_global_partition_endpoint_manager_per_partition_automatic_failover.py:140

                            >= int(os.environ.get(Constants.TIMEOUT_ERROR_THRESHOLD_PPAF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd5cbc9b09e7a00d — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_global_partition_endpoint_manager_per_partition_automatic_failover.py:140

                            >= int(os.environ.get(Constants.TIMEOUT_ERROR_THRESHOLD_PPAF,
                                                  Constants.TIMEOUT_ERROR_THRESHOLD_PPAF_DEFAULT))):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f18b2c270febbac5 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_health_check_retry_policy.py:34

        self.retry_after_in_milliseconds = int(os.getenv(
            _constants._Constants.AZURE_COSMOS_HEALTH_CHECK_RETRY_AFTER_MS,
            str(_constants._Constants.AZURE_COSMOS_HEALTH_CHECK_RETRY_AFTER_MS_DEFAULT)
        ))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61012084c49a3e37 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_health_check_retry_policy.py:38

        self.max_retry_attempt_count = int(os.getenv(
            _constants._Constants.AZURE_COSMOS_HEALTH_CHECK_MAX_RETRIES,
            str(_constants._Constants.AZURE_COSMOS_HEALTH_CHECK_MAX_RETRIES_DEFAULT)
        ))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e858856fffc9a8d — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_inference_service.py:69

        semantic_reranking_inference_endpoint = os.environ.get(Constants.SEMANTIC_RERANKER_INFERENCE_ENDPOINT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6fd4ce0488c6e9a5 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_partition_health_tracker.py:224

        failure_rate_threshold = int(os.environ.get(Constants.FAILURE_PERCENTAGE_TOLERATED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea68e5bb9bbe47a8 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_partition_health_tracker.py:224

        failure_rate_threshold = int(os.environ.get(Constants.FAILURE_PERCENTAGE_TOLERATED,
                                               Constants.FAILURE_PERCENTAGE_TOLERATED_DEFAULT))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26a8e8c04cb68bb8 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_partition_health_tracker.py:254

        consecutive_failure_threshold = int(os.environ.get(env_key, default_consecutive_threshold))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef7c9781f316eba4 — Filesystem access.

pkgs/python/[email protected]/azure/cosmos/_query_advisor/_rule_directory.py:46

            resource_text = (
                files(__package__)
                .joinpath("query_advice_rules.json")
                .read_text(encoding="utf-8")
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f9a43d8da0859d2 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_response_decoding.py:49

    raw_value = os.environ.get(_MALFORMED_INPUT_ENV_VAR)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c8496ef87ef9f34 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_utils.py:173

    ppcb_check = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b680c31fa71faef — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_utils.py:173

    ppcb_check = os.environ.get(
        _Constants.CIRCUIT_BREAKER_ENABLED_CONFIG,
        _Constants.CIRCUIT_BREAKER_ENABLED_CONFIG_DEFAULT
    ).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76cf4c0f74a49ee2 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_vector_session_token.py:121

        false_progress_merge_enabled = (os.environ.get(_Constants.SESSION_TOKEN_FALSE_PROGRESS_MERGE_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7a99f3761075faf — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/_vector_session_token.py:121

        false_progress_merge_enabled = (os.environ.get(_Constants.SESSION_TOKEN_FALSE_PROGRESS_MERGE_CONFIG,
                                                       _Constants.SESSION_TOKEN_FALSE_PROGRESS_MERGE_CONFIG_DEFAULT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f75e22bedf68d47a — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/aio/_cosmos_client_connection_async.py:239

            scope_override = os.environ.get(Constants.AAD_SCOPE_OVERRIDE, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57d5231aba7b8df8 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/aio/_global_partition_endpoint_manager_per_partition_automatic_failover_async.py:133

                    >= int(os.environ.get(Constants.TIMEOUT_ERROR_THRESHOLD_PPAF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1a55416740446f6 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/aio/_global_partition_endpoint_manager_per_partition_automatic_failover_async.py:133

                    >= int(os.environ.get(Constants.TIMEOUT_ERROR_THRESHOLD_PPAF,
                                          Constants.TIMEOUT_ERROR_THRESHOLD_PPAF_DEFAULT))):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e88f8956db28d4b — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/aio/_global_partition_endpoint_manager_per_partition_automatic_failover_async.py:141

                            >= int(os.environ.get(Constants.TIMEOUT_ERROR_THRESHOLD_PPAF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c5ae24534b998ab — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/aio/_global_partition_endpoint_manager_per_partition_automatic_failover_async.py:141

                            >= int(os.environ.get(Constants.TIMEOUT_ERROR_THRESHOLD_PPAF,
                                                  Constants.TIMEOUT_ERROR_THRESHOLD_PPAF_DEFAULT))):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34909b45069978a8 — Environment-variable access.

pkgs/python/[email protected]/azure/cosmos/aio/_inference_service_async.py:70

        semantic_reranking_inference_endpoint = os.environ.get(Constants.SEMANTIC_RERANKER_INFERENCE_ENDPOINT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c516456489dcffa — Environment-variable access.

pkgs/python/[email protected]/samples/concurrency_sample.py:19

CONN_STR = os.environ['CONN_STR']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #503aa2e708b9d9a1 — Environment-variable access.

pkgs/python/[email protected]/samples/config.py:9

    'host': os.environ.get('ACCOUNT_HOST', '[YOUR ENDPOINT]'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #737d1aa9b059e7eb — Environment-variable access.

pkgs/python/[email protected]/samples/config.py:10

    'master_key': os.environ.get('ACCOUNT_KEY', '[YOUR KEY]'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62b0951345ebad0c — Environment-variable access.

pkgs/python/[email protected]/samples/config.py:11

    'database_id': os.environ.get('COSMOS_DATABASE', '[YOUR DATABASE]'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f06e8f94c687283 — Environment-variable access.

pkgs/python/[email protected]/samples/config.py:12

    'container_id': os.environ.get('COSMOS_CONTAINER', '[YOUR CONTAINER]'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69d37bc072358eb7 — Environment-variable access.

pkgs/python/[email protected]/samples/config.py:13

    'tenant_id': os.environ.get('TENANT_ID', '[YOUR TENANT ID]'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f84132cd4d2855b1 — Environment-variable access.

pkgs/python/[email protected]/samples/config.py:14

    'client_id': os.environ.get('CLIENT_ID', '[YOUR CLIENT ID]'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50d7e78f146cd772 — Environment-variable access.

pkgs/python/[email protected]/samples/config.py:15

    'client_secret': os.environ.get('CLIENT_SECRET', '[YOUR CLIENT SECRET]'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98d38fba775d62ad — Environment-variable access.

pkgs/python/[email protected]/samples/config.py:16

    'container_mh_id': os.environ.get('COSMOS_CONTAINER_MH', '[YOUR MH CONTAINER]'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2405d023e7a9942 — Environment-variable access.

pkgs/python/[email protected]/samples/diagnostics_filter_sample.py:10

endpoint = os.environ["ACCOUNT_URI"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9db2569a5fa3888 — Environment-variable access.

pkgs/python/[email protected]/samples/diagnostics_filter_sample.py:11

key = os.environ["ACCOUNT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c90dc97c991f258 — Filesystem access.

pkgs/python/[email protected]/samples/document_management.py:349

    with open("file_name.txt", "r") as data_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #397cac990bed4559 — Filesystem access.

pkgs/python/[email protected]/samples/document_management_async.py:361

    with open("file_name.txt", "r") as data_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da49bcbc86313a87 — Environment-variable access.

pkgs/python/[email protected]/samples/examples.py:17

url = os.environ["ACCOUNT_URI"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0469486ca1014982 — Environment-variable access.

pkgs/python/[email protected]/samples/examples.py:18

key = os.environ["ACCOUNT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6a82968fc0dc515 — Environment-variable access.

pkgs/python/[email protected]/samples/examples_async.py:23

    url = os.environ["ACCOUNT_URI"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d85fa8a031bd6db — Environment-variable access.

pkgs/python/[email protected]/samples/examples_async.py:24

    key = os.environ["ACCOUNT_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fdb60528b5e77e0 — Environment-variable access.

pkgs/python/[email protected]/samples/tracing_open_telemetry.py:53

account_url = os.environ["COSMOS_ACCOUNT_URL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f88dfe8b71496c3 — Environment-variable access.

pkgs/python/[email protected]/samples/tracing_open_telemetry.py:54

credential = os.environ["COSMOS_CREDENTIAL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98847c8e8259421a — Environment-variable access.

pkgs/python/[email protected]/samples/tracing_open_telemetry.py:55

database_name = os.environ["DATABASE_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd4367f74c10d049 — Filesystem access.

pkgs/python/[email protected]/setup.py:24

with open(os.path.join(PACKAGE_FOLDER_PATH, '_version.py'), 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52fd064b38975e22 — Filesystem access.

pkgs/python/[email protected]/setup.py:31

with open("README.md", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4e559f90a48d714 — Filesystem access.

pkgs/python/[email protected]/setup.py:33

with open("CHANGELOG.md", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

azure-identity

python dependency

medium pii_flow dependency Excluded from app score #0d6b5786ef5fd2f2 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:99 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/azure/identity/_credentials/environment.py:66 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/azure/identity/_credentials/environment.py:99

            _LOGGER.info("Environment is configured for %s", self._credential.__class__.__name__)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #4a0be4969471ffd6 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:77 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:60 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:77

            _LOGGER.info("Environment is configured for %s", self._credential.__class__.__name__)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 105 low-confidence finding(s)

low env_fs dependency Excluded from app score #6a2e04880692754a — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/app_service.py:22

    url = os.environ.get(EnvironmentVariables.IDENTITY_ENDPOINT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6117ad40e471a6f — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/app_service.py:23

    secret = os.environ.get(EnvironmentVariables.IDENTITY_HEADER)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3af022c7be261fe0 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/azd_cli.py:239

        path = os.environ.get("SYSTEMROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e335eb94092d1b01 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/azd_cli.py:322

            "env": dict(os.environ, NO_COLOR="true"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02eaad41839d05f4 — Filesystem access.

pkgs/python/[email protected]/azure/identity/_credentials/azure_arc.py:52

    with open(key_file, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1718655ac79e380 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/azure_arc.py:74

        program_data_path = os.environ.get("PROGRAMDATA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba74e31190eaee2c — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/azure_cli.py:240

        path = os.environ.get("SYSTEMROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dbf00ef15b8bef51 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/azure_cli.py:278

            "env": dict(os.environ, AZURE_CORE_NO_COLOR="true"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5255a5e5bad6bb4 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/azure_ml.py:23

    url = os.environ.get(EnvironmentVariables.MSI_ENDPOINT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d32f5b516401dd5 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/azure_ml.py:24

    secret = os.environ.get(EnvironmentVariables.MSI_SECRET)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #162bc056b6df6155 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/azure_pipelines.py:25

    base_uri = os.environ[SYSTEM_OIDCREQUESTURI].rstrip("/")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41b9a89fe26a3852 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/azure_pipelines.py:37

    if SYSTEM_OIDCREQUESTURI not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4d820f4df7f62a0 — Filesystem access.

pkgs/python/[email protected]/azure/identity/_credentials/certificate.py:149

        with open(certificate_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e7edf65e3b5b58d — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/cloud_shell.py:34

        url = os.environ.get(EnvironmentVariables.MSI_ENDPOINT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ed1ac38e07ff0d6 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/default.py:154

            "interactive_browser_tenant_id", os.environ.get(EnvironmentVariables.AZURE_TENANT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d9141d8ffd74d2e — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/default.py:158

            "managed_identity_client_id", os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a01fc33908d62249 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/default.py:162

            "workload_identity_tenant_id", os.environ.get(EnvironmentVariables.AZURE_TENANT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #772822f39622681e — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/default.py:166

        broker_tenant_id = kwargs.pop("broker_tenant_id", os.environ.get(EnvironmentVariables.AZURE_TENANT_ID))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfa2bb627bb3fa89 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/default.py:169

        shared_cache_username = kwargs.pop("shared_cache_username", os.environ.get(EnvironmentVariables.AZURE_USERNAME))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdb4012ec223bdc7 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/default.py:171

            "shared_cache_tenant_id", os.environ.get(EnvironmentVariables.AZURE_TENANT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d9d60aed68f05ca — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/default.py:176

        token_credentials_env = os.environ.get(EnvironmentVariables.AZURE_TOKEN_CREDENTIALS, "").strip().lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53de02d985512d08 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/default.py:268

                        token_file_path=os.environ.get(EnvironmentVariables.AZURE_FEDERATED_TOKEN_FILE),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d15e2f60f68a13d8 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:63

        if all(os.environ.get(v) is not None for v in EnvironmentVariables.CLIENT_SECRET_VARS):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3238b6e723938fb3 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:65

                client_id=os.environ[EnvironmentVariables.AZURE_CLIENT_ID],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e37ae16f6214d1a9 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:66

                client_secret=os.environ[EnvironmentVariables.AZURE_CLIENT_SECRET],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43cb5270dc09f455 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:67

                tenant_id=os.environ[EnvironmentVariables.AZURE_TENANT_ID],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6104acd40d52dd5 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:70

        elif all(os.environ.get(v) is not None for v in EnvironmentVariables.CERT_VARS):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #960cd663cc648e6b — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:72

                client_id=os.environ[EnvironmentVariables.AZURE_CLIENT_ID],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52beed802a145fd3 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:73

                tenant_id=os.environ[EnvironmentVariables.AZURE_TENANT_ID],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52723bb64124a48a — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:74

                certificate_path=os.environ[EnvironmentVariables.AZURE_CLIENT_CERTIFICATE_PATH],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4918cad6d08abaf0 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:75

                password=os.environ.get(EnvironmentVariables.AZURE_CLIENT_CERTIFICATE_PASSWORD),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30f19e4c06e0ad52 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:77

                    os.environ.get(EnvironmentVariables.AZURE_CLIENT_SEND_CERTIFICATE_CHAIN, False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4d21a085c1a8d7d — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:81

        elif all(os.environ.get(v) is not None for v in EnvironmentVariables.USERNAME_PASSWORD_VARS):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c31fac3d206f92e — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:83

                client_id=os.environ[EnvironmentVariables.AZURE_CLIENT_ID],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #429327f8fdfe4ed3 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:84

                username=os.environ[EnvironmentVariables.AZURE_USERNAME],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #685c7ef2a00ba1a9 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:85

                password=os.environ[EnvironmentVariables.AZURE_PASSWORD],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e25f707aee60723 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:86

                tenant_id=os.environ.get(EnvironmentVariables.AZURE_TENANT_ID),  # optional for username/password auth

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #413782fd99d10599 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:106

            set_variables = [v for v in expected_variables if v in os.environ]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9febee96faaec4f2 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/imds.py:60

        os.environ.get(EnvironmentVariables.AZURE_POD_IDENTITY_AUTHORITY_HOST, IMDS_AUTHORITY).strip("/")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f247fbe212ff3cc — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/imds.py:90

        if EnvironmentVariables.AZURE_POD_IDENTITY_AUTHORITY_HOST in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f73295d177b2ce1f — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:82

        if os.environ.get(EnvironmentVariables.IDENTITY_ENDPOINT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f9fcee278d39415 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:83

            if os.environ.get(EnvironmentVariables.IDENTITY_HEADER):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8468f4a6d5a37031 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:84

                if os.environ.get(EnvironmentVariables.IDENTITY_SERVER_THUMBPRINT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eacbb356ae6581b8 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:98

            elif os.environ.get(EnvironmentVariables.IMDS_ENDPOINT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8881707171b6b45a — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:103

        elif os.environ.get(EnvironmentVariables.MSI_ENDPOINT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db94db20af0a4282 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:104

            if os.environ.get(EnvironmentVariables.MSI_SECRET):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4846736e06441735 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:115

            all(os.environ.get(var) for var in EnvironmentVariables.WORKLOAD_IDENTITY_VARS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66578ff346d835a7 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:120

            workload_client_id = client_id or os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2eafe87feb9ac116 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:131

                tenant_id=os.environ[EnvironmentVariables.AZURE_TENANT_ID],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a1b61a836574c2f — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:133

                token_file_path=os.environ[EnvironmentVariables.AZURE_FEDERATED_TOKEN_FILE],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb1903d5ce43d179 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/service_fabric.py:42

    url = os.environ.get(EnvironmentVariables.IDENTITY_ENDPOINT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #913d703f50889e27 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/service_fabric.py:43

    secret = os.environ.get(EnvironmentVariables.IDENTITY_HEADER)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea4f1de2e4672010 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/service_fabric.py:44

    thumbprint = os.environ.get(EnvironmentVariables.IDENTITY_SERVER_THUMBPRINT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9d935a9f3606855 — Filesystem access.

pkgs/python/[email protected]/azure/identity/_credentials/vscode.py:50

            with open(expanded_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14be8bfc733db456 — Filesystem access.

pkgs/python/[email protected]/azure/identity/_credentials/workload_identity.py:33

            with open(self._token_file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a09e4dd8f472e199 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/workload_identity.py:79

        tenant_id = tenant_id or os.environ.get(EnvironmentVariables.AZURE_TENANT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #385cca1877c8be34 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/workload_identity.py:80

        client_id = client_id or os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28c51db16fcf225e — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_credentials/workload_identity.py:81

        token_file_path = token_file_path or os.environ.get(EnvironmentVariables.AZURE_FEDERATED_TOKEN_FILE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #058cdf6ff87f3f12 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_internal/msal_credentials.py:39

        self._regional_authority = os.environ.get(EnvironmentVariables.AZURE_REGIONAL_AUTHORITY_NAME)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38a24ad939526728 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_internal/utils.py:90

    authority = os.environ.get(EnvironmentVariables.AZURE_AUTHORITY_HOST, KnownAuthorities.AZURE_PUBLIC_CLOUD)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e70a1f131535b834 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_internal/utils.py:151

    if default_tenant == "adfs" or os.environ.get(EnvironmentVariables.AZURE_IDENTITY_DISABLE_MULTITENANTAUTH):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3ef09427fd1b82e — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_internal/utils.py:207

    token_credentials_env = os.environ.get(EnvironmentVariables.AZURE_TOKEN_CREDENTIALS, "").strip().lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bee2d3785135277e — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_persistent_cache.py:88

    if sys.platform.startswith("win") and "LOCALAPPDATA" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f1e1bfe41ca0415 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/_persistent_cache.py:89

        cache_location = os.path.join(os.environ["LOCALAPPDATA"], ".IdentityService", cache_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d0e52562dcde10a — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/azd_cli.py:221

            env=dict(os.environ, NO_COLOR="true"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f174bb1d008b34f1 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/azure_arc.py:19

        url = os.environ.get(EnvironmentVariables.IDENTITY_ENDPOINT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cba0d3056c9a43ae — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/azure_arc.py:20

        imds = os.environ.get(EnvironmentVariables.IMDS_ENDPOINT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83b175acac36e98e — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/azure_cli.py:226

            env=dict(os.environ, AZURE_CORE_NO_COLOR="true"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5933949e90cfceb — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/cloud_shell.py:21

        url = os.environ.get(EnvironmentVariables.MSI_ENDPOINT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ea082253f03786b — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/default.py:135

        shared_cache_username = kwargs.pop("shared_cache_username", os.environ.get(EnvironmentVariables.AZURE_USERNAME))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f25053cfa66c0e57 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/default.py:137

            "shared_cache_tenant_id", os.environ.get(EnvironmentVariables.AZURE_TENANT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cc6a35596832ebd — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/default.py:141

            "managed_identity_client_id", os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ee59447440d49f2 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/default.py:145

            "workload_identity_tenant_id", os.environ.get(EnvironmentVariables.AZURE_TENANT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8f9ba068d92cf84 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/default.py:150

        token_credentials_env = os.environ.get(EnvironmentVariables.AZURE_TOKEN_CREDENTIALS, "").strip().lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dba1362189dd2a6f — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/default.py:231

                        token_file_path=os.environ.get(EnvironmentVariables.AZURE_FEDERATED_TOKEN_FILE),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e94abad3690aabcf — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:57

        if all(os.environ.get(v) is not None for v in EnvironmentVariables.CLIENT_SECRET_VARS):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c927cdf6ed0e97a5 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:59

                client_id=os.environ[EnvironmentVariables.AZURE_CLIENT_ID],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f25226537bf0f4e0 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:60

                client_secret=os.environ[EnvironmentVariables.AZURE_CLIENT_SECRET],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d6b8800b43cad27 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:61

                tenant_id=os.environ[EnvironmentVariables.AZURE_TENANT_ID],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b4cd166e919795a — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:64

        elif all(os.environ.get(v) is not None for v in EnvironmentVariables.CERT_VARS):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a6bdf7e1831844b — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:66

                client_id=os.environ[EnvironmentVariables.AZURE_CLIENT_ID],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e203af2aaa1d9f1 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:67

                tenant_id=os.environ[EnvironmentVariables.AZURE_TENANT_ID],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17271b842a7b875d — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:68

                certificate_path=os.environ[EnvironmentVariables.AZURE_CLIENT_CERTIFICATE_PATH],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56f544e52d8b0121 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:69

                password=os.environ.get(EnvironmentVariables.AZURE_CLIENT_CERTIFICATE_PASSWORD),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18fced4484fa964d — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:71

                    os.environ.get(EnvironmentVariables.AZURE_CLIENT_SEND_CERTIFICATE_CHAIN, False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85f2e6d2d9fde979 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:80

            set_variables = [v for v in expected_variables if v in os.environ]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22ba1fa677db2e45 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/imds.py:54

        if EnvironmentVariables.AZURE_POD_IDENTITY_AUTHORITY_HOST in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ceecbd1627c79b3d — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:54

        if os.environ.get(EnvironmentVariables.IDENTITY_ENDPOINT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fed99b166b6da47 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:55

            if os.environ.get(EnvironmentVariables.IDENTITY_HEADER):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8cfb1851bc3c6c7 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:56

                if os.environ.get(EnvironmentVariables.IDENTITY_SERVER_THUMBPRINT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48f54022cd7f9951 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:70

            elif os.environ.get(EnvironmentVariables.IMDS_ENDPOINT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3524cf05a2a89e3c — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:75

        elif os.environ.get(EnvironmentVariables.MSI_ENDPOINT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc5973d0dfa457e5 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:76

            if os.environ.get(EnvironmentVariables.MSI_SECRET):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05b3dde7622c3753 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:87

            all(os.environ.get(var) for var in EnvironmentVariables.WORKLOAD_IDENTITY_VARS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a559f927f790d2d — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:92

            workload_client_id = client_id or os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c77ff9614e2bca9 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:103

                tenant_id=os.environ[EnvironmentVariables.AZURE_TENANT_ID],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95f920b01ee107d2 — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:105

                token_file_path=os.environ[EnvironmentVariables.AZURE_FEDERATED_TOKEN_FILE],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c34f6872dbefa83d — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/workload_identity.py:57

        tenant_id = tenant_id or os.environ.get(EnvironmentVariables.AZURE_TENANT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5cb6bb0c941ff9a — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/workload_identity.py:58

        client_id = client_id or os.environ.get(EnvironmentVariables.AZURE_CLIENT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #596533935e59a00b — Environment-variable access.

pkgs/python/[email protected]/azure/identity/aio/_credentials/workload_identity.py:59

        token_file_path = token_file_path or os.environ.get(EnvironmentVariables.AZURE_FEDERATED_TOKEN_FILE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c640506a8422f37 — Environment-variable access.

pkgs/python/[email protected]/samples/control_interactive_prompts.py:17

VAULT_URL = os.environ.get("VAULT_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bae02c04d47a38ac — Environment-variable access.

pkgs/python/[email protected]/samples/credential_creation_code_snippets.py:360

        system_access_token=os.environ["SYSTEM_ACCESSTOKEN"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53f476e04b38a006 — Environment-variable access.

pkgs/python/[email protected]/samples/credential_creation_code_snippets.py:374

        system_access_token=os.environ["SYSTEM_ACCESSTOKEN"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63b6ea2e0524cb6c — Environment-variable access.

pkgs/python/[email protected]/samples/key_vault_cert.py:19

VAULT_URL = os.environ["VAULT_URL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e49fecee6b54161 — Environment-variable access.

pkgs/python/[email protected]/samples/user_authentication.py:14

VAULT_URL = os.environ.get("VAULT_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

transformers

python dependency

medium pii_flow dependency Excluded from app score #c7e390a05224e6d2 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2514 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2512 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2514

            logger.debug(f"[Kubeflow] Token file not found: {token_path}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 399 low-confidence finding(s)

low env_fs dependency Excluded from app score #a7275b1069dd6b28 — Filesystem access.

pkgs/python/[email protected]/setup.py:311

        with open(target, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59412bc47bdf0287 — Filesystem access.

pkgs/python/[email protected]/setup.py:331

        long_description=open("README.md", "r", encoding="utf-8").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #d4f02ab93758d1d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/audio_utils.py:69

    response = httpx.get(url, follow_redirects=True, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #9e09eb6c0bea5ea9 — Filesystem access.

pkgs/python/[email protected]/src/transformers/audio_utils.py:339

            with open(audio, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c49b0f0bc04ad7c — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:176

    with open(file_name, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96102bb4146cf1f8 — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:182

    with open(file_name, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afb071170f78e386 — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:228

    autofile = (repo_path / "src" / "transformers" / "models" / "auto" / "auto_mappings.py").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e76541d445bf6de — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:246

                file = (repo_path / "src" / "transformers" / "models" / "auto" / filename).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fa5ade5095c3c83 — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:333

    with open(toc_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51e61dafc2a883a0 — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:392

    with open(module_name, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #443ab7abf2d245fe — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:517

            with open(original_test_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17af405045fb3398 — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:567

    with open(new_module_folder / f"modular_{new_lowercase_name}.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #179f1ccc2fb6db84 — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:572

    with open(new_module_folder / "__init__.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12023c2ac4780747 — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:589

    with open(tests_folder / "__init__.py", "w"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e6afc9a43206100 — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:593

        with open(tests_folder / filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8dcd4f466c6e1be6 — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:598

    with open(repo_path / "docs" / "source" / "en" / "model_doc" / f"{new_lowercase_name}.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #8c6b8e6d70429ba0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/cli/chat.py:212

        response = requests.post(f"{self.base_url.rstrip('/')}/load_model", json={"model": model}, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #15eb6c02a797b0af — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/chat.py:363

            with open(examples_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #e9b53a47068999ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/cli/chat.py:379

            output = httpx.get(health_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #8f54515b83ea3dd5 — Filesystem access.

pkgs/python/[email protected]/src/transformers/cli/chat.py:659

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55a9843191d6120d — Filesystem access.

pkgs/python/[email protected]/src/transformers/configuration_utils.py:921

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2cfece6e0f73df8c — Filesystem access.

pkgs/python/[email protected]/src/transformers/configuration_utils.py:1136

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d85879192e211f08 — Filesystem access.

pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:159

        with open(model, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b8ccf386fdabc7e — Filesystem access.

pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:706

        with open(self.original_tokenizer.vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48dd70635d803aea — Filesystem access.

pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:1713

        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ecaf87b6878ee31 — Filesystem access.

pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:1753

        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #526512c64fb02469 — Filesystem access.

pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:1843

        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #851eb73b02f38e2c — Filesystem access.

pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:2003

        with open(self.vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81d1bb2beabae93d — Filesystem access.

pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:576

        with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #715b3289ddaba69e — Filesystem access.

pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:580

        with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97560c173b699892 — Filesystem access.

pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:584

        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e990f4cb8fd27948 — Filesystem access.

pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:769

    with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8183e6426b1a1a3 — Filesystem access.

pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:772

    with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94a488a73ce36343 — Filesystem access.

pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:776

        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e285aeeb16e5122 — Filesystem access.

pkgs/python/[email protected]/src/transformers/data/processors/squad.py:515

        with open(
            os.path.join(data_dir, self.train_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22ddb9ec26cabc2b — Filesystem access.

pkgs/python/[email protected]/src/transformers/data/processors/squad.py:536

        with open(
            os.path.join(data_dir, self.dev_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ce0d8727b7ead3f — Filesystem access.

pkgs/python/[email protected]/src/transformers/data/processors/utils.py:119

        with open(input_file, "r", encoding="utf-8-sig") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ee386ee764f0524 — Filesystem access.

pkgs/python/[email protected]/src/transformers/distributed/configuration_utils.py:86

        with open(json_file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #579827f8ee6ebd17 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/distributed/fsdp.py:48

        and strtobool(os.environ.get("ACCELERATE_USE_FSDP", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8a829be184f052f — Environment-variable access.

pkgs/python/[email protected]/src/transformers/distributed/fsdp.py:49

        and strtobool(os.environ.get("FSDP_CPU_RAM_EFFICIENT_LOADING", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22872a02de8755b9 — Filesystem access.

pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:133

    with open(module_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab1af5f376cd2dc6 — Filesystem access.

pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:186

    with open(filename, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d87b1f553ce2b87 — Filesystem access.

pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:298

        module_hash: str = hashlib.sha256(b"".join(bytes(f) + f.read_bytes() for f in module_files)).hexdigest()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bf76f08d89f042e — Filesystem access.

pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:341

        source_files_hash.update(file_path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e8c623cf39727c5 — Filesystem access.

pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:813

        with open(requirements, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #164ed56ccda63155 — Filesystem access.

pkgs/python/[email protected]/src/transformers/feature_extraction_utils.py:611

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cc77023097a1459 — Filesystem access.

pkgs/python/[email protected]/src/transformers/feature_extraction_utils.py:639

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58f133023de2f062 — Filesystem access.

pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1088

        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f248490147ad28a2 — Filesystem access.

pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1251

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83f435676a78d60d — Filesystem access.

pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1372

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4551d17e54a67531 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1818

        graph_mixing_supported = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT", "1") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ebd2d4364e5a49a0 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1819

        distributed = int(os.environ.get("WORLD_SIZE", "1")) > 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c1a2ac61a1d47b0 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1824

            os.environ.setdefault("NCCL_GRAPH_MIXING_SUPPORT", "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36599ff5c4f7fded — Environment-variable access.

pkgs/python/[email protected]/src/transformers/generation/continuous_batching/distributed.py:160

        graph_mixing_not_disabled = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT") != "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b98e616ce482f7bf — Environment-variable access.

pkgs/python/[email protected]/src/transformers/generation/utils.py:2177

            os.environ["TOKENIZERS_PARALLELISM"] = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a71f467cf624bb1 — Filesystem access.

pkgs/python/[email protected]/src/transformers/hf_argparser.py:333

                    file_args += args_file.read_text().split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a3a86e4ca3b4bcf — Filesystem access.

pkgs/python/[email protected]/src/transformers/hf_argparser.py:403

        with open(Path(json_file), encoding="utf-8") as open_json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b4462abd9096f63 — Filesystem access.

pkgs/python/[email protected]/src/transformers/hf_argparser.py:425

        outputs = self.parse_dict(yaml.safe_load(Path(yaml_file).read_text()), allow_extra_keys=allow_extra_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d838bb62979d4885 — Filesystem access.

pkgs/python/[email protected]/src/transformers/image_processing_base.py:417

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5b7f069255bd3e6 — Filesystem access.

pkgs/python/[email protected]/src/transformers/image_processing_base.py:445

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #a5c3ef5b6e3cf260 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/image_utils.py:486

            image = PIL.Image.open(BytesIO(httpx.get(image, timeout=timeout, follow_redirects=True).content))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #87e20d588370e8bb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/image_utils.py:531

            raw = httpx.get(image, timeout=timeout, follow_redirects=True).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #82a2b7dbf6a33896 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/accelerate.py:115

                local_rank = int(os.environ.get("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #835d1f1e1e28bc83 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/deepgemm.py:88

    cuda_home = os.environ.get("CUDA_HOME") or os.environ.get("CUDA_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #849c42802fb49704 — Filesystem access.

pkgs/python/[email protected]/src/transformers/integrations/deepgemm.py:113

            with open(version_json) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6396ebcb786b9324 — Filesystem access.

pkgs/python/[email protected]/src/transformers/integrations/deepgemm.py:124

            with open(version_txt) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2884e3e5f44b84d — Filesystem access.

pkgs/python/[email protected]/src/transformers/integrations/deepgemm.py:135

            with open(cuda_h) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f0495292b27e1cc — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/finegrained_fp8.py:258

        and os.environ.get("TRANSFORMERS_DISABLE_DEEPGEMM_LINEAR", "0") != "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd51c7b10cabff23 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/hub_kernels.py:57

_TRANSFORMERS_USE_HUB_KERNELS = os.environ.get("USE_HUB_KERNELS", "YES").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #151cdaf57038eb1e — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:40

if os.getenv("WANDB_MODE") == "offline":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4c3eea2e9a7bfc9 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:176

    if os.getenv("DISABLE_MLFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d97b3eb7730e623 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:212

    if os.getenv("DISABLE_KUBEFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f3a3e54708e6ac4 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:214

    return os.getenv("KUBEFLOW_TRAINER_SERVER_URL") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d9d8c7edcd577b6 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:436

    ray_scope = os.getenv("RAY_SCOPE", "last")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9cdc13a67cc5ec1 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:602

        self.logging_dir = os.getenv("TENSORBOARD_LOGGING_DIR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #069c4cd3d62230d7 — Filesystem access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:664

    with open(f"{output_dir}/model_architecture.txt", "w+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86fd22285dce86b2 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:709

        self._log_model = WandbLogModel(os.getenv("WANDB_LOG_MODEL", "false"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d86d70a4c3a0522 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:763

                    project=os.getenv("WANDB_PROJECT", "huggingface"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61e30b22cd500d61 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:775

            _watch_model = os.getenv("WANDB_WATCH", "false")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63031571c3031558 — Filesystem access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:815

                                fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4af9f17ad387d74 — Filesystem access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:878

                            fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f68191583dade0a4 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1170

        log_assets = os.getenv("COMET_LOG_ASSETS", "FALSE").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9774b2ea2aa4b7bb — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1174

            comet_old_mode = os.getenv("COMET_MODE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99c42af6f9258db3 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1334

        self._log_artifacts = os.getenv("HF_MLFLOW_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49383a3000483bf2 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1335

        self._nested_run = os.getenv("MLFLOW_NESTED_RUN", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48b6fde98eb92127 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1336

        self._tracking_uri = os.getenv("MLFLOW_TRACKING_URI", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a1c912d08196906 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1337

        self._experiment_name = os.getenv("MLFLOW_EXPERIMENT_NAME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b198d7ebba7cf58 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1338

        self._flatten_params = os.getenv("MLFLOW_FLATTEN_PARAMS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5189b9f55c2d8d82 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1339

        self._run_id = os.getenv("MLFLOW_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #902f1bb9330d79e8 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1340

        self._max_log_params = os.getenv("MLFLOW_MAX_LOG_PARAMS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4b481f03770ff9e — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1403

            mlflow_tags = os.getenv("MLFLOW_TAGS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b49f42a3a18a29ce — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1487

        self.log_artifacts = os.getenv("HF_DAGSHUB_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52d0b29cd24e7020 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1488

        self.name = os.getenv("HF_DAGSHUB_MODEL_NAME") or "main"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c92d1e9ec4595f47 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1489

        self.remote = os.getenv("MLFLOW_TRACKING_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a837f1c18ccae48 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1493

            branch=os.getenv("BRANCH") or "main",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33073d66e5bdab00 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1908

                    self._log_model = os.getenv(
                        "CLEARML_LOG_MODEL",
                        "FALSE" if not ClearMLCallback._task_created_in_callback else "TRUE",
                    ).upper() in ENV_VARS_TRUE_VALUES.union({"TRUE"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c7b28158615364b — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1915

                        project_name=os.getenv("CLEARML_PROJECT", "HuggingFace Transformers"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9492723505acfa9 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1916

                        task_name=os.getenv("CLEARML_TASK", "Trainer"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f79099b396c92a0a — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1920

                    self._log_model = os.getenv("CLEARML_LOG_MODEL", "TRUE").upper() in ENV_VARS_TRUE_VALUES.union(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19372f69e1504126 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2189

            log_model_env = os.getenv("HF_DVCLIVE_LOG_MODEL", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b824a0eed3d2e3e2 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2271

        self._log_model = os.getenv("SWANLAB_LOG_MODEL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6044191aed8094f — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2342

            init_args["project"] = os.getenv("SWANLAB_PROJECT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26d717e09d75916e — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2344

            run_id = os.getenv("SWANLAB_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddec7807a82d4bdb — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2348

            resume = os.getenv("SWANLAB_RESUME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32a7d8bc4cbe8366 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2494

        ca_file = os.environ.get(self._ENV_CA_CERT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d5d83c9c6aedf80 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2512

        token_path = os.environ.get(self._ENV_TOKEN_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #958e83f65771d7f6 — Filesystem access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2518

            with open(token_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e077c0d915b3119f — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2534

            url = os.environ.get(self._ENV_SERVER_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #54615f2433b78fa9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2562

            with urllib.request.urlopen(req, timeout=5, context=self._get_ssl_context()) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #5b2c74b5dd40f60a — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/mxfp4.py:417

        rank = int(os.environ.get("LOCAL_RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2baccbbd1bed0ed9 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/npu_flash_attention.py:30

SPARSE_MODE = int(os.getenv("NPU_FA2_SPARSE_MODE", default=DOWN_RIGHT_ALIGNED_CAUSAL_MASK_MODE))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6240bbf3007e7f8c — Filesystem access.

pkgs/python/[email protected]/src/transformers/integrations/peft.py:708

        with open(_adapter_model_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb3fa52b71ceaca2 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:77

                rank = int(os.environ["RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #faa2023423aa616a — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:78

                local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bd31506b8790086 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:79

                world_size = int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56ed4e3eb6e408d7 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:103

            current_device.set_device(int(os.environ["LOCAL_RANK"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #584f60b50d3244bf — Environment-variable access.

pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:122

        device_map = torch.device(f"{device_mesh.device_type}:{int(os.environ['LOCAL_RANK'])}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0fb4abdc8fba1ad — Filesystem access.

pkgs/python/[email protected]/src/transformers/model_debugging_utils.py:243

    with open(full_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3c9eac4481d9c55 — Filesystem access.

pkgs/python/[email protected]/src/transformers/model_debugging_utils.py:266

    with open(summary_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d87a2a8b812705fb — Environment-variable access.

pkgs/python/[email protected]/src/transformers/modeling_flash_attention_utils.py:657

            deterministic if deterministic is not None else os.getenv("FLASH_ATTENTION_DETERMINISTIC", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b318a5ef049996ac — Environment-variable access.

pkgs/python/[email protected]/src/transformers/modeling_utils.py:163

XLA_USE_BF16 = os.environ.get("XLA_USE_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efd99fc529069459 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/modeling_utils.py:164

XLA_DOWNCAST_BF16 = os.environ.get("XLA_DOWNCAST_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c0440a102a33b00 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/modeling_utils.py:213

    return _is_torch_distributed_initialized() and int(os.environ.get("LOCAL_RANK", "-1")) == 0

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6cc144bb56d47e8f — Filesystem access.

pkgs/python/[email protected]/src/transformers/modeling_utils.py:323

        with open("/proc/mounts", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03941c29d75c1c58 — Filesystem access.

pkgs/python/[email protected]/src/transformers/modeling_utils.py:356

            with open(checkpoint_path, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce446adea4d25a2b — Filesystem access.

pkgs/python/[email protected]/src/transformers/modeling_utils.py:3705

            with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c58ac06552763ff8 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/modeling_utils.py:4268

        if device_map == "auto" and int(os.environ.get("WORLD_SIZE", "0")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c707bed796019a14 — Filesystem access.

pkgs/python/[email protected]/src/transformers/modeling_utils.py:4570

                        with open(file, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33bbb9a53a612c34 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/auto/auto_factory.py:311

                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2577421aa9b20659 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/auto/processing_auto.py:274

                with open(tokenizer_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5459e891c5f21e6c — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/auto/tokenization_auto.py:435

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a58187ce761d35e5 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/auto/tokenization_auto.py:442

    with open(merges_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2161fb6d2e53b802 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/auto/tokenization_auto.py:613

    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72e6dd12a805db3d — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bark/processing_bark.py:101

                with open(speaker_embeddings_path) as speaker_embeddings_json:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93154dfb03171f60 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bark/processing_bark.py:161

            with open(os.path.join(save_directory, speaker_embeddings_dict_path), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11c76ef9d8354654 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bartpho/tokenization_bartpho.py:133

        with open(monolingual_vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2aea6aaa626da8b7 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bartpho/tokenization_bartpho.py:306

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fde886d32e61a85a — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bartpho/tokenization_bartpho.py:315

            with open(out_monolingual_vocab_file, "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #924fa34899196f52 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bert/tokenization_bert.py:33

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30d1c1b14000ff3b — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bert/tokenization_bert_legacy.py:32

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #739d6147532188f4 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bert/tokenization_bert_legacy.py:245

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf98c431c3b36fd0 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:41

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7fa165b057d81718 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:278

            with open(vocab_file, "wb") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b34fe002e009cdc — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:282

            with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b62067cf9cfe7865 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:142

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0676ba375c59bcb4 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:316

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b279bdace64b408 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:324

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6c8b62d0d9ab219 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:338

                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f53335d856c6799 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:116

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e7e3dcc9bae76b7 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:119

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ff49657779bb629 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:293

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #928e75fc4f2013b2 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:297

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07e2712c114c6707 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:89

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84207e5c303bddeb — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:92

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1695e382c9fa335d — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:203

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7382455506ccb85 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:207

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d96cf9288ae5f91 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/clvp/tokenization_clvp.py:149

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #061262df6600176f — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/clvp/tokenization_clvp.py:155

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94d4e92a095a7bac — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/cpm/tokenization_cpm.py:324

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f1e3f9217cb4dfa — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/cpmant/tokenization_cpmant.py:37

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2392769c3cd6baa — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/cpmant/tokenization_cpmant.py:219

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9c2503f776abd0a — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/ctrl/tokenization_ctrl.py:128

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8afd249327be1875 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/ctrl/tokenization_ctrl.py:131

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f67c541df360ddc2 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/esm/openfold_utils/residue_constants.py:417

    stereo_chemical_props = resources.read_text("openfold.resources", "stereo_chemical_props.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b02397402575343 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/esm/tokenization_esm.py:28

    with open(vocab_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13892d19ac35cdf7 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/esm/tokenization_esm.py:136

        with open(vocab_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #681d5c034b71be5d — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:65

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07269661f56059d0 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:163

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9127395165a60116 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:237

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e606ad0d656b4e8a — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:240

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d865fe0e231fbb4 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:498

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ccce585792216817 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:502

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d4c4659448d18b2 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:204

        with open(src_vocab_file, encoding="utf-8") as src_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0d1a91c3514e293 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:206

        with open(tgt_vocab_file, encoding="utf-8") as tgt_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0ad1bf2fef84d0f — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:209

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #faa03091e22bdbb2 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:446

        with open(src_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3db0763d05e1013 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:449

        with open(tgt_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a26f5bbec8b03f4e — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:454

        with open(merges_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fabd4b572a913c06 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:35

    with open(emoji_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #496b71f7f5c8ebeb — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:41

    with open(vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f93af2c8d56e7f05 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:180

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f715290cef953ac — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:190

        with open(emoji_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #801503c312f3785d — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/luke/tokenization_luke.py:287

            with open(entity_vocab_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7693b41dc724deb — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/m2m_100/tokenization_m2m_100.py:311

            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6c5a170b62b7aa2 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/m2m_100/tokenization_m2m_100.py:375

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7ba7c7002dd2ef7 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/m2m_100/tokenization_m2m_100.py:380

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0aa069fdbce691a5 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/marian/tokenization_marian.py:352

                with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25a2b94284b1de84 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/marian/tokenization_marian.py:416

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #494ca66ecbbba8fe — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/marian/tokenization_marian.py:421

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a9d6eb5af724986 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:598

        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe9b8f14fbf6449a — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:651

    with open(tracker_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c41e4f358ecb49f — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/mgp_str/tokenization_mgp_str.py:53

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be0b307eb2e85548 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/mgp_str/tokenization_mgp_str.py:97

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b770caa28b0cc87c — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/mluke/tokenization_mluke.py:308

            with open(entity_vocab_file, encoding="utf-8") as entity_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35f832dc9f9d96f1 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/mluke/tokenization_mluke.py:1713

        with open(entity_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0d7df6923970051 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/myt5/tokenization_myt5.py:46

            with open(rewriting_rules, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4e09a6596ac66c1 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/myt5/tokenization_myt5.py:195

        self.byte_maps = json.load(open(vocab_file, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aaa6ea10b148d19b — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/myt5/tokenization_myt5.py:373

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8192be30b37582a — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/oneformer/image_processing_oneformer.py:95

    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #503cbea9740f582e — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/oneformer/image_processing_pil_oneformer.py:241

    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce1a16568c264a6f — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/phobert/tokenization_phobert.py:126

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09b400ff066a0fe4 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/phobert/tokenization_phobert.py:310

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #460b822cc3c2ab2f — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/phobert/tokenization_phobert.py:331

                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37199deb18455e21 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/pop2piano/tokenization_pop2piano.py:111

        with open(vocab, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20829027649d7eea — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/pop2piano/tokenization_pop2piano.py:358

        with open(out_vocab_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6147556faae6edf — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/prophetnet/tokenization_prophetnet.py:259

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53d2130c177dc69d — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/prophetnet/tokenization_prophetnet.py:438

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c75b141117479ea — Environment-variable access.

pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:134

        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a17ab7128ce22ed7 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:141

        with open(passages_path, "rb") as passages_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5269a81379995731 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:150

        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbea806418d5e0d1 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:157

        with open(resolved_meta_path, "rb") as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #258457d33375abe0 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:52

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98e921fe2b4b05e3 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:139

        with open(word_shape_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09043c914dff9a5b — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:142

        with open(word_pronunciation_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6907d4a4e65c0b8 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:1077

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2a07a1986f24acb — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:1088

        with open(word_shape_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85fc2e95bf1d8452 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:1091

        with open(word_pronunciation_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efb8162d039879c1 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/siglip/tokenization_siglip.py:345

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6f7660ff6449b11 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:271

            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #184692c7deb5e9ad — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:285

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc9829586d117c1b — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:290

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82f6d8e47281c065 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/splinter/tokenization_splinter.py:33

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #effead71f875e09b — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/tapas/tokenization_tapas.py:91

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a0e6987a2590dac — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/tapas/tokenization_tapas.py:394

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88ce92d55dca2213 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/vits/tokenization_vits.py:83

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a064ea0eefb9f8f — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/vits/tokenization_vits.py:242

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #979d824edc91bad8 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:154

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bd6960573e0292d — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:647

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0123c424bc04f0d — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:138

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #250a18f90d1f6eae — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:575

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cbd1ee196317f4ae — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:266

            with open(normalizer_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb423c7aa2399dc0 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:560

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #320ee340c0fc21eb — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:563

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1dc884fb48282cfe — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:568

            with open(normalizer_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e64575b277e80e22 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:244

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2789476b095f22d — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:247

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ae3edd4f281d380 — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:541

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b1a0cbee68ceb3d — Filesystem access.

pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:545

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1fc9fcee6b0a506b — Filesystem access.

pkgs/python/[email protected]/src/transformers/pipelines/__init__.py:921

                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #5b546e4c881f2cd2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/pipelines/audio_classification.py:172

                inputs = httpx.get(inputs, follow_redirects=True).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #1cf3bf898f3a4603 — Filesystem access.

pkgs/python/[email protected]/src/transformers/pipelines/audio_classification.py:174

                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #4ddb200a28a2a90a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/pipelines/automatic_speech_recognition.py:350

                inputs = httpx.get(inputs, follow_redirects=True).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #115d77cc1e8c1d72 — Filesystem access.

pkgs/python/[email protected]/src/transformers/pipelines/automatic_speech_recognition.py:352

                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f73306e318ef086 — Filesystem access.

pkgs/python/[email protected]/src/transformers/pipelines/base.py:464

        with open(binary_path, "wb+") as f_output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9412ba1b5a6dcc81 — Filesystem access.

pkgs/python/[email protected]/src/transformers/pipelines/base.py:527

        with open(self.input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #068f0704cc43894f — Filesystem access.

pkgs/python/[email protected]/src/transformers/pipelines/base.py:542

        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51a8355ebb9bfe89 — Filesystem access.

pkgs/python/[email protected]/src/transformers/pipelines/base.py:570

        with open(input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09169594a9ebb18e — Filesystem access.

pkgs/python/[email protected]/src/transformers/pipelines/base.py:587

        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e81a282fdf00485 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/pipelines/base.py:1200

        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7c61299bd7a1e41 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/pipelines/base.py:1202

            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8031a5d26a9e6d86 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/pipelines/base.py:1321

        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf52757eb62cdb2a — Environment-variable access.

pkgs/python/[email protected]/src/transformers/pipelines/base.py:1323

            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #77d040c02b7b7e9a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/pipelines/video_classification.py:154

                video = BytesIO(httpx.get(video, follow_redirects=True).content)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7529affabdb2cc38 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/pipelines/zero_shot_audio_classification.py:109

                audio = httpx.get(audio, follow_redirects=True).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #03ee24871efc2e2f — Filesystem access.

pkgs/python/[email protected]/src/transformers/pipelines/zero_shot_audio_classification.py:111

                with open(audio, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #596dccd539d28d2f — Filesystem access.

pkgs/python/[email protected]/src/transformers/processing_utils.py:1090

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #380809e557b70bfb — Filesystem access.

pkgs/python/[email protected]/src/transformers/processing_utils.py:1170

            with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb9ff2ab6bcf3482 — Filesystem access.

pkgs/python/[email protected]/src/transformers/processing_utils.py:1178

                    with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22a247b966faae11 — Filesystem access.

pkgs/python/[email protected]/src/transformers/processing_utils.py:1187

                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21e7a5b99058ffbd — Filesystem access.

pkgs/python/[email protected]/src/transformers/processing_utils.py:1375

            with open(resolved_chat_template_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #301b89a0fb75d3c0 — Filesystem access.

pkgs/python/[email protected]/src/transformers/processing_utils.py:1387

                template_name: open(template_file, "r", encoding="utf-8").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eedcd777360a1c07 — Filesystem access.

pkgs/python/[email protected]/src/transformers/processing_utils.py:1391

                with open(resolved_raw_chat_template_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5f6bb9be427bf04 — Filesystem access.

pkgs/python/[email protected]/src/transformers/processing_utils.py:1406

                with open(resolved_processor_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8068b5d6b1410ef — Filesystem access.

pkgs/python/[email protected]/src/transformers/processing_utils.py:1432

                reader = open(resolved_audio_tokenizer_file, "r", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #12aba46dd0667f2b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/safetensors_conversion.py:48

    result = httpx.post(sse_url, follow_redirects=True, json=data).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #61ad9a463263e124 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:290

        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c719a1e19ae6674a — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:306

        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f07e32ab1ccfb8a — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:1079

    if "TRANSFORMERS_TEST_BACKEND" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47bd8eabc55f8297 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:1080

        backend = os.environ["TRANSFORMERS_TEST_BACKEND"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #494876577a3babe3 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:1089

    if "TRANSFORMERS_TEST_DEVICE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71c4e23a9ad4f39d — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:1090

        torch_device = os.environ["TRANSFORMERS_TEST_DEVICE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3221b44f6bcdfe2b — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2161

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e759e3e06d95a28d — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2283

            for k in list(os.environ.keys()):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5964b23586feb499 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2285

                    del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b1fbea583770af1 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2296

    return mock.patch.dict(os.environ, kwargs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51abdbf232fbc8e3 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2311

    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e790131778025f0b — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2413

        with open(report_files["durations"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4993d311b1d74545 — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2443

    with open(report_files["failures_long"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b610a1bf87f398c6 — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2448

    with open(report_files["failures_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cff031cb93495a08 — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2453

    with open(report_files["failures_line"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3c19cc3cbc953f5 — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2457

    with open(report_files["errors"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db133cc8cadd5f2d — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2461

    with open(report_files["warnings"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90f200feb64d3aea — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2475

    with open(report_files["summary_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #543ae0d59da5cb51 — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2479

    with open(report_files["stats"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e459756f5ebad35 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2579

    worker = os.environ.get("PYTEST_XDIST_WORKER", "gw0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #515f4ff04394c50b — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2626

    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91055278d243edd0 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2828

        timeout = int(os.environ.get("PYTEST_TIMEOUT", "600"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49dfd1ed17c5b568 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2864

        if os.getenv("_INSIDE_SUB_PROCESS", None) == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03bc999f262d01da — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2867

            test = " ".join(os.environ.get("PYTEST_CURRENT_TEST").split(" ")[:-1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a52a036a43cd05e — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2869

                env = copy.deepcopy(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93f67cc1daa0c3bb — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:2986

    skip_cuda_tests: bool = os.environ.get("SKIP_CUDA_DOCTEST", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a55797e0688ac00 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:3224

    if "TRANSFORMERS_TEST_DEVICE_SPEC" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51abf480d2064d3b — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:3225

        device_spec_path = os.environ["TRANSFORMERS_TEST_DEVICE_SPEC"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c886c7cb5823bfa — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:3248

        if "TRANSFORMERS_TEST_DEVICE" in os.environ and torch_device != device_name:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f112168fa024256 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:3449

    force_fullgraph = os.environ.get("TORCH_COMPILE_FORCE_FULLGRAPH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ebd96a2ed277fa4d — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:3472

    full_test_name = os.environ.get("PYTEST_CURRENT_TEST", "").split(" ")[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5e47be96cbf144c — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:3552

    with open(actual_test_file) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa6dbc189603f3c3 — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:3558

    with open(caller_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db3f802f11dd51e1 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:3646

    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b60c81eef89a37de — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:3648

    with open(p, "a") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7a2ca52c9bcd8cf — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:3765

        if not os.environ.get("PYTEST_CURRENT_TEST", ""):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdb2a76c63048d56 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:3802

            if os.getenv("CI") == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6982ac2c0152f05 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:3878

    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c1b474fad7fe5b4 — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:4232

    with open(file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d91c864b34c1442 — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:4237

    with open(file, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62c3a89d653b8277 — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:4473

            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e72b0bbe48868f08 — Filesystem access.

pkgs/python/[email protected]/src/transformers/testing_utils.py:4482

            with open(new_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a1487ad07a730e4 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_python.py:1397

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5481aa5179e53b8 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_python.py:1406

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65485a9a319ecae0 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1661

                    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #637e530e59529920 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1780

            with open(tokenizer_config_file, encoding="utf-8") as tokenizer_config_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5114b4dc2176fc85 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1799

            with open(chat_template_file, encoding="utf-8") as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #771a1b67a0df053d — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1806

            with open(template_file) as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #146aa28def99a297 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1875

                with open(special_tokens_map_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d14a958a73272ed — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1905

                with open(added_tokens_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9eec530e06d25fb9 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1918

                with open(tokenizer_file, encoding="utf-8") as tokenizer_file_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2541322cfd9f1bd8 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:2123

        with open(tokenizer_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1324f5f3b58d8224 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:2176

            with open(added_tokens_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f04d2cde8b8c214a — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3314

            with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c221bdea7c7a218 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3325

                    with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56be2ad96eb63265 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3335

                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13ab9f1395687498 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3608

            with open(resolved_vocab_file, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #367cbe6ddd9e9a91 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3634

                with open(resolved_vocab_txt, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b15be61cc63470d — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3660

            with open(resolved_merges_file, "r", encoding="utf-8") as mf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ff0c3024d754fd1 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_sentencepiece.py:260

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #433ad3921313161e — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_tokenizers.py:121

            with open(fast_tokenizer_file, encoding="utf-8") as tokenizer_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54f3135754bfd0b7 — Filesystem access.

pkgs/python/[email protected]/src/transformers/tokenization_utils_tokenizers.py:1335

                with open(_config_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba5537c54b9b66dd — Environment-variable access.

pkgs/python/[email protected]/src/transformers/trainer.py:2465

                model, device_ids=[int(os.getenv("SMDATAPARALLEL_LOCAL_RANK"))]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7b57b52ecb14d97 — Filesystem access.

pkgs/python/[email protected]/src/transformers/trainer.py:4021

        with open(model_card_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98c92b2aa6dc56b2 — Filesystem access.

pkgs/python/[email protected]/src/transformers/trainer.py:4126

                with open(index_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #382c4e271b34d106 — Filesystem access.

pkgs/python/[email protected]/src/transformers/trainer_callback.py:146

        with open(json_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0c3a6e3d61e06dc — Filesystem access.

pkgs/python/[email protected]/src/transformers/trainer_callback.py:152

        with open(json_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3344788f31d7b66 — Filesystem access.

pkgs/python/[email protected]/src/transformers/trainer_jit_checkpoint.py:60

            with open(sentinel_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d155a60d465af76 — Filesystem access.

pkgs/python/[email protected]/src/transformers/trainer_pt_utils.py:943

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f34490eedbda09eb — Filesystem access.

pkgs/python/[email protected]/src/transformers/trainer_pt_utils.py:949

            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02380574ccf1a38a — Filesystem access.

pkgs/python/[email protected]/src/transformers/trainer_pt_utils.py:955

        with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #393acc1fac69bf99 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/trainer_utils.py:166

        os.environ["CUDA_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e94c6ac51d2c419e — Environment-variable access.

pkgs/python/[email protected]/src/transformers/trainer_utils.py:167

        os.environ["CUBLAS_WORKSPACE_CONFIG"] = ":16:8"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f112e95798d5c573 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/trainer_utils.py:169

        os.environ["ASCEND_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60bd2cfb960e94a7 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/trainer_utils.py:170

        os.environ["HCCL_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8db1ca4ee2a53345 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/trainer_utils.py:172

        os.environ["FLASH_ATTENTION_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df0f2fc33e07f009 — Filesystem access.

pkgs/python/[email protected]/src/transformers/trainer_utils.py:1094

    with open(load_index, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efe9a098622fcf10 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/training_args.py:86

    if os.environ.get("TORCHELASTIC_RUN_ID"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6fabb92ae6648b78 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/training_args.py:1556

        self.mixed_precision = os.environ.get("ACCELERATE_MIXED_PRECISION", "no")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06f57c4758b34070 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/training_args.py:1576

                os.environ["ACCELERATE_DYNAMO_BACKEND"] = self.torch_compile_backend

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bed05af2fc8c74fe — Environment-variable access.

pkgs/python/[email protected]/src/transformers/training_args.py:1578

                    os.environ["ACCELERATE_DYNAMO_MODE"] = self.torch_compile_mode

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d80dd91509e2c71 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/training_args.py:1650

        elif strtobool(os.environ.get("ACCELERATE_USE_DEEPSPEED", "false")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59b9ee522bcaa1be — Environment-variable access.

pkgs/python/[email protected]/src/transformers/training_args.py:1810

        if self.use_cpu or strtobool(os.environ.get("ACCELERATE_USE_CPU", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f9169c4d113804c — Environment-variable access.

pkgs/python/[email protected]/src/transformers/training_args.py:1834

                os.environ["ACCELERATE_USE_DEEPSPEED"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e969b0bd5dcda381 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/training_args.py:1837

                del os.environ["ACCELERATE_USE_DEEPSPEED"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #413b8f567b185b76 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/training_args.py:1880

                    "cuda:0" if torch.cuda.is_available() else os.environ.get("ACCELERATE_TORCH_DEVICE", "cpu")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b773ab7850fb51e0 — Filesystem access.

pkgs/python/[email protected]/src/transformers/training_args.py:2699

            with open(self.fsdp_config, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e4c9e13c55d92ec — Environment-variable access.

pkgs/python/[email protected]/src/transformers/training_args.py:2766

        os.environ["FSDP_CPU_RAM_EFFICIENT_LOADING"] = cpu_ram_efficient_loading

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #c64d822681a1610c — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/utils/attention_visualizer.py:183

            img = Image.open(io.BytesIO(httpx.get(img, follow_redirects=True).content))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #62e64ed6d6a94dfd — Filesystem access.

pkgs/python/[email protected]/src/transformers/utils/generic.py:379

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c9e376f0c3024b4 — Filesystem access.

pkgs/python/[email protected]/src/transformers/utils/generic.py:862

        with open(pretrained_model_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ccc24d48140cc76 — Filesystem access.

pkgs/python/[email protected]/src/transformers/utils/generic.py:868

        with open(os.path.join(pretrained_model_path, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b54e0131325e01c — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/hub.py:107

HF_MODULES_CACHE = os.getenv("HF_MODULES_CACHE", os.path.join(constants.HF_HOME, "modules"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #3c9be989fed570ce — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/utils/hub.py:178

        instance_data = httpx.get(os.environ["ECS_CONTAINER_METADATA_URI"]).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #35ca9a9bc9ae1b50 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/hub.py:178

        instance_data = httpx.get(os.environ["ECS_CONTAINER_METADATA_URI"]).json()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6deed7ef2cbadb73 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/hub.py:185

    sagemaker_params = json.loads(os.getenv("SM_FRAMEWORK_PARAMS", "{}"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24479395ab2488f0 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/hub.py:187

    training_job_arn = os.getenv("TRAINING_JOB_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0083159b6a4d1cb9 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/hub.py:191

        "sm_framework": os.getenv("SM_FRAMEWORK_MODULE", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #506e574db84502d4 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/hub.py:192

        "sm_region": os.getenv("AWS_REGION", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df6a9b37402aaf03 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/hub.py:193

        "sm_number_gpu": os.getenv("SM_NUM_GPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b82b5d4f62a72d6f — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/hub.py:194

        "sm_number_cpu": os.getenv("SM_NUM_CPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6a4e7324a1cbfb4 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/hub.py:215

    if os.environ.get("TRANSFORMERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c7a63dea2d75c7b — Filesystem access.

pkgs/python/[email protected]/src/transformers/utils/hub.py:879

    with open(index_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea098e7b906a6897 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:118

    return os.getenv(env_variable, "false").lower() in ("true", "1", "y", "yes", "on")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63e11b632f77a606 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:123

    return os.getenv(env_variable, "true").lower() in ("false", "0", "n", "no", "off")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44d27ce5fd52079a — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:130

USE_TORCH_XLA = os.environ.get("USE_TORCH_XLA", "1").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4904bfc0104973d1 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:356

    pytorch_cndev_based_mlu_check_previous_value = os.environ.get("PYTORCH_CNDEV_BASED_MLU_CHECK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ccdbd7c0e3cd8345 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:358

        os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = str(1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67dd96f36bfacb3d — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:362

            os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = pytorch_cndev_based_mlu_check_previous_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99a35d533557873f — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:364

            os.environ.pop("PYTORCH_CNDEV_BASED_MLU_CHECK", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e966c2da2284da91 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:434

    if os.environ.get("PT_HPU_LAZY_MODE", "1") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be30825b818c3952 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1640

    if os.getenv("TRANSFORMERS_DISABLE_TORCH_CHECK", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6d1113956b4d45c — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1689

        if "DATABRICKS_RUNTIME_VERSION" in os.environ and os.environ["DATABRICKS_RUNTIME_VERSION"] < "11.0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dac1812cf1d9b72c — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1701

    sagemaker_params = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4aa9bb490115459f — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1715

    smp_options = os.getenv("SM_HP_MP_PARAMETERS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c3a2e4de9c140c3 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1725

    mpi_options = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6964a226c736aaba — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1738

    return "SAGEMAKER_JOB_NAME" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c83bd27e233680d9 — Filesystem access.

pkgs/python/[email protected]/src/transformers/utils/import_utils.py:2850

        with open(os.path.join(module_path, module_name), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa5a08eec139d490 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/logging.py:64

    env_level_str = os.getenv("TRANSFORMERS_VERBOSITY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dbf42e1483bbadcc — Filesystem access.

pkgs/python/[email protected]/src/transformers/utils/logging.py:94

            sys.stderr = open(os.devnull, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15eafba8810eead3 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/logging.py:108

        if os.getenv("TRANSFORMERS_VERBOSITY", None) == "detail":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18840ed6aa3726e6 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/logging.py:114

        ci = os.getenv("CI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #818c0f955e9e7622 — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/logging.py:322

    no_advisory_warnings = os.getenv("TRANSFORMERS_NO_ADVISORY_WARNINGS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ad1f2f93ba7be74 — Filesystem access.

pkgs/python/[email protected]/src/transformers/utils/network_logging.py:172

        Path(dump_path).write_text(json.dumps(records), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a05a94cbc26e1a7 — Filesystem access.

pkgs/python/[email protected]/src/transformers/utils/network_logging.py:182

                records = json.loads(Path(record_file).read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a650f0762b5324d — Filesystem access.

pkgs/python/[email protected]/src/transformers/utils/network_logging.py:327

        report_path.write_text(json.dumps(self.build_report(), indent=2, sort_keys=True), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14ef420e2329aade — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/network_logging.py:338

    enabled_raw = os.environ.get("NETWORK_DEBUG_REPORT", "").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3476ac69e40d03db — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/network_logging.py:344

    output_path = os.environ.get("NETWORK_DEBUG_REPORT_PATH", "").strip() or _DEFAULT_REPORT_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f9063802e56cbaf — Environment-variable access.

pkgs/python/[email protected]/src/transformers/utils/notebook.py:128

        if "VSCODE_PID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c91953da1d64e024 — Filesystem access.

pkgs/python/[email protected]/src/transformers/utils/pytest_helpers.py:39

    data = json.loads(p.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46b6bfeff72d8a0d — Filesystem access.

pkgs/python/[email protected]/src/transformers/utils/quantization_config.py:144

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1409fb8b23e86d19 — Filesystem access.

pkgs/python/[email protected]/src/transformers/video_processing_utils.py:769

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0390f2e4a4a1513f — Filesystem access.

pkgs/python/[email protected]/src/transformers/video_processing_utils.py:789

        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #79913acb076d3f54 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/transformers/video_utils.py:701

        file_obj = BytesIO(httpx.get(video, follow_redirects=True).content)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

aiohttp

python dependency

expand_more 30 low-confidence finding(s)

low env_fs dependency Excluded from app score #a1077ff145df7ba4 — Filesystem access.

pkgs/python/[email protected]/aiohttp/cookiejar.py:207

        with open(
            file_path,
            mode="w",
            encoding="utf-8",
            opener=lambda path, flags: os.open(path, flags, 0o600),
        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a940a160c857f30 — Environment-variable access.

pkgs/python/[email protected]/aiohttp/helpers.py:73

NO_EXTENSIONS = bool(os.environ.get("AIOHTTP_NO_EXTENSIONS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd8e2cf829099a49 — Environment-variable access.

pkgs/python/[email protected]/aiohttp/helpers.py:82

    not sys.flags.ignore_environment and bool(os.environ.get("PYTHONASYNCIODEBUG"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #252dbc88ef073545 — Environment-variable access.

pkgs/python/[email protected]/aiohttp/helpers.py:228

    netrc_env = os.environ.get("NETRC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #dc8b890ef921cfe9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/aiohttp/test_utils.py:347

        resp = await self._session.request(method, self.make_url(path), **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #29976b24ce39a745 — Environment-variable access.

pkgs/python/[email protected]/aiohttp/web_fileresponse.py:50

NOSENDFILE: Final[bool] = bool(os.environ.get("AIOHTTP_NOSENDFILE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #dd1b59fc83a19610 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/docs/code/client_middleware_cookbook.py:65

                async with req.session.post(url, data=self.refresh_token) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #c9d5a4efac8a780a — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/docs/code/client_middleware_cookbook.py:87

                    async with req.session.post(url, data=self.refresh_token) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #c83e0cbbddd87d5e — Environment-variable access.

pkgs/python/[email protected]/docs/conf.py:21

    os.getenv("READTHEDOCS", "False") == "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0d604f93cf4d6202 — Environment-variable access.

pkgs/python/[email protected]/docs/conf.py:22

    and os.environ["READTHEDOCS_VERSION_TYPE"] == "tag"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e2c73a9be8aab698 — Filesystem access.

pkgs/python/[email protected]/docs/conf.py:31

with open(_version_path, encoding="latin1") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #a2dd8818f265d1c5 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/client_auth.py:9

    async with session.get("http://httpbin.org/basic-auth/andrew/password") as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #7552662c5ded1bdd — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/client_json.py:9

    async with session.get("http://httpbin.org/get") as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #2eb32ac437c11282 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/curl.py:12

        async with session.request("GET", url) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #a4170be29ef8f46f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/digest_auth_qop_auth.py:48

            async with session.get(url) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #75221a0246cede1d — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/fake_server.py:109

        async with session.get(
            "https://graph.facebook.com/v2.7/me", params={"access_token": token}
        ) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #1fe4a4491a5dab2a — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/fake_server.py:114

        async with session.get(
            "https://graph.facebook.com/v2.7/me/friends", params={"access_token": token}
        ) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #95f2905eda9b8f1a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/logging_middleware.py:147

            coro = session.get(f"http://localhost:8080/hello/User{i}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #e3e72d1fa9da0966 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/token_refresh_middleware.py:65

            async with session.post(
                self.token_endpoint,
                json={"refresh_token": self.refresh_token},
                middlewares=(),  # Disable middleware for this request
            ) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #6353bfdb81fbf4d7 — Filesystem access.

pkgs/python/[email protected]/examples/web_ws.py:20

        with open(WS_FILE, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f09b62de36e3b516 — Filesystem access.

pkgs/python/[email protected]/requirements/sync-direct-runtime-deps.py:12

data = tomllib.loads(Path("pyproject.toml").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #73cc8cc3ab71ddd0 — Filesystem access.

pkgs/python/[email protected]/requirements/sync-direct-runtime-deps.py:19

with open(Path("requirements", "runtime-deps.in"), "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37ef0d778f903ba4 — Environment-variable access.

pkgs/python/[email protected]/setup.py:13

    os.environ.get("AIOHTTP_USE_SYSTEM_DEPS", os.environ.get("USE_SYSTEM_DEPS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88376ed38a967986 — Environment-variable access.

pkgs/python/[email protected]/setup.py:15

NO_EXTENSIONS: bool = bool(os.environ.get("AIOHTTP_NO_EXTENSIONS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47233965c947b114 — Environment-variable access.

pkgs/python/[email protected]/setup.py:16

CYTHON_TRACING: bool = bool(os.environ.get("AIOHTTP_CYTHON_TRACE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #997be86afae21bde — Filesystem access.

pkgs/python/[email protected]/tools/check_sum.py:30

        hasher.update(full_src.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #40f32c9e0caefa17 — Filesystem access.

pkgs/python/[email protected]/tools/check_sum.py:37

        dst_hash = dst.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1230ead784b11075 — Filesystem access.

pkgs/python/[email protected]/tools/check_sum.py:41

        dst.write_text(src_hash)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #bf50013868cf2416 — Filesystem access.

pkgs/python/[email protected]/tools/cleanup_changes.py:30

    changes = (root / "CHANGES.rst").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #78122c42c4ceace8 — Filesystem access.

pkgs/python/[email protected]/tools/gen.py:16

    code = compile(hdrs_file.read_text(), str(hdrs_file), "exec")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

aiortc

python dependency

expand_more 12 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #e3f664cb769be515 — Filesystem access.

pkgs/python/[email protected]/examples/datachannel-filexfer/filexfer.py:106

        fp = open(args.filename, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8c4da7606fa0642e — Filesystem access.

pkgs/python/[email protected]/examples/datachannel-filexfer/filexfer.py:109

        fp = open(args.filename, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f4e180a908754116 — Filesystem access.

pkgs/python/[email protected]/examples/datachannel-vpn/tuntap.py:86

        self.fd = open("/dev/net/tun", "rb+", buffering=0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #c5bb4c643e1e4489 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/janus/janus.py:28

        async with self._session._http.post(self._url, json=message) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #44020bbcc2e83a2f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/janus/janus.py:51

        async with self._http.post(self._session_url, json=message) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #b81cbb43ccda52b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/janus/janus.py:62

        async with self._http.post(self._root_url, json=message) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #2776d3f8e6fc2074 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/janus/janus.py:77

            async with self._http.post(self._session_url, json=message) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #0c958571ad241aef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/janus/janus.py:89

            async with self._http.get(self._session_url, params=params) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #79338d3b0335137b — Filesystem access.

pkgs/python/[email protected]/examples/server/server.py:93

    content = open(os.path.join(ROOT, "index.html"), "r").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #bcde7eefea94d69c — Filesystem access.

pkgs/python/[email protected]/examples/server/server.py:98

    content = open(os.path.join(ROOT, "client.js"), "r").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1acc4ff1646435be — Filesystem access.

pkgs/python/[email protected]/examples/webcam/webcam.py:67

    content = open(os.path.join(ROOT, "index.html"), "r").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #caa825e998ce87cf — Filesystem access.

pkgs/python/[email protected]/examples/webcam/webcam.py:72

    content = open(os.path.join(ROOT, "client.js"), "r").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

anthropic

python dependency

expand_more 123 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #7f05f96a2a35c06a — Environment-variable access.

pkgs/python/[email protected]/examples/agents.py:9

    anthropic = Anthropic(api_key=os.environ.get("ANTHROPIC_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow tooling Excluded from app score unreachable #4e14859de33a8335 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents.py:15 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents.py:9 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents.py:15

    print("Created environment:", environment.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #50660252e7809f5d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents.py:22 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents.py:9 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents.py:22

    print("Created agent:", agent.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #403cd53c6edd8151 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents.py:29 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents.py:9 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents.py:29

    print("Created session:", session.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #7997a831c1c22ed3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents.py:45 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents.py:9 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents.py:45

            print(event.to_json(indent=2))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs tooling Excluded from app score unreachable #4ba0d3b7535757e2 — Environment-variable access.

pkgs/python/[email protected]/examples/agents_comprehensive.py:18

    anthropic = Anthropic(api_key=os.environ.get("ANTHROPIC_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #fc0a9a65845d464a — Environment-variable access.

pkgs/python/[email protected]/examples/agents_comprehensive.py:20

    github_token = os.environ.get("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow tooling Excluded from app score unreachable #713f522d56babd1c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:28 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:28

    print("Created environment:", environment.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #06d0a00bbbaf9852 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:32 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:32

    print("Created vault:", vault.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #715cf84845f6052c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:43 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:43

    print("Created credential:", credential.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs tooling Excluded from app score unreachable #5215f6199ab8e33e — Filesystem access.

pkgs/python/[email protected]/examples/agents_comprehensive.py:47

    with open(skill_md_path, "rb") as skill_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow tooling Excluded from app score unreachable #8570f555119b6158 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:52 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:52

    print("Created skill:", skill.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #aa1fada7ff62f00d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:75 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:75

    print("Created agent v1:", agent_v1.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #5420715718d3e767 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:86 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:86

    print("Patched agent to v2:", agent.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #c2885d384c1a7086 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:89 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:89

    print("Agent versions:", versions.data)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #0f9a5254798ca821 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:97 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:97

    print("Created session:", session.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #a90d3c8de5ef0639 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:108 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_comprehensive.py:108

            print(event.to_json(indent=2))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs tooling Excluded from app score unreachable #b1d4dc626b657def — Environment-variable access.

pkgs/python/[email protected]/examples/agents_with_files.py:10

    anthropic = Anthropic(api_key=os.environ.get("ANTHROPIC_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow tooling Excluded from app score unreachable #ca9b94811b20c2a8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_with_files.py:16 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_with_files.py:16

    print("Created environment:", environment.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #89eb9e3826b0346b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_with_files.py:32 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_with_files.py:32

    print("Created agent:", agent.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #b876e4e40668e75f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_with_files.py:38 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_with_files.py:38

    print("Uploaded file:", file.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #600b3ac7cdcf25b8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_with_files.py:52 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_with_files.py:52

    print("Created session:", session.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #2dfc0600ab9c07b3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_with_files.py:55 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_with_files.py:55

    print("Listed session resources:", resources.data)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #398b9db8bb2088c2 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_with_files.py:76 · flow /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-_aed_lpm/pkgs/python/[email protected]/examples/agents_with_files.py:76

            print(event.to_json(indent=2))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs tooling Excluded from app score unreachable #5ef63789fc831c90 — Environment-variable access.

pkgs/python/[email protected]/examples/managed-agents-observe-tool-calls.py:46

    val = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c5d0acef2e5264b9 — Environment-variable access.

pkgs/python/[email protected]/examples/managed-agents-observe-tool-calls.py:64

    workdir = os.environ.get("ANTHROPIC_WORKDIR", ".")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #41260858470b567d — Environment-variable access.

pkgs/python/[email protected]/examples/managed-agents-self-hosted-sandbox-worker.py:48

    val = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #67f3c5cc271e977d — Environment-variable access.

pkgs/python/[email protected]/examples/managed-agents-self-hosted-sandbox-worker.py:60

    workdir = os.environ.get("ANTHROPIC_WORKDIR", ".")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #50c594d657a47fc5 — Environment-variable access.

pkgs/python/[email protected]/examples/workload_identity.py:70

        identity_token_provider=lambda: os.environ["ANTHROPIC_IDENTITY_TOKEN"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #6589be00d8c20ca7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/anthropic/_base_client.py:325

        return await self._client.request(self._page_cls, self._options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #6f3e14066863fa71 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:107

    if api_key is not None and os.environ.get("ANTHROPIC_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #040f39706814a36b — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:109

    if auth_token is not None and os.environ.get("ANTHROPIC_AUTH_TOKEN"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a521b145777d1cef — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:214

            api_key = os.environ.get("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9fcc384cfabb2b86 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:215

            auth_token = os.environ.get("ANTHROPIC_AUTH_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fea363f622575dc — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:221

            webhook_key = os.environ.get("ANTHROPIC_WEBHOOK_SIGNING_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2da679fb0604bb6a — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:225

            base_url = os.environ.get("ANTHROPIC_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f033ff6b40268ab5 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:234

        custom_headers_env = os.environ.get("ANTHROPIC_CUSTOM_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f307ae50f24e727 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:634

            api_key = os.environ.get("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #466952d3d30efad9 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:635

            auth_token = os.environ.get("ANTHROPIC_AUTH_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e9abaf9a8debbf5 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:641

            webhook_key = os.environ.get("ANTHROPIC_WEBHOOK_SIGNING_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81e545e2287ec805 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:645

            base_url = os.environ.get("ANTHROPIC_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2c6367e6c3fc976 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:654

        custom_headers_env = os.environ.get("ANTHROPIC_CUSTOM_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd73f275c1abae82 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_files.py:69

            return (path.name, path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cee048a86e4049df — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_files.py:81

        return pathlib.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bcf51e90240d4e3 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_files.py:111

            return (path.name, await path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbd9a785cbca8ed6 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_files.py:123

        return await anyio.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b3ccfdd443feac5 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_legacy_response.py:464

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3da2b7d2158cf2e1 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_legacy_response.py:477

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4eb68b2d847dcf24 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_models.py:120

            extra="allow", defer_build=coerce_boolean(os.environ.get("DEFER_PYDANTIC_BUILD", "true"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6f92b15d6e1c39b — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_response.py:537

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7abc37d5e2d5c1b8 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_response.py:579

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40fd1cbebebb6ea5 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_utils/_logs.py:17

    env = os.environ.get("ANTHROPIC_LOG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b5fd14f0f367f06 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_utils/_transform.py:250

            binary = data.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #869ef71716dd7655 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_utils/_transform.py:418

            binary = await anyio.Path(data).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a6b7b0443a85276 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_utils/_utils.py:379

    contents = Path(path).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fe691095e2987f4 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/_files.py:25

        files.append((path.relative_to(relative_to).as_posix(), path.read_bytes()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd03536ae311c794 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/_files.py:42

        files.append((path.relative_to(relative_to).as_posix(), await path.read_bytes()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3dde6a5e5b2565ba — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/aws/_credentials.py:25

        value = os.environ.get(var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bbc312fcd75c5a9 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/aws/_credentials.py:90

    return os.environ.get("AWS_REGION") or os.environ.get("AWS_DEFAULT_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ca8689e5ae5b93e — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:77

    aws_region = os.environ.get("AWS_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0f6e02c5b808cc8 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:165

            api_key = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f075fdc6c78329c — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:190

            base_url = os.environ.get("ANTHROPIC_BEDROCK_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a1f5ba61442ecf0 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:345

            api_key = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6ae899c3cbdc7fe — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:370

            base_url = os.environ.get("ANTHROPIC_BEDROCK_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b7faf2f8b3892f8 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/bedrock/_mantle.py:144

        base_url = os.environ.get("ANTHROPIC_BEDROCK_MANTLE_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc326c0c2007e3a3 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:33

    federation_rule_id = os.environ.get(ENV_FEDERATION_RULE_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fd76d06c9dc3521 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:34

    organization_id = os.environ.get(ENV_ORGANIZATION_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0849650aaaf5abc1 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:35

    has_literal_token = ENV_IDENTITY_TOKEN in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8f5f8f0049ed382 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:50

            value = os.environ.get(ENV_IDENTITY_TOKEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f4453ef2dcb14d4 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:65

        service_account_id=os.environ.get(ENV_SERVICE_ACCOUNT_ID),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86dde7483ba50bae — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:69

        workspace_id=os.environ.get(ENV_WORKSPACE_ID) or None,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ede01a92b345127 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:70

        scope=os.environ.get(ENV_SCOPE),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a15da33781bf29cf — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:108

    if os.environ.get(ENV_API_KEY):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2737bc718c46b68 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:112

    auth_token = os.environ.get(ENV_AUTH_TOKEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0be7852159fa722c — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:119

    env_explicit = bool(os.environ.get(ENV_PROFILE) or os.environ.get(ENV_CONFIG_DIR))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6dec218d387ca88d — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:78

    env = os.environ.get(ENV_CONFIG_DIR)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdc92e53e7391152 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:82

        appdata = os.environ.get("APPDATA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7e70df5d74154ec — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:92

        name = (_config_dir() / "active_config").read_text(encoding="utf-8").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16199859bb8399d6 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:105

    env = os.environ.get(ENV_PROFILE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a666d10dafa0f58 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:224

    env = os.environ.get(ENV_IDENTITY_TOKEN_FILE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4de59af0982d894 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:240

    if os.environ.get(ENV_PROFILE) or os.environ.get(ENV_CONFIG_DIR):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b34956b4eb1d76d — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:244

    if os.environ.get(ENV_FEDERATION_RULE_ID) and os.environ.get(ENV_ORGANIZATION_ID):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ff0ab0547bd2c85 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:245

        if os.environ.get(ENV_IDENTITY_TOKEN_FILE) or os.environ.get(ENV_IDENTITY_TOKEN):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc84c2b95ef6858a — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:96

            v = os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b377d44f3bb29a25 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:110

            v = os.environ.get(ENV_IDENTITY_TOKEN_FILE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c26ea32223f49043 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:136

        value = os.environ.get(self._env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3dc12305253ec48 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:284

            raw = self._config_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63aaf5e869bd7028 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:374

            creds: Dict[str, Any] = _wrap_secret_fields(json.loads(path.read_text(encoding="utf-8")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #9836de2f3213c6b6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:538

            resp = self._get_http_client().post(
                f"{self._base_url}{TOKEN_ENDPOINT}",
                # Serialized inline so the raw request bytes are never bound
                # to a local here; SecretStr values unwrap at dump time.
                content=_json_dumps_secrets(body),
                headers={
                    "Content-Type": "application/json",
                    # oauth-2025-04-20 unlocks the token endpoint family. Do
                    # NOT send oidc-federation-2026-04-01 — that's a routing
                    # switch that misroutes refresh_token grants to the Go
                    # userauth handler, which only accepts jwt-bearer.
                    "anthropic-beta": OAUTH_API_BETA_HEADER,
                    "User-Agent": _user_agent(),
                },
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #e4f644f062ef8d67 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:746

            content = self._path.read_text(encoding="utf-8").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #d3ded224433f40e1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_workload.py:259

            resp = self._http_client.post(
                url,
                # Serialized inline so the raw request bytes are never bound
                # to a local here; SecretStr values unwrap at dump time.
                content=_json_dumps_secrets(body),
                headers={
                    "anthropic-beta": _JWT_BEARER_BETA_HEADER,
                    "Content-Type": "application/json",
                    "User-Agent": _user_agent(),
                },
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #23059d06b5bbeb2b — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/environments/_worker.py:160

    resolved = value or os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c38899f8021d94e — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/foundry.py:157

        api_key = api_key if api_key is not None else os.environ.get("ANTHROPIC_FOUNDRY_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac25b29555157f2a — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/foundry.py:158

        resource = resource if resource is not None else os.environ.get("ANTHROPIC_FOUNDRY_RESOURCE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee096fa78fb5d404 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/foundry.py:159

        base_url = base_url if base_url is not None else os.environ.get("ANTHROPIC_FOUNDRY_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #396a574a3206c3fa — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/foundry.py:382

        api_key = api_key if api_key is not None else os.environ.get("ANTHROPIC_FOUNDRY_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afdcdd840e5325c8 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/foundry.py:383

        resource = resource if resource is not None else os.environ.get("ANTHROPIC_FOUNDRY_RESOURCE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2adca68f5dda8eb — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/foundry.py:384

        base_url = base_url if base_url is not None else os.environ.get("ANTHROPIC_FOUNDRY_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4643432d6f22d8bf — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:247

            location = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_LOCATION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f6384e1fc9dc9da — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:252

            project = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c16ab2b535e5b40a — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:254

            project = os.environ.get("GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #553fef67e670b0c8 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:260

            base_url = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #194c3997c7859f1e — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:266

            workspace_id = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bf87b38eea4907f — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:493

            location = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_LOCATION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8db930b1871a2854 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:498

            project = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #78af36038a96116a — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:500

            project = os.environ.get("GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40b298b1f69e0190 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:506

            base_url = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60a750d7639c6cbf — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:510

            workspace_id = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #c11a5c03946a56fe — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/_beta_builtin_memory_tool.py:356

        return full_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #a3bb6a890d1d485c — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/_beta_builtin_memory_tool.py:653

        return await full_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #bd71b19c5954ce7d — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/_skills.py:138

                with zf.open(info) as src, open(target, "wb") as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #ac93b6c3109894b4 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/_skills.py:164

            with extracted as src, open(target, "wb") as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #66cd448186f0f169 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:156

    return {k: v for k, v in os.environ.items() if not k.startswith("ANTHROPIC_")}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #1bc368de29ccf23c — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:558

    data = base64.standard_b64encode(target.read_bytes()).decode("ascii")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #ba38d2a6d077f5a6 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:597

            text = target.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #b2ea83ec53a9dcea — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:629

            target.write_text(content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #902be66d48ee8d3b — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:659

            text = target.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #a4c23a3dd7aa91be — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:673

            target.write_text(updated, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf034efbd6a28288 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:46

        project_id = os.environ.get("ANTHROPIC_VERTEX_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f58ff0172fa1c3fc — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:114

            region = os.environ.get("CLOUD_ML_REGION", NOT_GIVEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #971a446f6213c348 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:121

            base_url = os.environ.get("ANTHROPIC_VERTEX_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #871bbf8422268008 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:278

            region = os.environ.get("CLOUD_ML_REGION", NOT_GIVEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #538b9ccfbdd88faa — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:285

            base_url = os.environ.get("ANTHROPIC_VERTEX_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

autogen-agentchat

python dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #572388b51b3ed26a — Environment-variable access.

pkgs/python/[email protected]/src/autogen_agentchat/ui/_console.py:23

    return os.getenv("TERM_PROGRAM") == "iTerm.app"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

boto3

python dependency

expand_more 4 low-confidence finding(s)

low env_fs tooling reachable #dc8300f7590216cc — Filesystem access.

pkgs/python/[email protected]/boto3/docs/__init__.py:50

        with open(service_doc_path, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #39a6744950321c51 — Filesystem access.

pkgs/python/[email protected]/boto3/docs/service.py:200

            with open(examples_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b8199c9376c6508 — Filesystem access.

pkgs/python/[email protected]/setup.py:24

    init = open(os.path.join(ROOT, 'boto3', '__init__.py')).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99c1751233722dd8 — Filesystem access.

pkgs/python/[email protected]/setup.py:32

    long_description=open('README.rst').read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

defusedxml

python dependency

expand_more 8 low-confidence finding(s)

low env_fs dependency Excluded from app score #75729e214161fa1e — Filesystem access.

pkgs/python/[email protected]/defusedxml/expatbuilder.py:84

        fp = open(file, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53cb5f6c5693f6d0 — Filesystem access.

pkgs/python/[email protected]/other/python_genshi.py:6

with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de853a790a24f49d — Filesystem access.

pkgs/python/[email protected]/setup.py:27

with open("README.txt") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9de9e41f06151c6 — Filesystem access.

pkgs/python/[email protected]/setup.py:29

with open("CHANGES.txt") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85df71045a750d73 — Environment-variable access.

pkgs/python/[email protected]/tests.py:59

os.environ["http_proxy"] = "http://127.0.9.1:9"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b214cf826a015051 — Environment-variable access.

pkgs/python/[email protected]/tests.py:60

os.environ["https_proxy"] = os.environ["http_proxy"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a316c21e50b237c — Environment-variable access.

pkgs/python/[email protected]/tests.py:61

os.environ["ftp_proxy"] = os.environ["http_proxy"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #950a7b12531ba78a — Filesystem access.

pkgs/python/[email protected]/tests.py:83

        with io.open(xmlfile, mode) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

google-genai

python dependency

expand_more 87 low-confidence finding(s)

low env_fs dependency Excluded from app score #65449c41477e8d2c — Environment-variable access.

pkgs/python/[email protected]/google/genai/_api_client.py:110

  env_google_api_key = os.environ.get('GOOGLE_API_KEY', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1003a399bd8ae2a1 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_api_client.py:111

  env_gemini_api_key = os.environ.get('GEMINI_API_KEY', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6013639bc3baefd — Environment-variable access.

pkgs/python/[email protected]/google/genai/_api_client.py:616

      env_enterprise_str = os.environ.get('GOOGLE_GENAI_USE_ENTERPRISE', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #575158cd90accf7d — Environment-variable access.

pkgs/python/[email protected]/google/genai/_api_client.py:617

      env_vertexai_str = os.environ.get('GOOGLE_GENAI_USE_VERTEXAI', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91d2a842aaa7831a — Environment-variable access.

pkgs/python/[email protected]/google/genai/_api_client.py:677

    env_project = os.environ.get('GOOGLE_CLOUD_PROJECT', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0038d42cbc9360cb — Environment-variable access.

pkgs/python/[email protected]/google/genai/_api_client.py:678

    env_location = os.environ.get('GOOGLE_CLOUD_LOCATION', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #910a81b5171b2a9f — Environment-variable access.

pkgs/python/[email protected]/google/genai/_api_client.py:1064

            cafile=os.environ.get('SSL_CERT_FILE', certifi.where()),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46b3781964ca3b3d — Environment-variable access.

pkgs/python/[email protected]/google/genai/_api_client.py:1065

            capath=os.environ.get('SSL_CERT_DIR'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #229b620a381331e0 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_api_client.py:1131

            cafile=os.environ.get('SSL_CERT_FILE', certifi.where()),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dcdf81cf2e16a2c8 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_api_client.py:1132

            capath=os.environ.get('SSL_CERT_DIR'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d8bdd1e77cae3cb — Environment-variable access.

pkgs/python/[email protected]/google/genai/_api_client.py:1202

            cafile=os.environ.get('SSL_CERT_FILE', certifi.where()),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0576b43c0f37a947 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_api_client.py:1203

            capath=os.environ.get('SSL_CERT_DIR'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #635e252873599c95 — Filesystem access.

pkgs/python/[email protected]/google/genai/_api_client.py:1814

      with open(file_path, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63bd2e311ed80ea5 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_base_url.py:48

    return _default_base_vertex_url or os.getenv('GOOGLE_VERTEX_BASE_URL')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21f87f544185f33f — Environment-variable access.

pkgs/python/[email protected]/google/genai/_base_url.py:50

    return _default_base_gemini_url or os.getenv('GOOGLE_GEMINI_BASE_URL')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7dc6916475f94e00 — Filesystem access.

pkgs/python/[email protected]/google/genai/_gaos/types/base64fileinput.py:39

            with open(value, "rb") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51d941ceb37463a1 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_gaos/utils/logger.py:40

    if os.getenv("GOOGLE_GENAI_DEBUG"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b490de9280ae7848 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_gaos/utils/security.py:95

    if os.getenv("GOOGLE_GENAI_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d490acbd2772fb78 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_gaos/utils/security.py:96

        security_dict["api_key"] = os.getenv("GOOGLE_GENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35a29bf77ac26725 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_gaos/utils/security.py:98

    if os.getenv("GOOGLE_GENAI_ACCESS_TOKEN"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25c86cb8a968f712 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_gaos/utils/security.py:99

        security_dict["access_token"] = os.getenv("GOOGLE_GENAI_ACCESS_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95b1a04432906d71 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_gaos/utils/security.py:101

    if os.getenv("GOOGLE_GENAI_DEFAULT_HEADERS"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #419f4e73312b8c38 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_gaos/utils/security.py:102

        security_dict["default_headers"] = os.getenv("GOOGLE_GENAI_DEFAULT_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #719137744e605f1e — Environment-variable access.

pkgs/python/[email protected]/google/genai/_gaos/utils/values.py:79

    env_value = os.getenv(env_key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #7748dd11d7233f96 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/_local_tokenizer_loader.py:82

  resp = requests.get(file_url_path)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #db13271beb9c4b26 — Filesystem access.

pkgs/python/[email protected]/google/genai/_local_tokenizer_loader.py:111

  with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #796f2797526dcbc3 — Filesystem access.

pkgs/python/[email protected]/google/genai/_local_tokenizer_loader.py:128

    with open(tmp_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd2ca9a7a4dfe370 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_replay_api_client.py:223

      os.environ.get('PYTEST_CURRENT_TEST'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e165edd74f719f3a — Environment-variable access.

pkgs/python/[email protected]/google/genai/_replay_api_client.py:315

      self.replays_directory = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #499d8066d71e6347 — Environment-variable access.

pkgs/python/[email protected]/google/genai/_replay_api_client.py:315

      self.replays_directory = os.environ.get(
          'GOOGLE_GENAI_REPLAYS_DIRECTORY', None
      )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e39fa416f2ec86d0 — Filesystem access.

pkgs/python/[email protected]/google/genai/_replay_api_client.py:359

      with open(replay_file_path, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61e799b09bd8251e — Filesystem access.

pkgs/python/[email protected]/google/genai/_replay_api_client.py:386

    with open(replay_file_path, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #67625a1a917a7ac1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/batches.py:1883

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d2de8930d26e6a93 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/batches.py:1962

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #836d4cb64b286ec1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/batches.py:2057

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ae9e69a946fab61e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/batches.py:2153

    self._api_client.request('post', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4e6c104c4c77e93e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/batches.py:2194

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7f7162e854fbbd63 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/batches.py:2292

    response = self._api_client.request(
        'delete', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #86053378decf84b3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/caches.py:1241

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3590fd28f1aec7f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/caches.py:1323

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ec47e94f93e2248f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/caches.py:1405

    response = self._api_client.request(
        'delete', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #81f0cd58740803eb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/caches.py:1500

    response = self._api_client.request(
        'patch', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a6650e060b3c30a0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/caches.py:1567

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #97dabc689c407fef — Environment-variable access.

pkgs/python/[email protected]/google/genai/client.py:215

      default_factory=lambda: os.getenv('GOOGLE_GENAI_CLIENT_MODE', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a2f6475ce059e53 — Environment-variable access.

pkgs/python/[email protected]/google/genai/client.py:219

      default_factory=lambda: os.getenv('GOOGLE_GENAI_REPLAYS_DIRECTORY', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e698045165546a4 — Environment-variable access.

pkgs/python/[email protected]/google/genai/client.py:223

      default_factory=lambda: os.getenv('GOOGLE_GENAI_REPLAY_ID', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #7652b084761d7348 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/documents.py:180

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6ad93da35a937eb8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/documents.py:258

    self._api_client.request('delete', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f5dc8a913ca71ac6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/documents.py:301

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9ab0ff37e51c6b12 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/file_search_stores.py:380

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c6cd928a10ed886c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/file_search_stores.py:461

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #47958087a82e41e3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/file_search_stores.py:540

    self._api_client.request('delete', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6d254eba9bf18cd7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/file_search_stores.py:579

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f6ce29683531f96d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/file_search_stores.py:654

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a35e5346a73165d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/file_search_stores.py:758

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e2b43f58c57c066a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/files.py:221

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fdc63a0ab4398c50 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/files.py:293

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d7fd28ec83867709 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/files.py:386

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #80079dbf5974aec1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/files.py:466

    response = self._api_client.request(
        'delete', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a1c60b7be48b93f3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/files.py:540

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ae2abf39dcad83c5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:5067

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #648cf0e8b10b92cd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:5296

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0ed4fe6bf4cc7fc9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:5387

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #abf5213d82251679 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:5476

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #70eb5efc794b414e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:5560

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1bf349036f7db3ce — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:5672

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #72cc3f5027c2ddda — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:5775

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d6377f7a2edc1b17 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:5852

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1f466779758f3e7d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:5932

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #86bd920f03a680b8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:6017

    response = self._api_client.request(
        'patch', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8d7ce87526963d24 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:6098

    response = self._api_client.request(
        'delete', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4b0d2857a9473856 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:6208

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fab928d8d17c8d40 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:6316

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0b713b0304f2cce4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/models.py:6408

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #22215f13d1572773 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/operations.py:138

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c0f681b325b74bd2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/operations.py:189

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cd7d2dc35a9eef9f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/operations.py:238

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e33964ec3d8bb31f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/tokens.py:257

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b201dac3debbd2f1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/tunings.py:2511

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c831313688db4d27 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/tunings.py:2588

    response = self._api_client.request('get', path, request_dict, http_options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #789f4013bdc682d9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/tunings.py:2674

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ef9a85d4021048b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/tunings.py:2772

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #58532a4a7d6b26ce — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/tunings.py:2865

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b6b6bc8d047b75e9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/google/genai/tunings.py:2982

    response = self._api_client.request(
        'post', path, request_dict, http_options
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #f936826f336c6264 — Filesystem access.

pkgs/python/[email protected]/google/genai/types.py:9295

    image_bytes = pathlib.Path(location).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11366dd36e11d922 — Filesystem access.

pkgs/python/[email protected]/google/genai/types.py:11689

    video_bytes = pathlib.Path(location).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0353624cbfe82004 — Filesystem access.

pkgs/python/[email protected]/google/genai/types.py:22651

    with open(file_path, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

httpx

python dependency

expand_more 4 low-confidence finding(s)

low env_fs dependency Excluded from app score #177769fc8fdd1a8a — Environment-variable access.

pkgs/python/[email protected]/httpx/_config.py:34

        if trust_env and os.environ.get("SSL_CERT_FILE"):  # pragma: nocover

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #829cbf5c4c87e8ca — Environment-variable access.

pkgs/python/[email protected]/httpx/_config.py:35

            ctx = ssl.create_default_context(cafile=os.environ["SSL_CERT_FILE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e463e4ff1a9c327 — Environment-variable access.

pkgs/python/[email protected]/httpx/_config.py:36

        elif trust_env and os.environ.get("SSL_CERT_DIR"):  # pragma: nocover

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f9c045f18063804 — Environment-variable access.

pkgs/python/[email protected]/httpx/_config.py:37

            ctx = ssl.create_default_context(capath=os.environ["SSL_CERT_DIR"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

jinja2

python dependency

expand_more 7 low-confidence finding(s)

low env_fs dependency Excluded from app score #573a2c1f094150fd — Filesystem access.

pkgs/python/[email protected]/src/jinja2/bccache.py:270

            f = open(filename, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #d061e6b4fd6553c6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/jinja2/bccache.py:390

            code = self.client.get(self.prefix + bucket.key)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #ba067ba57b4abae5 — Filesystem access.

pkgs/python/[email protected]/src/jinja2/environment.py:860

                with open(os.path.join(target, filename), "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #beb88274a610f627 — Filesystem access.

pkgs/python/[email protected]/src/jinja2/environment.py:1611

            real_fp: t.IO[bytes] = open(fp, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64ee37ce8646fb2f — Filesystem access.

pkgs/python/[email protected]/src/jinja2/loaders.py:214

        with open(filename, encoding=self.encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30235d8946bf3f3a — Filesystem access.

pkgs/python/[email protected]/src/jinja2/loaders.py:382

            with open(p, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83eeca2a70303454 — Filesystem access.

pkgs/python/[email protected]/src/jinja2/utils.py:171

    return open(filename, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

mcp

python dependency

expand_more 39 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #dda2bf66da1a8e7a — Environment-variable access.

pkgs/python/[email protected]/.github/actions/conformance/client.py:72

    context_json = os.environ.get("MCP_CONFORMANCE_CONTEXT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #44f30c3005335ec4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/.github/actions/conformance/client.py:118

            response = await client.get(
                authorization_url,
                follow_redirects=False,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #43f560fcd1009dcf — Environment-variable access.

pkgs/python/[email protected]/.github/actions/conformance/client.py:281

    context_json = os.environ.get("MCP_CONFORMANCE_CONTEXT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #91122e3f0e3ad570 — Environment-variable access.

pkgs/python/[email protected]/.github/actions/conformance/client.py:349

    scenario = os.environ.get("MCP_CONFORMANCE_SCENARIO")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7811794c7cb97181 — Environment-variable access.

pkgs/python/[email protected]/examples/clients/conformance-auth-client/mcp_conformance_auth_client/__init__.py:50

    context_json = os.environ.get("MCP_CONFORMANCE_CONTEXT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #59bff0acb84ad1db — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/clients/conformance-auth-client/mcp_conformance_auth_client/__init__.py:113

            response = await client.get(
                authorization_url,
                follow_redirects=False,  # Don't follow redirects automatically
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #1d0f3ecad2fbabe4 — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:343

    server_url = os.getenv("MCP_SERVER_PORT", 8000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1272592208ff2f6e — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:344

    transport_type = os.getenv("MCP_TRANSPORT_TYPE", "streamable-http")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b839d72cc045ceaf — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:345

    client_metadata_url = os.getenv("MCP_CLIENT_METADATA_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2903c5e276018c0b — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-chatbot/mcp_simple_chatbot/main.py:24

        self.api_key = os.getenv("LLM_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b4864c1fbb0285ee — Filesystem access.

pkgs/python/[email protected]/examples/clients/simple-chatbot/mcp_simple_chatbot/main.py:45

        with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8f285b14e8fea2d9 — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-chatbot/mcp_simple_chatbot/main.py:83

            env={**os.environ, **self.config["env"]} if self.config.get("env") else None,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #1e232fb5d5d94686 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/clients/simple-chatbot/mcp_simple_chatbot/main.py:251

                response = client.post(url, headers=headers, json=payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #81888283d859cd0c — Filesystem access.

pkgs/python/[email protected]/examples/fastmcp/icons_demo.py:14

icon_data = base64.standard_b64encode(icon_path.read_bytes()).decode()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #757d9ebdaf54f912 — Environment-variable access.

pkgs/python/[email protected]/examples/fastmcp/memory.py:52

PROFILE_DIR = (Path.home() / ".fastmcp" / os.environ.get("USER", "anon") / "memory").resolve()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #11717f072d3108ce — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/fastmcp/text_me.py:49

        response = client.post(
            "https://api.surgemsg.com/messages",
            headers={
                "Authorization": f"Bearer {surge_settings.api_key}",
                "Surge-Account": surge_settings.account_id,
                "Content-Type": "application/json",
            },
            json={
                "body": text_content,
                "conversation": {
                    "contact": {
                        "first_name": surge_settings.my_first_name,
                        "last_name": surge_settings.my_last_name,
                        "phone_number": surge_settings.my_phone_number,
                    }
                },
            },
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #5bc9418b85b866e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/servers/simple-auth/mcp_simple_auth/token_verifier.py:53

                response = await client.post(
                    self.introspection_endpoint,
                    data={"token": token},
                    headers={"Content-Type": "application/x-www-form-urlencoded"},
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #5e168fb61c4e0c91 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/servers/simple-tool/mcp_simple_tool/server.py:16

        response = await client.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #ced67d71a7a9843c — Environment-variable access.

pkgs/python/[email protected]/examples/snippets/clients/completion_client.py:17

    env={"UV_INDEX": os.environ.get("UV_INDEX", "")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0ecd23aa235b07c3 — Environment-variable access.

pkgs/python/[email protected]/examples/snippets/clients/display_utilities.py:17

    env={"UV_INDEX": os.environ.get("UV_INDEX", "")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d26d9ee44e0061a6 — Environment-variable access.

pkgs/python/[email protected]/examples/snippets/clients/stdio_client.py:19

    env={"UV_INDEX": os.environ.get("UV_INDEX", "")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b2c88934b4623f5a — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/binary_resources.py:9

    with open("logo.png", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b3b22b87cc0ec695 — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/embedded_resource_results.py:10

    with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e60d7bb301dbdd7c — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/embedded_resource_results_binary.py:12

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #95dbdd9a5e8ff134 — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/prompt_embedded_resources.py:11

    file_content = open(filename).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b270e0d9bd138060 — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/tool_errors.py:27

    with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #706d2781636d8768 — Filesystem access.

pkgs/python/[email protected]/scripts/update_doc_snippets.py:53

        code = file.read_text().rstrip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e05f2ab334d6ade6 — Filesystem access.

pkgs/python/[email protected]/scripts/update_doc_snippets.py:109

    content = doc_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #be918a37d6c81b12 — Filesystem access.

pkgs/python/[email protected]/scripts/update_doc_snippets.py:134

            doc_path.write_text(updated_content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9883d2b82d1337e5 — Environment-variable access.

pkgs/python/[email protected]/src/mcp/cli/claude.py:24

        path = Path(os.environ.get("XDG_CONFIG_HOME", Path.home() / ".config"), "Claude")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35caf4f2f78275e5 — Filesystem access.

pkgs/python/[email protected]/src/mcp/cli/claude.py:77

            config_file.write_text("{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd6ea26da6cefc00 — Filesystem access.

pkgs/python/[email protected]/src/mcp/cli/claude.py:88

        config = json.loads(config_file.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #978b0aa07e119064 — Filesystem access.

pkgs/python/[email protected]/src/mcp/cli/claude.py:135

        config_file.write_text(json.dumps(config, indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bea33e9768ee9731 — Environment-variable access.

pkgs/python/[email protected]/src/mcp/cli/cli.py:282

            env=dict(os.environ.items()),  # Convert to list of tuples for env update

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #7bd8ccbb50771396 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/mcp/client/sse.py:138

                                    response = await client.post(
                                        endpoint_url,
                                        json=session_message.message.model_dump(
                                            by_alias=True,
                                            mode="json",
                                            exclude_none=True,
                                        ),
                                    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #f3a3d05ab67a3032 — Environment-variable access.

pkgs/python/[email protected]/src/mcp/client/stdio/__init__.py:59

        value = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #049f4378bb90a785 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/mcp/server/fastmcp/resources/types.py:161

            response = await client.get(self.url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #bcec16ef57af85ef — Filesystem access.

pkgs/python/[email protected]/src/mcp/server/fastmcp/utilities/types.py:47

            with open(self.path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9dbbada58aa598db — Filesystem access.

pkgs/python/[email protected]/src/mcp/server/fastmcp/utilities/types.py:94

            with open(self.path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

microsoft-agents-activity

python dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #25ea7a1b9a8e9cef — Filesystem access.

pkgs/python/[email protected]/setup.py:7

    with open(version_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e9d0c64152b69e6 — Environment-variable access.

pkgs/python/[email protected]/setup.py:10

    package_version = environ.get("PackageVersion", "0.0.0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

microsoft-agents-copilotstudio-client

python dependency

expand_more 13 low-confidence finding(s)

low env_fs dependency Excluded from app score #99bb82db44d703dc — Environment-variable access.

pkgs/python/[email protected]/microsoft_agents/copilotstudio/client/connection_settings.py:88

        env_id = environment_id or environ.get("ENVIRONMENT_ID", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89b9a740a698df74 — Environment-variable access.

pkgs/python/[email protected]/microsoft_agents/copilotstudio/client/connection_settings.py:89

        agent_id = agent_identifier or environ.get("AGENT_IDENTIFIER", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa6ad406de68e4a3 — Environment-variable access.

pkgs/python/[email protected]/microsoft_agents/copilotstudio/client/connection_settings.py:94

            cloud_str = environ.get("CLOUD", "PROD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81611577189152c1 — Environment-variable access.

pkgs/python/[email protected]/microsoft_agents/copilotstudio/client/connection_settings.py:103

            agent_type_str = environ.get("COPILOT_AGENT_TYPE", "PUBLISHED")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1639ff4d648b8ba2 — Environment-variable access.

pkgs/python/[email protected]/microsoft_agents/copilotstudio/client/connection_settings.py:110

        custom_cloud = custom_power_platform_cloud or environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #516eef4dd2004d80 — Environment-variable access.

pkgs/python/[email protected]/microsoft_agents/copilotstudio/client/connection_settings.py:110

        custom_cloud = custom_power_platform_cloud or environ.get(
            "CUSTOM_POWER_PLATFORM_CLOUD", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68b82e10f5357e6f — Environment-variable access.

pkgs/python/[email protected]/microsoft_agents/copilotstudio/client/connection_settings.py:113

        direct_url = direct_connect_url or environ.get("DIRECT_CONNECT_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba147569612bb81b — Environment-variable access.

pkgs/python/[email protected]/microsoft_agents/copilotstudio/client/connection_settings.py:119

                environ.get("USE_EXPERIMENTAL_ENDPOINT", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #badee2c6512c964a — Environment-variable access.

pkgs/python/[email protected]/microsoft_agents/copilotstudio/client/connection_settings.py:124

            diagnostics = environ.get("ENABLE_DIAGNOSTICS", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #7737e5ccec9413e3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/microsoft_agents/copilotstudio/client/copilot_client.py:58

            async with session.post(url, json=data, headers=headers) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4cc576dcf29155a0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/microsoft_agents/copilotstudio/client/copilot_client.py:278

            async with session.get(url, headers=headers) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #d6893a1cbe35b838 — Filesystem access.

pkgs/python/[email protected]/setup.py:7

    with open(version_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d369f0a6b79aeb91 — Environment-variable access.

pkgs/python/[email protected]/setup.py:10

    package_version = environ.get("PackageVersion", "0.0.0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

numpy

python dependency

expand_more 982 low-confidence finding(s)

low env_fs dependency Excluded from app score #a67729e7d3fc6adb — Filesystem access.

pkgs/python/[email protected]/.spin/cmds.py:124

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c48405c887b45804 — Environment-variable access.

pkgs/python/[email protected]/.spin/cmds.py:326

    PATH = os.environ['PATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97bc0cf854cc4bc2 — Environment-variable access.

pkgs/python/[email protected]/.spin/cmds.py:331

    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fdbbfcd91a9abfb — Environment-variable access.

pkgs/python/[email protected]/.spin/cmds.py:505

    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a976860acf0715bc — Environment-variable access.

pkgs/python/[email protected]/.spin/cmds.py:523

    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15da3a9a532cd49f — Environment-variable access.

pkgs/python/[email protected]/.spin/cmds.py:547

    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afc028d5cba99114 — Filesystem access.

pkgs/python/[email protected]/.spin/cmds.py:629

        with open(local, "wt", encoding="utf8") as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4393ba0114839ec9 — Filesystem access.

pkgs/python/[email protected]/.spin/cmds.py:632

        with open(pkg_config_fname, "wt", encoding="utf8") as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8990d6d9cf9f91a6 — Environment-variable access.

pkgs/python/[email protected]/benchmarks/benchmarks/__init__.py:12

    if 'SHELL' in os.environ and sys.platform != 'win32':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a12deb8ef3f1cf94 — Filesystem access.

pkgs/python/[email protected]/benchmarks/benchmarks/__init__.py:35

        with open(lock_path, 'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7e9e629d8f51bed0 — Filesystem access.

pkgs/python/[email protected]/doc/neps/tools/build_index.py:34

        with open(source) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b0503eb776867b73 — Filesystem access.

pkgs/python/[email protected]/doc/neps/tools/build_index.py:125

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f393c1cd6455fbca — Filesystem access.

pkgs/python/[email protected]/doc/postprocess.py:18

        with open(fn, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1bc05000794ab59 — Filesystem access.

pkgs/python/[email protected]/doc/postprocess.py:24

        with open(fn, 'w', encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0fce296dfe86571d — Filesystem access.

pkgs/python/[email protected]/doc/preprocess.py:18

    with open(gen_path, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59070e414fc9c2e7 — Filesystem access.

pkgs/python/[email protected]/doc/preprocess.py:35

    with open(os.path.join(dsrc_path, "doxyfile")) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #465192134e6d4e65 — Filesystem access.

pkgs/python/[email protected]/doc/preprocess.py:44

            with open(conf_path) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9261e59211cdaec9 — Environment-variable access.

pkgs/python/[email protected]/doc/source/conf.py:247

if os.environ.get('CIRCLE_JOB') and os.environ['CIRCLE_BRANCH'] != 'main':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #029491771ddefb35 — Environment-variable access.

pkgs/python/[email protected]/doc/source/conf.py:249

    switcher_version = os.environ['CIRCLE_BRANCH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fb7d4bcca7be8bd — Environment-variable access.

pkgs/python/[email protected]/numpy/__init__.py:881

        use_hugepage = os.environ.get("NUMPY_MADVISE_HUGEPAGE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #038bd6d4b76c4632 — Environment-variable access.

pkgs/python/[email protected]/numpy/__init__.py:913

    if (os.environ.get("NPY_PROMOTION_STATE", "weak") != "weak"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5baeda7e2ffd19d8 — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/conv_template.py:270

    with open(source) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4b3d51908332d16 — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/conv_template.py:320

        fid = open(file, 'r')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4012fa4091fac36a — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/conv_template.py:323

        outfile = open(newname, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26212b24b318d72d — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/gitversion.py:8

    with open(init) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #edb34f62390d4307 — Environment-variable access.

pkgs/python/[email protected]/numpy/_build_utils/gitversion.py:89

                os.environ.get('MESON_DIST_ROOT', ''),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddfa45385dfb0192 — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/gitversion.py:98

        with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1641d64eb976239e — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/process_src_template.py:32

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2f3f49418013c56 — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/tempita.py:34

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8126375362b1948b — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/tempita/_tempita.py:164

        with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5465715e53528a2c — Environment-variable access.

pkgs/python/[email protected]/numpy/_build_utils/tempita/_tempita.py:1090

        vars.update(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #946420bb2d95ac5f — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/tempita/_tempita.py:1104

        with open(template_name, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98c48c470a9dd450 — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/tempita/_tempita.py:1109

        with open(options.output, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ff2eb53589f6b64 — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/__init__.py:17

    if envkey not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #776550c49910f659 — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/_add_newdocs_scalars.py:60

            machine = os.environ.get('PROCESSOR_ARCHITEW6432', '') \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #349b0a3f6ce61006 — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/_add_newdocs_scalars.py:61

                    or os.environ.get('PROCESSOR_ARCHITECTURE', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e08a4408835f8bf — Filesystem access.

pkgs/python/[email protected]/numpy/_core/_methods.py:242

        ctx = open(os.fspath(file), "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bf4c47d55fd87b5 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/code_generators/genapi.py:249

        fo = open(filename, 'r')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07d1b15cac8f397e — Filesystem access.

pkgs/python/[email protected]/numpy/_core/code_generators/genapi.py:321

        with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7d9248dc36e1565 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/code_generators/genapi.py:325

    with open(filename, 'w') as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c43c72ca3ec6d8d9 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/code_generators/genapi.py:537

    with open(file) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #407b4bf67a6177ee — Filesystem access.

pkgs/python/[email protected]/numpy/_core/code_generators/generate_umath.py:1689

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57240ad9c63ee617 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/code_generators/generate_umath_doc.py:20

    with open(target, 'w') as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e71df6fd8186c5ae — Filesystem access.

pkgs/python/[email protected]/numpy/_core/memmap.py:235

            f_ctx = open(
                os.fspath(filename),
                ('r' if mode == 'c' else mode) + 'b'
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a38e41138bd5140 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/records.py:901

        ctx = open(os.fspath(fd), 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9de5dd5da4899bab — Filesystem access.

pkgs/python/[email protected]/numpy/_core/src/common/pythoncapi-compat/upgrade_pythoncapi.py:608

        with open(filename, encoding=encoding, errors=errors, newline="") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99189cbcd0885c35 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/src/common/pythoncapi-compat/upgrade_pythoncapi.py:627

        with open(filename, "w", encoding=encoding, errors=errors, newline="") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #7e11a93e77b8b83d — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/conf.py:85

if 'REPO_NAME' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #081acaa13864f16f — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/conf.py:86

   REPO_NAME = os.environ['REPO_NAME']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #7384215e29570457 — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/conf.py:91

if 'current_language' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #77ca00c452b6c310 — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/conf.py:93

   current_language = os.environ['current_language']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #72e20511739210b4 — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/conf.py:106

if 'current_version' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #6f2f9a98eaf0ff6e — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/conf.py:108

   current_version = os.environ['current_version']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #402acec17692ab5c — Filesystem access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/mm-converter.py:59

    data = open(file, 'r').read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #179a8b9f81404507 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/mm-converter.py:73

        with open(ext_file, 'w') as handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #0bc46ec56e338210 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/mm-converter.py:83

            data = open(ext_file, 'r').read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e1a5665fd29d8a7 — Environment-variable access.

pkgs/python/[email protected]/numpy/conftest.py:60

os.environ["NUMPY_EXPERIMENTAL_DTYPE_API"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bc6ec8498087539 — Environment-variable access.

pkgs/python/[email protected]/numpy/conftest.py:100

        os.environ['NPY_AVAILABLE_MEM'] = available_mem

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b23aa82eaadbf5f1 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/_backends/_meson.py:71

        return self.build_template_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9ec59c8f521ef56 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/_backends/_meson.py:181

        meson_build_file.write_text(src)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b99b3edc43e64d0 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/_src_pyf.py:215

    with open(source) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9fb089376257e50f — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/auxfuncs.py:920

    with open(source) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5a6ff1c690edbc7 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/capi_maps.py:158

        with open(f2cmap_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7be4c52578af5f4e — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/crackfortran.py:318

        with open(filename, 'rb') as fhandle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18453d0037ba6918 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/crackfortran.py:329

    return open(filename, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f0bb79720483c9f — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/crackfortran.py:3705

                open(l).close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #466f0f267f1b526a — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/crackfortran.py:3724

        with open(pyffilename, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30128144582ee76f — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/f2py2e.py:290

                with open(l):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4442c941bc139e06 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/f2py2e.py:357

            with open(options['signsfile'], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d76abeef24b3e30a — Environment-variable access.

pkgs/python/[email protected]/numpy/f2py/rules.py:161

generationtime = int(os.environ.get('SOURCE_DATE_EPOCH', time.time()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f34e0feca5393f8f — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/rules.py:1436

    with open(fn, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ddb00fc6d3e9ca7 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/rules.py:1443

        with open(fn, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d17e26113e521f0f — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/rules.py:1451

        with open(fn, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #760876089d93638c — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/rules.py:1464

        with open(wn, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7af051f15afec5d5 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/rules.py:1489

        with open(wn, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #1d541bbf6fb0639f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/numpy/lib/_datasource.py:333

            with urlopen(path) as openedurl:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #285393ff3bd997c5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/numpy/lib/_datasource.py:475

                netfile = urlopen(path)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #af6faeb68e6dcc0b — Filesystem access.

pkgs/python/[email protected]/numpy/lib/_format_impl.py:968

        with open(os.fspath(filename), mode + 'b') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32106a802c39cf9d — Filesystem access.

pkgs/python/[email protected]/numpy/lib/_format_impl.py:973

        with open(os.fspath(filename), 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b3223c37ae70645 — Filesystem access.

pkgs/python/[email protected]/numpy/lib/_npyio_impl.py:454

            fid = stack.enter_context(open(os.fspath(file), "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3783235a20dcb39 — Filesystem access.

pkgs/python/[email protected]/numpy/lib/_npyio_impl.py:568

        file_ctx = open(file, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7b5e03223a79191 — Filesystem access.

pkgs/python/[email protected]/numpy/lib/_npyio_impl.py:1549

        open(fname, 'wt').close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1117a559cd58df01 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/clapack_scrub.py:308

    with open(filename) as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39bb158d1d417e84 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/clapack_scrub.py:318

    with open(outfilename, 'w') as writefo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6908f94120f2def6 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/fortran.py:116

    with open(filename) as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1a9637158056c4b — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:230

    with open(wrapped_routines_file) as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5e9432541bd5ae4 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:250

        with open(filename, 'w') as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24bd1229ff0542cd — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:256

    with open(output_file, 'w') as output_fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #415be2df16d1081f — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:258

            with open(r.filename) as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26968c612a7b968f — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:275

    with open(c_file) as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #468de2ecc6f9f32f — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:278

    with open(c_file, 'w') as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31ff18d040f285df — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:301

        with open(fn) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d79d34100383b40f — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:309

    with open('f2c.h') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d3c93eb75ec5725 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:315

    with open(os.path.join(output_dir, 'lapack_lite_names.h'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3930da18e2cde4b — Filesystem access.

pkgs/python/[email protected]/numpy/ma/mrecords.py:626

        f = open(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0779b564101270ec — Filesystem access.

pkgs/python/[email protected]/numpy/random/_examples/cffi/parse.py:12

    with open(os.path.join(inc_dir, 'random', 'bitgen.h')) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95146853f952f332 — Filesystem access.

pkgs/python/[email protected]/numpy/random/_examples/cffi/parse.py:21

    with open(os.path.join(inc_dir, 'random', 'distributions.h')) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #400ae07621940c70 — Filesystem access.

pkgs/python/[email protected]/numpy/testing/_private/extbuild.py:209

    with open(cfile.parent / "meson.build", "wt") as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d72d2d82309eaa8c — Filesystem access.

pkgs/python/[email protected]/numpy/testing/_private/extbuild.py:223

    with open(native_file_name, "wt") as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22560088f13be8f8 — Filesystem access.

pkgs/python/[email protected]/numpy/testing/_private/utils.py:72

                np_dist.read_text('direct_url.json') or '{}',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a170c2c6904abdff — Filesystem access.

pkgs/python/[email protected]/numpy/testing/_private/utils.py:179

            with open(_proc_pid_stat) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28b369de361602c0 — Filesystem access.

pkgs/python/[email protected]/numpy/testing/_private/utils.py:208

            with open(_proc_pid_stat) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c8271964e04e74a — Environment-variable access.

pkgs/python/[email protected]/numpy/testing/_private/utils.py:2711

    env_value = os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c90c9d0af18c5aa — Filesystem access.

pkgs/python/[email protected]/numpy/testing/_private/utils.py:2763

        with open('/proc/meminfo') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #60930a4ed1c7cba0 — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:57

        with open(self.path, "r") as source:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #66c08671f32e6753 — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:66

        with open(self.path, 'r') as source:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1f843d7c4d7193be — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:96

            with open(os.path.join(root, self.clean_path(path)), "w") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1a15113954ba3448 — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:97

                source.write_text(fd)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #18438b7abce6d779 — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:101

            with open(
                os.path.join(root, self.clean_path(path) + ".html"), "w"
            ) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #fe79eed0493c947d — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:106

        with open(os.path.join(root, 'index.html'), 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #5ca409d30024c307 — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:165

        with open(log_file, 'r') as log_fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8bd73a9ed169f7db — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:176

        files.write_text(args.directory)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #884380b11a8d61ff — Filesystem access.

pkgs/python/[email protected]/tools/check_installed_files.py:108

    with open(os.path.join('build', 'meson-info',
                           'intro-install_plan.json'), 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #67a82c3c43166f95 — Filesystem access.

pkgs/python/[email protected]/tools/check_openblas_version.py:48

        with open(reqfile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ab18f9873ce80b50 — Filesystem access.

pkgs/python/[email protected]/tools/check_python_h_first.py:77

    with open(name_to_check) as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #43e6ea65b7d6655e — Filesystem access.

pkgs/python/[email protected]/tools/functions_missing_types.py:101

        with open(module_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a5cfb2d56dede8a6 — Filesystem access.

pkgs/python/[email protected]/tools/get_submodule_paths.py:12

    with open(gitmodule_file) as gitmodules:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #62e983731c67502f — Filesystem access.

pkgs/python/[email protected]/tools/get_submodule_paths.py:19

    with open(
            os.path.join(root_directory, ".gitattributes"), "r"
    ) as attr_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3e42449db900efa — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/ci/ciimage/build.py:21

        data = json.loads(path.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a50f8ef4229a205 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/ci/ciimage/build.py:83

        out_file.write_text(out_data, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc555785dc373758 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/ci/ciimage/build.py:100

        out_file.write_text(out_data, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5c80c7692511229 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/ci/ciimage/build.py:140

        out_file.write_text(out_data, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #cc88087c3a50f752 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/extensions/refman_links.py:128

        raw = Path(self._data_file).read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ba9f659698f7f278 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/genrelnotes.py:71

            snippet = snippetfile.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ef76085ca9880a89 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/jsonvalidator.py:146

    root_tmp = json.loads(args.doc_file.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e2211bbc85e07092 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatorjson.py:115

        self.out.write_text(json.dumps(data), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #cec9b15985a7eb9d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatorman.py:65

        self.path.write_text(self.text, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #002b188197ca70fb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatormd.py:116

        out_file.write_text(data, encoding='ascii')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6f55d8d15817a617 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatormd.py:129

            template=template_file.read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e59866e1bcde8786 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatormd.py:360

        raw = self.sitemap_in.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #48a05358c03af3ca — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatormd.py:371

        self.sitemap_out.write_text(out, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a0c8d02b992fb402 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatormd.py:393

        self.link_def_out.write_text(json.dumps(data, indent=2), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7999e4e8e0ec6a51 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatorvim.py:30

            template=template_file.read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d9670e6f9b35019a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatorvim.py:37

        out_file.write_text(result, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #154f791c05687f65 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/loaderbase.py:194

        return f.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #bd6895da5f01e4b8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/loaderpickle.py:16

        res = pickle.loads(self.in_file.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #fba3489509994702 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/main.py:76

        args.depfile.write_text(out_text, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #50efd3926e3c5e95 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vendored-meson/meson/docs/validatelinks.py:16

        async with session.get(url, timeout=timeout) as r:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #f71600d664c23439 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/validatelinks.py:24

    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #803eb3de8a87f929 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/vendored-meson/meson/manual tests/4 standalone binaries/build_windows_package.py:14

    response = urllib.request.urlopen(sdl_url, timeout=600.0)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #934b64189a1382ff — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/manual tests/4 standalone binaries/build_windows_package.py:16

    open(sdl_filename, 'wb').write(data)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0cf6d308c65ecf0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:454

            return open(outfileabs_tmp, 'w', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #520d518bf86c3fb5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:623

            with open(rsp_file, 'w', encoding='utf-8', newline='\n') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbd2cc3812f2223b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:727

        with open(exe_data, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7dffcc21f46b7af9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:734

        with open(test_data, 'wb') as datafile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef1c043bb436a997 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:737

        with open(benchmark_data, 'wb') as datafile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1905e2fae61aa20e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:902

        with open(pch_file_tmp, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f600e579217973db — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:1314

        with open(ifilename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5a5dba46c226ede — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:1345

        with open(filename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #621cf8b1743b00d7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:1676

        with open(install_data_file, 'wb') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35895495a9b0a77c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:548

                return open(tempfilename, 'a', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06c90fc94f102e3d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:553

            return open(tempfilename, 'a', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71532ef1a283bae8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:557

        with open(filename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ded537b7fa26074 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:590

                    with open(tempfilename, 'ab') as binfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ba39485e3f6c7a2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:592

                    return open(tempfilename, 'a', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #393bdeef7cc09193 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:634

        with open(tempfilename, 'w', encoding='utf-8') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9a07ddd9d2afef8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:716

        with open(os.path.join(self.environment.get_build_dir(), 'rust-project.json'),
                  'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #778eae813015c9b0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:748

            with open(os.path.join(builddir, 'compile_commands.json'), 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d99d78cd253b85a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:1169

            with open(pickle_abs, 'rb') as p:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86a7647f42bdc1f6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:1174

            with open(pickle_abs, 'wb') as p:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #954d65ef312342bf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:1505

        with open(manifest_fullpath, 'w', encoding='utf-8') as manifest:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b82793f5cd14d9dd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:2896

            with open(filename, encoding='ascii', errors='ignore') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c7629ead41df89f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:3377

                in_file = Path(os.environ['VCToolsInstallDir']) / 'modules/std.ixx'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c132c2f3222d31f3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:3934

        with open(d_file, 'wb') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c23e75b0d4a324a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:36

    vs_version = os.getenv('VisualStudioVersion', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #573ca31f14fa5e16 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:37

    vs_install_dir = os.getenv('VSINSTALLDIR', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1f4d0c407f7748b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:300

        with open(Vs2010Backend.get_regen_stampfile(build_dir), 'w', encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d8e339150568921 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:304

        has_arch_values = 'VSCMD_ARG_TGT_ARCH' in os.environ and 'VSCMD_ARG_HOST_ARCH' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #773e7da41789b669 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:307

        if 'VCINSTALLDIR' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c1040fdef62eb1a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:308

            vs_version = os.environ['VisualStudioVersion'] \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #476d0fc5192ce070 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:309

                if 'VisualStudioVersion' in os.environ else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1976f03c4425f73f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:311

            script_path = os.environ['VCINSTALLDIR'] + relative_path + 'vcvarsall.bat'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53164e0bb7038455 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:314

                    target_arch = os.environ['VSCMD_ARG_TGT_ARCH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e92f1894dc4336d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:315

                    host_arch = os.environ['VSCMD_ARG_HOST_ARCH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e884176c87dcd16 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:317

                    target_arch = os.environ.get('Platform', 'x86')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #123069dcc0ee06ff — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:323

        if 'VS150COMNTOOLS' in os.environ and has_arch_values:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #573cdb94773ad472 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:324

            script_path = os.environ['VS150COMNTOOLS'] + 'VsDevCmd.bat'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b1d78ad7ef85a4f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:327

                    (script_path, os.environ['VSCMD_ARG_TGT_ARCH'], os.environ['VSCMD_ARG_HOST_ARCH'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d11d4a348f3b1ad — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:426

        with open(sln_filename_tmp, 'w', encoding='utf-8-sig') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb1a870e3ecb2f59 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:1008

        with open(ofname_tmp, 'w', encoding='utf-8') as of:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae2ddf3c7ecdd0fa — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:2110

            with open(rulefile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #055a46f9a4505249 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2017backend.py:44

        sdk_version = os.environ.get('WindowsSDKVersion', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b97d56e45b408ac8 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2019backend.py:39

        sdk_version = os.environ.get('WindowsSDKVersion', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f979306ec99cac4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2022backend.py:39

        sdk_version = os.environ.get('WindowsSDKVersion', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #365c4bf4e0bb2b80 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2026backend.py:39

        sdk_version = os.environ.get('WindowsSDKVersion', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a66e191c3f8764c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/xcodebackend.py:274

        with open(tmpname, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d9218caf634eb2a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/build.py:3601

        with open(filename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2832311d1c5080c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cargo/toml.py:41

            with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80506cc854eaa335 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/executor.py:216

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd0fdefc67a22493 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/fileapi.py:51

        query_file.write_text(json.dumps(query, indent=2), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3b2bd0a00a52afd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/fileapi.py:75

        debug_json.write_text(json.dumps(index, indent=2), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c22701f0d89506b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/fileapi.py:320

        data = json.loads(real_path.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2bb35130e12a60a6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/interpreter.py:884

            os_env = environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca722476b516f2a6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/toolchain.py:61

        self.toolchain_file.write_text(self.generate(), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7884b83458ca0d1d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/toolchain.py:62

        self.cmcache_file.write_text(self.generate_cache(), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #049c8a59609e0ef9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/toolchain.py:238

        cmake_file.write_text(cmake_content, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddeed681e6da880e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/toolchain.py:242

        temp_toolchain_file.write_text(CMakeToolchain._print_vars(self.variables), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ae574371ce9701b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/traceparser.py:170

            trace = self.trace_file_path.read_text(errors='ignore', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d78f5e1a2ce93ed0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmdline.py:93

    with open(filename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5776db60cc733a9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmdline.py:112

    with open(filename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #012ef85b06de2370 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/compilers.py:866

                with open(srcname, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ec2f570653c83ee — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/compilers.py:907

            os_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61391325748304ef — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/compilers.py:1277

        with open(os.path.join(work_dir, sourcename), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6cb7c7736e84de9 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/detect.py:308

            if 'WATCOM' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab9750a5b5aa0217 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/detect.py:312

                watcom_cls = [sanitize(os.path.join(os.environ['WATCOM'], 'BINNT', 'cl')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b76301df80b9eae9 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/detect.py:313

                              sanitize(os.path.join(os.environ['WATCOM'], 'BINNT', 'cl.exe')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b87aa72307c6746 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/detect.py:314

                              sanitize(os.path.join(os.environ['WATCOM'], 'BINNT64', 'cl')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0361316da1bba57 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/detect.py:315

                              sanitize(os.path.join(os.environ['WATCOM'], 'BINNT64', 'cl.exe'))]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15eefc56c908393e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/detect.py:1355

            default_path = os.path.join(os.environ['ProgramFiles'], 'NASM')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64ebbeba243c852d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/clike.py:228

                    with open(file_to_check, 'rb') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3562789c089cc85d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/clike.py:881

            with open(p.output_name, 'rb') as o:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d62065e85ef17f7b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/clike.py:1197

        os_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9a484679805522c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/elbrus.py:42

        os_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54b8595bb2ee2900 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/elbrus.py:53

        os_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea24d494cc493e95 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/elbrus.py:65

        os_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #873f6f2173eb1681 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/gnu.py:323

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86cf1fa41c8ad81e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/visualstudio.py:316

        if 'INCLUDE' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6be69f9e01e5bd62 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/visualstudio.py:318

        return os.environ['INCLUDE'].split(os.pathsep)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ca04386a23ff966 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/coredata.py:292

                    with open(f, encoding='utf-8') as rf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da85501fe5889bf3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/coredata.py:293

                        with open(fcopy, 'w', encoding='utf-8') as wf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1bc19fc8d55c3566 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/coredata.py:303

                    os.environ.get('XDG_DATA_HOME', os.path.expanduser('~/.local/share')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ada63f261083ca2 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/coredata.py:304

                ] + os.environ.get('XDG_DATA_DIRS', '/usr/local/share:/usr/share').split(':')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30ce273d70b5ad58 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/coredata.py:489

    with open(tempfilename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3fa29b28c9823ed — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/blas_lapack.py:784

        deploy_target = os.environ.get('MACOSX_DEPLOYMENT_TARGET', macos_version)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5811784ab2563268 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/blas_lapack.py:800

        deploy_target = os.environ.get('IPHONEOS_DEPLOYMENT_TARGET', ios_version)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #483ac1f7f8c04e99 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/blas_lapack.py:939

        _m = os.environ.get('MKLROOT')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea71cc7bc93f7387 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/boost.py:762

        raw = hfile.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a8260361fbbcc61 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cmake.py:298

        for i in os.environ.get('PATH', '').split(os.pathsep):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b0809a794532323 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cmake.py:329

        env_path = os.environ.get(f'{name}_DIR')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2aa74e3085e5802 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cmake.py:580

        cmake_txt = importlib.resources.read_text('mesonbuild.dependencies.data', cmake_file, encoding = 'utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b296a22f7216616 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cmake.py:600

        cm_file.write_text(cmake_txt, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8d4556728c30d2b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:175

        env_vars = [var for var in env_vars if var in os.environ]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #441ab1af0046ad70 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:176

        user_defaults = {os.environ[var] for var in env_vars}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #194e9940dfce8eb6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:182

        return ([(os.environ[self.env_var], True)] if self.env_var else []) \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b173584d8779baa — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:186

        env_vars = os.environ.keys()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c24ab664418f1a2f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:187

        return [(os.environ[var], False) for var in env_vars if var.startswith('CUDA_PATH_')]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63c9584e3b5baccf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:223

            raw = i.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa2276cd173f6c26 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:241

            with open(version_file_path, encoding='utf-8') as version_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49b4b549a82330a3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/dev.py:777

        vsdir = os.environ.get('VSInstallDir')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70ee94261c1095b9 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/hdf5.py:110

            os.environ[f'HDF5_{cenv}'] = join_args(compiler.get_exelist())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #513a37438a0e0fec — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/hdf5.py:111

            os.environ[f'HDF5_{lenv}LINKER'] = join_args(compiler.get_linker_exelist())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad4133935c68461e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/hdf5.py:114

            del os.environ[f'HDF5_{cenv}']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #feb52f30fd5642a6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/hdf5.py:115

            del os.environ[f'HDF5_{lenv}LINKER']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0e2dfc5491b7ef1 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/mpi.py:54

        tool_names = [os.environ.get(env_name) for env_name in env_vars]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3668cbd48b4627e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/mpi.py:244

        incdir = os.environ.get('MSMPI_INC')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fabb9afed2604bc2 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/mpi.py:248

            libdir = os.environ.get('MSMPI_LIB32')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba3454cd7d78e494 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/mpi.py:251

            libdir = os.environ.get('MSMPI_LIB64')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3aded8b2369b30c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/mpi.py:278

        rootdir = os.environ.get('I_MPI_ROOT')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #099143294dbc2dbb — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/pkgconfig.py:164

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c9832213855a81f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/pkgconfig.py:181

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05bf0c755100253e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/pkgconfig.py:302

        env = env or os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3caf6705a572b667 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/pkgconfig.py:560

        with open(la_file, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67782ac5ff589744 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/python.py:98

            self._data = json.loads(self._path.read_text(encoding='utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43fae69602682167 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/python.py:229

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed2fb33361d66111 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/scalapack.py:57

        _m = os.environ.get('MKLROOT')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8abdb73f269eed6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/ui.py:119

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96a6f46d37f9ecd0 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/ui.py:185

        self.vulkan_sdk = os.environ.get('VULKAN_SDK', os.environ.get('VK_SDK_PATH'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93b708cd9d2b2705 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/envconfig.py:725

    return os.environ.get('MSYSTEM_CARCH', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f3deda5735f61ac — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/environment.py:70

        value = os.environ.get(var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3643f006d0e7223 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreter.py:385

        if 'MESON_UNIT_TEST' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b06ebcd9f9fea0c0 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreter.py:387

        if 'MESON_RUNNING_IN_PROJECT_TESTS' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0be916b184f359bf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreter.py:967

        with open(meson_filename, "w", encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3eab2b8447ae1c4b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreter.py:1250

                ver_data = Path(ifname).read_text(encoding='utf-8').split('\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #241fe5e31cbee8e5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreter.py:2814

                with open(dst_tmp, 'w', encoding=file_encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67919b4de986e9a2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreter.py:2821

                with open(depfile, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #360383978e4ebb66 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreterobjects.py:264

        child_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c8446f9e2c43606 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:106

            with open(fname, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a1498a144543024 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:155

                    with open(parent / 'meson.build', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58a917bec33b4890 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:676

            with open(option_file, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35a2e0a1e7046050 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/machinefile.py:30

                with open(fname, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bde943acfd6a690c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mcompile.py:253

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7dd683fcdcfdce60 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mconf.py:95

                    with open(opfile, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2e1bedd760fc7cb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mconf.py:110

                        with open(opfile, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85a8a495378de364 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:72

    env = {} if dump_fmt else os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f47de213312f7a1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:153

            gdbinit_path.write_text(gdbinit_line, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b921e7fabe19e86e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:199

            with open(options.dump, "w", encoding='utf-8') as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72d8a9b290d476ed — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:217

        if os.environ.get("MESON_DISABLE_PS1_OVERRIDE"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e837658040e73172 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:219

        shell_env = os.environ.get("SHELL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63b7f02766ad1100 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:233

                args = [os.environ.get("COMSPEC", r"C:\WINDOWS\system32\cmd.exe")]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #670047e81a012f48 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:236

            args = [os.environ.get("SHELL", os.path.realpath("/bin/sh"))]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d7c28b6407f5146 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:263

            with open(os.path.join(tmpdir.name, '.zshrc'), 'w') as zshrc: # pylint: disable=unspecified-encoding

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4993f93138f0f77 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:68

    m.update(open(fname, 'rb').read())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c5c2dde75525e7a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:69

    with open(hashname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48478a855902e328 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:96

            if 'GITLAB_CI' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97d5a34ccf74c406 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:261

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27214c249424c379 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:294

            with lzma.open(xzname, 'wb') as xf, open(tarname, 'rb') as tf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49c8f9e0f55c1da9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:299

            with bz2.open(bz2name, 'wb') as bf, open(tarname, 'rb') as tf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46f3ced2f09f6b63 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:304

            with gzip.open(gzname, 'wb') as zf, open(tarname, 'rb') as tf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d863bba53b9e232b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:324

    myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d34cefc85533db4c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesondata.py:21

            data = importlib.resources.read_text( # [ignore encoding] it's on the next lines, Mr. Lint
                    ('mesonbuild' / self.path.parent).as_posix().replace('/', '.'),
                    self.path.name,
                    encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1eb94dc322af7d16 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesondata.py:25

            path.write_text(data, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd3aec47f78fef11 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesonmain.py:33

        if os.environ.get('MESON_FORCE_BACKTRACE'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a8d2184c3b45243 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesonmain.py:43

        if os.environ.get('MESON_FORCE_BACKTRACE'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25d5eee7b44de71e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesonmain.py:257

    if os.environ.get('MESON_SHOW_DEPRECATIONS'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c51df54afb5c061d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesonmain.py:264

    if sys.version_info >= (3, 10) and os.environ.get('MESON_RUNNING_IN_PROJECT_TESTS'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1bb13fcb727557bd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesonmain.py:282

    if sys.platform == 'cygwin' and os.environ.get('MSYSTEM', '') not in ['MSYS', '']:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6cc6be2e8991f5d9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mformat.py:38

            self.read_string(f'[{self.default_section}]\n' + filename.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05c4587e81b81221 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mformat.py:1089

                code = src_file.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f4e12a260592415 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:545

            destdir = os.environ.get('DESTDIR')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a7971f1b16d65c9 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:551

            os.environ['DESTDIR'] = destdir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3c2a4c9bd76d614 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:581

                os.environ.get('MESON_ROOT_CMD')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ae49a91937a7888 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:587

            if rootcmd is None and pkexec is not None and 'PKEXEC_UID' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #678c7cb95b5bad0c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:814

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d39768037162051 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:816

            if os.environ.get('SUDO_USER') is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07d48205a878de2b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:825

            elif os.environ.get('DOAS_USER') is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #934a5318d83a556e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:879

    with open(os.path.join(log_dir, 'install-log.txt'), 'w', encoding='utf-8') as lf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb59a3da4add072c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mintro.py:511

    with open(get_info_file(infodir, kind), encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31a21519032d2f72 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mintro.py:580

        with open(tmp_file, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2d8cd01e03749eb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mintro.py:650

    with open(tmp_file, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18721208c841fe11 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:50

    return bool(kernel.SetConsoleMode(stdout, mode.value | 0x4) or os.environ.get('ANSICON'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9de0676d610cb95 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:52

_in_ci = 'CI' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97d23d6be1a29900 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:53

_ci_is_github = 'GITHUB_ACTIONS' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4219aff6ae773c63 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:128

        if 'PAGER' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0494118a46a37c7f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:129

            pager_cmd = shlex.split(os.environ['PAGER'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab79f63b7c29c811 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:148

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8dd72ca11975f2a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:158

            if 'PAGER' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75d8450b16acfb90 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:174

        self.log_file = open(os.path.join(logdir, self._LOG_FNAME), 'w', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40532f960581a427 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:175

        self.slog_file = open(os.path.join(logdir, self._SLOG_FNAME), 'w', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67e2fdfde43a73db — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:406

                _colorize_console = os.isatty(output.fileno()) and os.environ.get('TERM', 'dumb') != 'dumb'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ab7bb4a9d7dbe59 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:582

    elif 'MESON_FORCE_SHOW_LOGS' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5441b9a934b644b3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:589

    with open(fname, 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #746e92493c5e3da0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/_qt.py:817

        with open(fileout_abs, 'w', encoding='utf-8') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #488fd7cb084338e7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/cmake.py:338

            with open(infile, encoding='utf-8') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6362981b3d194a2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/cmake.py:352

        with open(outfile_tmp, "w", encoding='utf-8') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b9f1089eb873a1e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/dlang.py:74

            with open(config_path, encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb6e969f4d3c904c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/dlang.py:115

        with open(config_path, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a987814821c5c93 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/external_project.py:155

        self.run_env: EnvironOrDict = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3e33ad2fd2180f8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/external_project.py:220

            output = open(logfile, 'w', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e9b996ae745bfc8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/features/module.py:680

        with open(config_path, "w", encoding='utf-8') as cout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e4ced26ebf98039 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/fs.py:169

        with open(file, mode='rb', buffering=0) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ffe588d7aaeb294 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/fs.py:268

            with open(path, encoding=encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8890a2fae508efa5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/gnome.py:950

        with open(gir_filelist_filename, 'w', encoding='utf-8') as gir_filelist:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #758aa5c372818b98 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/gnome.py:2212

        with open(fname, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #413bb83e11bb0d80 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/hotdoc.py:293

        with open(hotdoc_config_path, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ddea5d15f647085 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/i18n.py:238

        rsp_file.write_text(source_list, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5db4f231b38a9c40 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/keyval.py:31

            with open(path_to_config, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2db058099da11b9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/pkgconfig.py:555

        with open(fname, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71c45c582def9d74 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/python.py:431

        with open(pycompile, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2c0a48822863df6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/python.py:442

                with open(os.path.join(self.interpreter.environment.get_scratch_dir(), manifest), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47b69cac42705651 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/snippets.py:100

        header_path.write_text(content, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28d535a8e5e5a06b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mparser.py:113

        self.in_unit_test = 'MESON_RUNNING_IN_PROJECT_TESTS' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5940933e47d29150 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/msetup.py:152

        with open(os.path.join(build_dir, '.gitignore'), 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d575be68f6896a62 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/msetup.py:154

        with open(os.path.join(build_dir, '.hgignore'), 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #461bb28c086de142 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/msetup.py:324

                with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59cd5b5238308697 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:527

        self.file = open(filename, 'w', encoding='utf-8', errors=errors)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b1e5abaee5f3179 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:762

        inherit_env = env_tuple_to_str(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d048d3c680aee65 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:956

        with open(self.filename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29d00b8ec23332e1 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:1057

        test_only_env = set(self.env.items()) - set(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abcc977178384fbb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:1121

            with open(filename, 'r', encoding='utf8', errors='replace') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e2f61302d8b81bd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:1794

        return current.env.get_env(os.environ.copy())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #526fb32e03e09c14 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:1802

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2711f82fc9d7f71f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:2237

        with open(targets_file, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17d5033eb9e6614a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:2319

            if os.environ.get('MESON_FORCE_BACKTRACE'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1f8784a68eba314 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/optinterpreter.py:83

            with open(option_file, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29cdc6a942fa4109 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/programs.py:185

        if 'USERPROFILE' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #214d91b210624b32 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/programs.py:196

        appstore_dir = Path(os.environ['USERPROFILE']) / 'AppData' / 'Local' / 'Microsoft' / 'WindowsApps'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9476f2398b2cc8e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/programs.py:228

            with open(script, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e29234012fb7d0ba — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/programs.py:332

        search_dirs = OrderedSet(self._windows_sanitize_path(os.environ.get('PATH', '')).split(';'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfb52f1853a07dfc — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/programs.py:354

        path = os.environ.get('PATH', os.defpath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2256f419d6fe90b0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/rewriter.py:1022

                with open(fpath, 'w', encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad52aa1585daf4dc — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/rewriter.py:1024

            with open(fpath, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1841430fed27cb55 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/rewriter.py:1075

            with open(val['path'], 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #173b8f1603dce907 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/rewriter.py:1144

        with open(options.json, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #fd382cc4f050e899 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/clangformat.py:26

            original = fname.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #88ba34a00a31bf6b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/cleantrees.py:30

    with open(args[0], 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2ddcedfebcc3fb95 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/coverage.py:103

                    with open(llvm_cov_shim_path, 'w', encoding='utf-8') as llvm_cov_bat:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ac63e6bc1ab6b81d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/coverage.py:107

                    with open(llvm_cov_shim_path, 'w', encoding='utf-8') as llvm_cov_sh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b14db3fa7a9c3439 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depaccumulate.py:105

    with open(outfile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #62e4dbacbd591c79 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depaccumulate.py:119

    with open(jsonfile, 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8c10f1891269d7df — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depaccumulate.py:125

        with open(dep, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e5e21ec1e7774c95 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depfixer.py:159

            self.bf = open(bfile, 'r+b')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #cf686c5e89473c4e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depfixer.py:164

                self.bf = open(bfile, 'r+b')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #5a489db874b631cf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depfixer.py:523

    with open('META-INF/MANIFEST.MF', 'r+', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #af3f0bdd00fac7b5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depscan.py:72

        with open(pickle_file, 'rb') as pf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e386de102cccbb17 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depscan.py:90

        for line in fpath.read_text(encoding='utf-8-sig', errors='ignore').split('\n'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6865dcef5d7fe852 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depscan.py:134

        for line in fpath.read_text(encoding='utf-8-sig', errors='ignore').split('\n'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #37c39f19e1af9757 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depscan.py:199

        with open(self.outfile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #35f13963a6fbc853 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:100

    cppflags = shlex.split(os.environ.get('CPPFLAGS', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #fc40ee16b1dcb6c5 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:101

    cflags = shlex.split(os.environ.get('CFLAGS', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0c170fdcad35c8c5 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:102

    cxxflags = shlex.split(os.environ.get('CXXFLAGS', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d175217410411e48 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:103

    objcflags = shlex.split(os.environ.get('OBJCFLAGS', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #167bcbffcf459386 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:104

    objcxxflags = shlex.split(os.environ.get('OBJCXXFLAGS', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2b977e147c490e51 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:105

    ldflags = shlex.split(os.environ.get('LDFLAGS', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #75881cbfcae38f17 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:278

    with open(tmpfilename, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #4de3aa66e78f101f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:329

        compile_args = shlex.split(os.environ.get(compilers.CFLAGS_MAPPING[langname] + envvar_suffix, ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1a5592345d8b62de — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:331

        cppflags = tuple(shlex.split(os.environ.get('CPPFLAGS' + envvar_suffix, '')))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #9e95ae1fa78ba069 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:337

        lang_link_args += shlex.split(os.environ.get('LDFLAGS' + envvar_suffix, ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1c2844ab8e6e8bc3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:345

            compilerstr = os.environ.get(envvarname + envvar_suffix)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a6e48b3f2aabfb3f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:365

            binstr = os.environ.get(envvar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b46264184a9db1bd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:371

    var = os.environ.get('PKG_CONFIG_LIBDIR' + envvar_suffix)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ba6b8872bd26f07a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:374

    var = os.environ.get('PKG_CONFIG_SYSROOT_DIR' + envvar_suffix)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #78fb1b7e86a8fbb5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:523

            with open(pathlib.Path(self.options.outfile) / crossfile_name, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b301a5b88ea672a8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/externalproject.py:28

        with open(self.depfile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #5485ac82b9354955 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/externalproject.py:39

        with open(self.stampfile, 'w', encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8df4e9bce1e9c2e8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/externalproject.py:74

            output = open(logfile, 'w', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7f8dc317f31ddb92 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/externalproject.py:79

        run_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #21289ab462f21dd1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/gettext.py:30

        with open(linguas, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #5086b0e5397570df — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/gettext.py:48

    child_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f4704d7f6faa6de7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/gtkdochelper.py:52

    env = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #10f4cba25fd7ff17 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/gtkdochelper.py:270

    if 'MESON_INSTALL_PREFIX' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #651e9156b17513c4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/gtkdochelper.py:271

        destdir = os.environ.get('DESTDIR', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #20f9ab995a06874b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/gtkdochelper.py:272

        install_prefix = destdir_join(destdir, os.environ['MESON_INSTALL_PREFIX'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #593afcbe4bc9f2ea — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/hotdochelper.py:23

    subenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #77a2a458b007c244 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/hotdochelper.py:35

        destdir = os.environ.get('DESTDIR', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #052a4cca7785f386 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/itstool.py:64

    build_dir = os.environ.get('MESON_BUILD_ROOT', os.getcwd())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a07d73471719008d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/meson_exe.py:31

    child_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #af1466728e880ebf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/meson_exe.py:49

        stdin = open(exe.feed, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #bcb62eece73fdad9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/meson_exe.py:84

            with open(exe.capture, 'rb') as cur:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8732e16af780a70c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/meson_exe.py:89

            with open(exe.capture, 'wb') as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ac98957ac0ba1701 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/meson_exe.py:106

        with open(options.unpickle, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2be2b44faf98cb1b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/msgfmthelper.py:25

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2f550212de77e8c1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/pickle_env.py:6

    with open(args[0], "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #25174d86250c64cf — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/pickle_env.py:7

        pickle.dump(dict(os.environ), f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b9c33dcdb17936e2 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/pycompile.py:12

quiet = int(os.environ.get('MESON_INSTALL_QUIET', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2c6a9dc152552a5b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/pycompile.py:22

        fullpath = absf = os.environ['MESON_INSTALL_DESTDIR_'+key] + f

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d8d3ed58f959b963 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/pycompile.py:23

        f = os.environ['MESON_INSTALL_'+key] + f

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #fc096ea8769dcc97 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/pycompile.py:41

    with open(data_file, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e73890675c97e6d6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/regen_checker.py:41

    with open(dumpfile, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #41c3d31ecae79324 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/regen_checker.py:44

    with open(coredata_file, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c85362c9d5c61804 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/reprotest.py:61

        os.environ['CCACHE_DISABLE'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0ab12d4ef6db4728 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/run_tool.py:136

    with open('meson-info/intro-targets.json', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #36c3132754fe8fc2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/run_tool.py:156

    with open('meson-info/intro-targets.json', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #86404f3a1d9f14da — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/rustdoc.py:57

                environ = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #362f5e4e799f0260 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:31

    with open(outfilename, 'w', encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #cd839d6a267229ac — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:36

        with open(outfilename, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #650abfeda82e7a06 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:42

    with open(outfilename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e3fc8868a7d0058a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:53

    with open(TOOL_WARNING_FILE, 'w', encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f81951f1363d07dd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:58

    if evar in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #69abf6ad57bac569 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:60

        return shlex.split(os.environ[evar])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #fbdf175e2fd1e7f8 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:118

    origpath = os.environ['PATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0b7435d009cd4410 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:120

        os.environ['PATH'] = '/usr/gnu/bin:' + origpath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f215c6cae3a724f6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:123

        os.environ['PATH'] = origpath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6dc3089c8c140b10 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:228

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a4bc1af9d0a424a7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:333

            with open(TOOL_WARNING_FILE, 'w', encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6fee1357f8802f6a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/uninstall.py:14

    for line in open(log, encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #79185a4525ebc52a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/vcstagger.py:16

    with open(infile, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #33685afcb5f71967 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/vcstagger.py:19

        with open(outfile, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1c27c0fe36975fc5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/vcstagger.py:24

        with open(outfile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7add5906ae6e2057 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/yasm.py:21

    with open(options.depfile, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8109fe5c8e5bf539 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:96

            with open(self.source_name, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa7708490d674946 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:100

            with open('meson.build', 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56a7e00e3126bcbb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:128

            with open(self.source_name, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83b8d3da3c269286 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:131

            with open(test_name, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25d3ef98e7af78ec — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:134

            with open('meson.build', 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a917122d12f8e4c2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:148

            with open(self.source_name, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c981cf8d9da4b808 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:151

            with open('meson.build', 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99fda74c064d5741 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:188

            with open(self.source_name, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1903c00f0d97be8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:191

            with open(test_name, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d945156593c41ef — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:194

            with open('meson.build', 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #932a1ab5b6d719ac — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:219

            with open(kwargs['header_file'], 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d28e60d9b31f529a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/tooldetect.py:106

    env_ninja = os.environ.get('NINJA', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #033460f98f4d5714 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/tooldetect.py:193

    if 'SCANBUILD' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfb38b49bd37afee — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/tooldetect.py:194

        exelist = split_args(os.environ['SCANBUILD'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #216e466adaa33d91 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/platform.py:49

                self.lockfile = open(self.lockpath, 'w+', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0aaf011fe704768f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/platform.py:98

                self.lockfile = open(self.lockpath, 'w+', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f48f7ded6328054a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:247

    if 'MESON_COMMAND_TESTS' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f22bffaf694fa4b7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:752

    arch = os.environ.get('PROCESSOR_ARCHITEW6432', '').lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e45a058026846b05 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:756

            arch = os.environ['PROCESSOR_ARCHITECTURE'].lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff78d7804a7e03d0 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:836

    vsver = os.environ.get('VSCMD_VER', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be6772dfc6b8ce4e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1124

        if varname in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f200d7f02654bab — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1126

                num_workers = int(os.environ[varname])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #051f579770c04cf2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1543

        with open(src, encoding=encoding, newline='') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d5d8312ade1acaa — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1551

        with open(dst_tmp, 'w', encoding=encoding, newline='') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df42c5b1952e3a3a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1612

    with open(ofilename_tmp, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #caa8694f0618a9b6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1627

        with open(dst, 'rb') as f1, open(dst_tmp, 'rb') as f2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a7e88838a3017ca — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1717

            with open(args_file, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ebcc2423eebad335 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:2429

        with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1452644155437af8 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:2490

    return int(os.environ.get('MESON_RSP_THRESHOLD', limit))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65832f1e6d59fa5c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/vsenv.py:31

    if os.environ.get('OSTYPE') == 'cygwin':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ac655fcf5d878c1 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/vsenv.py:33

    if 'MESON_FORCE_VSENV_FOR_UNITTEST' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa1c915f9fa7bc37 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/vsenv.py:36

        if 'VSINSTALLDIR' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd49e7a916ef9f67 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/vsenv.py:51

    root = os.environ.get("ProgramFiles(x86)") or os.environ.get("ProgramFiles")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a08708636826bf37 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/vsenv.py:98

        with open(env_file.name, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f083afe3a90dfc98 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/vsenv.py:101

            os.environ[k] = v

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #32d24c422fa68253 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:121

        return T.cast('http.client.HTTPResponse', urllib.request.urlopen(req, timeout=REQ_TIMEOUT, context=ssl_truststore()))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #dcfffb3f26e5b1b9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:172

    with open(wrapfile, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #663d4338e63b82dd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:285

        with open(filename, 'r', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f614132d38754620 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:344

            with open(self.get_hashfile(subproject_directory), 'w', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc9421655770a164 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:378

        self.cachedir = os.environ.get('MESON_PACKAGE_CACHE_DIR') or os.path.join(self.subdir_root, 'packagecache')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5df11380adff87e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:539

                with open(main_fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #478b5b566860fce6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:730

            with open(hashfile, 'r', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #2284ccb9f0946ec4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:822

                resp = urllib.request.urlopen(req, timeout=REQ_TIMEOUT, context=ssl_truststore())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #c480d9eb437384f1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:861

        with open(path, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bcaf35fa4dbebe18 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wraptool.py:102

    with open(wrapfile, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b32ea189df13653d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wraptool.py:207

    with open(os.path.join(subproject_dir_name, 'wrapdb.json'), 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7984db990cdd1073 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/createmsi.py:234

        with open(self.main_xml, 'w') as open_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #116ad777a44e5afe — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/createmsi.py:237

        with open(self.main_xml) as open_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f747d43ba10f27e6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/createmsi.py:240

        with open(self.main_xml, 'w') as open_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b97f9deefceaf8a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/createpkg.py:94

        with open(self.distribution_file, 'w') as open_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ff966a9d042370c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/mpackage.py:42

version_lines = pathlib.Path(relfile).read_text().split('\n')[:-1]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64d75df15335dd1a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/mpackage.py:59

    myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bbb6fdb2592538f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/mpackage.py:62

    pathlib.Path(relfile).write_text('\n'.join(version_lines) + '\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #33fc2bf407c1e9f7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_cross_test.py:40

        data = json.loads(cf_path.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e546a5bc805b5532 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_cross_test.py:43

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f1384aa86a3ae82 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_format_tests.py:19

    lines = file.read_bytes().split(b'\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b5fdf654285dc93 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:62

        self.orig_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c41eee31bb15ea4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:64

        os.environ['MESON_COMMAND_TESTS'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a4e13fd68026e7d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:75

        os.environ.clear()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #436579f326595230 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:76

        os.environ.update(self.orig_env)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #888799bd8a22491d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:133

        os.environ['PATH'] = str(bindir) + os.pathsep + os.environ['PATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dca838c9ff9f7eb4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:151

        os.environ['PYTHONPATH'] = os.path.join(str(pylibdir), '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #124586921cdd19a5 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:152

        os.environ['PATH'] = str(bindir) + os.pathsep + os.environ['PATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1ed53b56988f332 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:163

            os.environ['PYTHONPATH'] = os.pathsep.join(PYTHONPATHS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76ac148edea9c465 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:196

        wrapper.write_text('#!/bin/sh\n\nmeson.real "$@"', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c857ea51c60e906b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:219

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09af1c6e09b367ad — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:221

        with open(script_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46eeb58faa24c3d6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_mypy.py:170

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a93e80fe5dbea3f0 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:278

        self.env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c707ea1cec1006af — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:310

print_debug = 'MESON_PRINT_TEST_OUTPUT' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f973e0112fdf02c2 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:311

under_ci = 'CI' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa1f763595f01190 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:312

raw_ci_jobname = os.environ.get('MESON_CI_JOBNAME', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eebcf76dd54acf51 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:826

            if skip_env_var in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f8554113e7c9ee6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:837

        test_def = json.loads(test_def_file.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c988b18580848f65 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:1042

    skip_cmake = ((os.environ.get('compiler') == 'msvc2015' and under_ci) or

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16db615e1b742971 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:1099

    with open(txtname, 'w', encoding='utf-8', errors='ignore') as lf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c48f5f781907ccad — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:1636

    if 'VSCMD_VER' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2cbed05b36395b86 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:1637

        print('VSCMD version', os.environ['VSCMD_VER'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #920f8a6906c02a7b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:52

    NINJA_1_12_OR_NEWER = bool(int(os.environ['NINJA_1_12_OR_NEWER']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e891ba0b4311b04 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:53

    NINJA_CMD = [os.environ['NINJA']]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77e4e2371392d0dc — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:63

    os.environ['NINJA_1_12_OR_NEWER'] = str(int(NINJA_1_12_OR_NEWER))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d09b1912493c669 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:64

    os.environ['NINJA'] = NINJA_CMD[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8b5f8b7295a3748 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:72

os.environ['PYTHONWARNDEFAULTENCODING'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4700850c9ab5b0e0 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:74

os.environ['MESON_RUNNING_IN_PROJECT_TESTS'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db8561dad0d9eef5 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:118

    if not os.environ.get('MKLROOT', '').strip():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5c43574aa17fb9c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:120

    if (os.environ.get('CC') == 'icl' or

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ee5a3bc19554caf — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:121

            os.environ.get('CXX') == 'icl' or

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f22d788d16b2ab7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:122

            os.environ.get('FC') == 'ifort'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ccb5c4ef3f40aeb — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:131

                 'Please try using the Intel shell.'.format(os.environ.get('MKLROOT')))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1830e5c6aff81f8a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:173

if 'MESON_EXE' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1adc95c266338971 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:174

    meson_exe = mesonlib.split_args(os.environ['MESON_EXE'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31ed1a9d3f514aae — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:233

            with open(f, encoding='utf-8') as o:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d320e5f81cc9a1ec — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:301

    with mock.patch.dict(os.environ, env or {}), mock.patch.object(sys, 'stdout', stdout), mock.patch.object(sys, 'stderr', stderr):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b61ea68a7c015a0 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:352

    if not mesonlib.is_windows() and not mesonlib.is_haiku() and 'CI' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cf94cb2d6027f84 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:366

    if 'APPVEYOR' in os.environ and os.environ['arch'] == 'x86':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47e1d91ba3145293 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:367

        os.environ.pop('platform')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #acfe8baeda1560e3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:370

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01cf29104554b1a1 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_unittests.py:69

    os.environ['MESON_UNIT_TEST_BACKEND'] = be

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c000fa1616fc692e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_unittests.py:113

        if 'CI' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06133bbb240b2e4e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/skip_ci.py:13

    if is_pr_env not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b6ae8035c3fafff — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/skip_ci.py:16

    elif os.environ[is_pr_env] == 'false':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71f70d28e3628ce8 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/skip_ci.py:22

    if base_env not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da112e909faf119c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/skip_ci.py:25

    return os.environ[base_env]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83965a2015c86bf9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/cmake/11 cmake_module_path/subprojects/cmMod/gen.py:1

with open('main.c', 'w') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a278fa24355dc9fb — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/100 postconf with args/postconf.py:12

input_file = os.path.join(os.environ['MESON_SOURCE_ROOT'], 'raw.dat')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79ba56889bad9a07 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/100 postconf with args/postconf.py:13

output_file = os.path.join(os.environ['MESON_BUILD_ROOT'], 'generated.h')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afbdbcf107ebc3d8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/100 postconf with args/postconf.py:15

with open(input_file, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0bbaa6e35a122d2d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/100 postconf with args/postconf.py:17

with open(output_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90926e4b8a0b28a0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:8

with open(output, 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #829b3e4068bde425 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:11

        with open(i) as ifile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53149991cdf4ea45 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/gen-resx.py:8

with open(ofile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33190b03a41fd167 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/gen.py:8

with open(ifile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9e13f15db939283 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/gen.py:12

with open(ofile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #745f86bba5047c2d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/109 custom target capture/my_compiler.py:9

    with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f2c50fd9b8ef775 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/110 allgenerate/converter.py:8

open(ofile, 'w').write(open(ifile).read())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1151542554ed6b9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/123 custom target directory install/docgen.py:14

    with open(os.path.join(out, name + '.html'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09f0dc443c70a770 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/125 configure file in generator/src/gen.py:8

with open(ifile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2cf34e71fd0d359 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/125 configure file in generator/src/gen.py:12

with open(ofile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f7c57d4d0ea8f96 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/128 build by default targets in tests/write_file.py:5

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8f35aea3308a58b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:5

ifile = open(sys.argv[1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f51d1a7577552e80 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:6

ofile = open(sys.argv[2], 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fccca2b6f6b2ae16 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/13 pch/generated/gen_custom.py:4

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e836eae65f37edf4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/13 pch/generated/gen_generator.py:4

with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c04be002e6dc6d6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/13 pch/generated/gen_generator.py:6

with open(sys.argv[2], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7fa20df3b353bc70 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/139 mesonintrospect from scripts/check_env.py:12

if 'MESONINTROSPECT' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b838935fd10a252c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/139 mesonintrospect from scripts/check_env.py:15

mesonintrospect = os.environ['MESONINTROSPECT']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc9b0c95510bde0a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/139 mesonintrospect from scripts/check_introspection.py:8

if 'MESONINTROSPECT' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1822c09e02f57302 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/139 mesonintrospect from scripts/check_introspection.py:10

if 'MESON_BUILD_ROOT' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7510db90d438efc — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/139 mesonintrospect from scripts/check_introspection.py:13

mesonintrospect = os.environ['MESONINTROSPECT']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e517398e13183f1 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/139 mesonintrospect from scripts/check_introspection.py:16

buildroot = os.environ['MESON_BUILD_ROOT']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3e390f0c0d697da — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/file_contains.py:14

    with open(args.file[0], encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46389a1728c8535e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/generator-deps.py:9

build_dir = Path(os.environ['MESON_BUILD_ROOT'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30212ab2db5c61bf — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/generator-deps.py:10

subdir = Path(os.environ['MESON_SUBDIR'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f1baf6258e64c81 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/generator-without-input-file.py:9

build_dir = Path(os.environ['MESON_BUILD_ROOT'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b07977af7fe9243c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/generator-without-input-file.py:10

subdir = Path(os.environ['MESON_SUBDIR'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a64fdf50645c2338 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/generator.py:9

build_dir = Path(os.environ['MESON_BUILD_ROOT'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3129a6cdcbc2aa95 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/generator.py:10

subdir = Path(os.environ['MESON_SUBDIR'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #774ec7fb2d81631b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/140 custom target multiple outputs/generator.py:11

with open(os.path.join(odir, name + '.h'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #595df8790451375b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/140 custom target multiple outputs/generator.py:13

with open(os.path.join(odir, name + '.sh'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef9ea55c4cdb6a8d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/141 special characters/check_quoting.py:27

    with open(output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10f3b282bd6644a7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/144 link depends custom target/make_file.py:4

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb232250f3ebf7ef — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/152 index customtarget/gen_sources.py:30

    with open(args.header, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1fbc1caacebf850b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/152 index customtarget/gen_sources.py:33

    with open(args.code, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1591e9e6e928c692 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/168 preserve gendir/genprog.py:41

    proto_name = open(ifile_name).readline().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9b12c53caafa33e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/168 preserve gendir/genprog.py:45

    open(h_out, 'w').write(h_templ % (proto_name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #653c706f0a21bb2d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/168 preserve gendir/genprog.py:46

    open(c_out, 'w').write(c_templ % (proto_name, proto_name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #065fa7e02b0f76c9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/169 source in dep/generated/genheader.py:15

funname = open(ifile).readline().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7fcb890c7ec553f9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/169 source in dep/generated/genheader.py:17

open(ofile, 'w').write(templ % funname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #850cbce8c2c17df5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/170 generator link whole/generator.py:14

    with open(hname, 'w') as hfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa10d97b9726ea74 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/170 generator link whole/generator.py:20

    with open(cname, 'w') as cfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0bc596339fcaa1c5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/178 bothlibraries/dummy.py:7

    Path(sys.argv[1]).write_text('Hello World\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54e30b4e214183d7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/179 escape and unicode/file.py:6

with open(sys.argv[1]) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e069025ed80a0a0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/179 escape and unicode/file.py:9

with open(os.path.join(sys.argv[3]), 'w', errors='replace') as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2c6510a3e031612 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/182 find override/subdir/converter.py:13

d = pathlib.Path(ifilename).read_text().split('\n')[0].strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51d9374e362f5a65 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/182 find override/subdir/converter.py:15

pathlib.Path(ofilename).write_text(ftempl % d)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #798d8ec4472d0de6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/186 test depends/gen.py:7

    with open(sys.argv[1], 'w') as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #893efc8361befc5a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/195 generator in subdir/com/mesonbuild/tooldir/genprog.py:41

    proto_name = open(ifile_name).readline().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1b67554792bf80d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/195 generator in subdir/com/mesonbuild/tooldir/genprog.py:45

    open(h_out, 'w').write(h_templ % (proto_name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b35d5f8d7f20939 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/195 generator in subdir/com/mesonbuild/tooldir/genprog.py:46

    open(c_out, 'w').write(c_templ % (proto_name, proto_name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1cdcc608480adf93 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/202 custom target build by default/docgen.py:11

    with open(os.path.join(out, name + '.txt'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b322fc10ebeb9e6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/208 link custom/custom_stlib.py:73

    c_file.write_text(contents)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47f580a44d69117f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/209 link custom_i single from multiple/generate_conflicting_stlibs.py:70

        c_file.write_text(content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb2d951b828a504a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/210 link custom_i multiple from multiple/generate_stlibs.py:72

        c_file.write_text(content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fc1865eb49624fb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/216 custom target input extracted objects/check_object.py:16

    with open(sys.argv[2], 'wb') as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ebb8edda0da9493 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/216 custom target input extracted objects/libdir/gen.py:3

with open(sys.argv[1], 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #955f629fed786987 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/22 object extraction/check-obj.py:12

    with open('compile_commands.json') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f324ccfe2ebdf681 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/226 link depends indexed custom target/check_arch.py:12

with open(dummy_output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4ba953c84c16790 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/226 link depends indexed custom target/make_file.py:4

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53b845dda41d21d9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/226 link depends indexed custom target/make_file.py:7

with open(sys.argv[2], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e5c99947da23c48 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/227 very long command line/codegen.py:6

Path(sys.argv[2]).write_text(
    'int func{n}(void) {{ return {n}; }}'.format(n=sys.argv[1]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4fd696b2d1440a48 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:2

with open('x.c', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ead035492f6240c6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:4

with open('y', 'w'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2a16d59426e8b7b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/242 custom target feed/my_compiler.py:13

    with open(sys.argv[1], 'w+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5dba7913d6b9a78 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:5

assert(Path(sys.argv[1]).read_text() == 'stage1\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #619c82fb297c1585 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:6

Path(sys.argv[2]).write_text('stage2\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2b96e5861296fe1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:5

assert(Path(sys.argv[1]).read_text() == 'stage2\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #428006d786ad7ac9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:6

Path(sys.argv[2]).write_text('int main(void){}\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f22d1630cac9df75 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/269 configure file output format/compare.py:3

with open(sys.argv[1], 'r', encoding='utf-8') as f, open(sys.argv[2], 'r', encoding='utf-8') as g:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ba56c0a9406d1f7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/271 env in generator.process/generate_main.py:5

ENV_VAR_VALUE = os.environ.get('ENV_VAR_VALUE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c97667e645f700d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/271 env in generator.process/generate_main.py:8

with open(sys.argv[1], 'r') as infile, \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50e1fdf6067971c9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/271 env in generator.process/generate_main.py:9

     open(sys.argv[2], 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da0c3786f3f1a8fe — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/274 customtarget exe for test/generate.py:12

    with open(a, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e79a113f32d98f83 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/275 environment/testenv.py:9

if os.environ.get(key) == expected:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85bac43e56762e2d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/275 environment/testenv.py:12

sys.exit(f'Expected {expected!r}, was {os.environ.get(key)!r}')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #78d250d09674eaa4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/33 run program/check-env.py:5

assert os.environ['MY_PATH'] == os.pathsep.join(['0', '1', '2'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26a6b56d2f30ed87 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/41 test args/tester.py:6

assert os.environ['MESONTESTING'] == 'picklerror'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ace36511415842e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/41 test args/tester.py:7

assert os.environ['TEST_LIST_FLATTENING'] == '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #694b5cb3b9e13bfb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/41 test args/tester.py:9

with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3ba94a53b98f4e8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/49 custom target/depfile/dep.py:12

with open(output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d84c8235783a9754 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/49 custom target/depfile/dep.py:14

with open(depfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef52c7bef5e02760 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/49 custom target/my_compiler.py:11

    assert os.environ['MY_COMPILER_ENV'] == 'value'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a5aaa0864f13241 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/49 custom target/my_compiler.py:16

    with open(args[1].split('=', 1)[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afa2afcff43498a8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/49 custom target/my_compiler.py:21

    with open(args[2].split('=', 1)[1], 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa904025fd414319 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/50 custom target chain/my_compiler.py:9

    with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #123150a9b356d234 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/50 custom target chain/my_compiler.py:14

    with open(sys.argv[2], 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc62de0471c66629 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/50 custom target chain/my_compiler2.py:9

    with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25a6317f6a509503 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/50 custom target chain/my_compiler2.py:14

    with open(sys.argv[2], 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be6329332ac2ce39 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/50 custom target chain/usetarget/subcomp.py:5

with open(sys.argv[1], 'rb') as ifile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff93ba166a0a797d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/50 custom target chain/usetarget/subcomp.py:6

    with open(sys.argv[2], 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d181739321d6f001 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:6

assert 'MESON_SOURCE_ROOT' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a199da8d6c38298d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:7

assert 'MESON_BUILD_ROOT' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #506b26c3bd7c58cc — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:8

assert 'MESON_SUBDIR' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee9b1152bfb1fcb5 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:9

assert 'MESONINTROSPECT' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c61cdacf4222cb79 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:10

assert 'MY_ENV' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99faa49ddac1d933 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:15

env_source_root = Path(os.environ['MESON_SOURCE_ROOT']).resolve()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35247992a056e631 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:16

env_build_root = Path(os.environ['MESON_BUILD_ROOT']).resolve()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f83aaaa4c1bc992d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:17

env_current_source_dir = Path(env_source_root, os.environ['MESON_SUBDIR']).resolve()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84c9db01a234baa4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/converter.py:5

with open(sys.argv[1], 'rb') as ifile, open(sys.argv[2], 'wb') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f991bc4475f8e32 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/fakeburner.py:9

    with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bdf9359332d2c31 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/customtarget.py:12

    with open(os.path.join(args.dirname, '1.txt'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b99ca8c241d783f5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/customtarget.py:14

    with open(os.path.join(args.dirname, '2.txt'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba2fc30966f95565 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/myinstall.py:7

prefix = os.environ['MESON_INSTALL_DESTDIR_PREFIX']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd99463beb887bb4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/myinstall.py:8

dry_run = bool(os.environ.get('MESON_INSTALL_DRY_RUN'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca3fc38eb83b249f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/myinstall.py:30

                with open(os.path.join(dirname, name), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f47f2bf39b706b24 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/src/myinstall.py:6

prefix = os.environ['MESON_INSTALL_DESTDIR_PREFIX']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #685016444f7acc8f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/src/myinstall.py:13

with open(os.path.join(dirname, sys.argv[2] + '.in'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36e4dfd64b4e8bc3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/54 custom target source output/generator.py:10

with open(os.path.join(odir, 'mylib.h'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb53745d36cbc8c9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/54 custom target source output/generator.py:12

with open(os.path.join(odir, 'mylib.c'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bb1e99017fd60f5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/57 custom header generator/makeheader.py:9

with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4429649134e07436 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/57 custom header generator/makeheader.py:11

with open(sys.argv[2], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c9afdf18fa4c5ff — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/58 multiple generators/mygen.py:9

with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #684b7d5ae7ed6468 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/58 multiple generators/mygen.py:16

with open(outhdr, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b31a9ec77ae0c48 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/58 multiple generators/mygen.py:18

with open(outsrc, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #723fdab558f6d169 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/65 build always/version_gen.py:13

    with open(infile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdb8642f59afd3bf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/65 build always/version_gen.py:16

        with open(outfile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64507793f0fe5109 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/65 build always/version_gen.py:22

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0663e57674a6f390 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/69 configure file in custom target/src/mycompiler.py:5

with open(sys.argv[1]) as ifile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #980cfcfddf5070dd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/69 configure file in custom target/src/mycompiler.py:8

with open(sys.argv[2], 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8b7a68aa1011a2c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:9

with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #188d56eaa4a219da — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:11

with open(sys.argv[2], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #828eea874d1e0cd8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen2.py:9

with open(files[0]) as ifile, open(sys.argv[2], 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f0e5b039c74e8f0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/8 install/gendir.py:8

open(fname, 'w').close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03918b82763afe97 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/86 private include/stlib/compiler.py:29

with open(cfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf8492dbeabc0f85 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/86 private include/stlib/compiler.py:31

with open(hfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a241c3c868e32a31 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/88 dep fallback/subprojects/boblib/genbob.py:5

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c963a778d8fcad0d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/90 gen extra/srcgen.py:21

with open(options.input) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2992555221278bb5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/90 gen extra/srcgen.py:26

with open(options.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f48a0b118d2be18 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/90 gen extra/srcgen2.py:17

with open(options.input) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #806f4df6d0837404 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/90 gen extra/srcgen2.py:22

with open(output_c, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4e4ad8c9dade3d4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/90 gen extra/srcgen2.py:31

with open(output_h, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90b5e2ea2420a699 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/90 gen extra/srcgen3.py:12

with open(options.input) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca5baa0a5032c490 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/92 test workdir/subdir/checker.py:5

data = open(sys.argv[1], 'rb').read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f177238baee48dd0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:10

with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abbc7a5cb806ba15 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:43

with open(outc, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef1274e5c31bc5dc — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:50

with open(outh, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d41a8deda05adc02 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:57

with open(tmpc, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #594f71665e37b1e2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:68

with open(tmpc, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b8f7dea71b3f937 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/99 postconf/postconf.py:10

input_file = os.path.join(os.environ['MESON_SOURCE_ROOT'], 'raw.dat')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2e6ceee48bb4021 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/99 postconf/postconf.py:11

output_file = os.path.join(os.environ['MESON_BUILD_ROOT'], 'generated.h')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d038a6253dbe66ea — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/99 postconf/postconf.py:13

with open(input_file, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfd71785f9cf6d81 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/99 postconf/postconf.py:15

with open(output_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #773d56d0d957fbd4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/cython/2 generated sources/gen.py:10

with open(args.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb04a6e1f4124021 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/cython/2 generated sources/generator.py:11

with open(args.input) as i, open(args.output, 'w') as o:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3267c630766eeea9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/cython/2 generated sources/libdir/gen.py:10

with open(args.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be5dcf157dc84a39 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/39 custom target plainname many inputs/catfiles.py:6

with open(out, 'wb') as o:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be0fe4442afec9b3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/39 custom target plainname many inputs/catfiles.py:8

        with open(infile, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a26f7f10ecadb02 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/40 custom target outputs not matching install_dirs/generator.py:11

with open(os.path.join(odir, name + '.h'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b33f2d04bc7d3f92 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/40 custom target outputs not matching install_dirs/generator.py:13

with open(os.path.join(odir, name + '.c'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06941489e6db135c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/40 custom target outputs not matching install_dirs/generator.py:15

with open(os.path.join(odir, name + '.sh'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f544cc568e0f03b0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/88 custom target install data/preproc.py:11

with open(outf, 'wb') as o:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4a4756f3dbd43ad — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/88 custom target install data/preproc.py:12

    with open(inf, 'rb') as i:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f31e3501108b4f84 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/format/5 transform/file_compare.py:16

    with open(args.actual, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0ce02ca1f30640e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/format/5 transform/file_compare.py:18

    with open(args.expected, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2f2af556afbe626 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/fortran/7 generated/gen.py:36

    with open(args.input, 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17f494a81a440a87 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/fortran/7 generated/gen.py:41

    with open(args.output, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70825c55c0c31b60 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/frameworks/10 gtk-doc/include/generate-enums-docbook.py:52

        with open(sys.argv[1], 'w') as doc_out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77c09bec38a15ca8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/frameworks/4 qt/subfolder/generator.py:5

    with open(sys.argv[1], "w") as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec6febb85eb574ef — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/frameworks/6 gettext/data3/verify.py:12

with open(fname, 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23617d5a01b93cd7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/osx/2 library versions/require_pkgconfig.py:6

if 'CI' in os.environ or shutil.which('pkg-config'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d125575f2ea368a7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/python/4 custom target depends extmodule/blaster.py:25

    with open(options.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #030d3876b97f750c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/python3/4 custom target depends extmodule/blaster.py:26

    with open(options.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ccdccd2bdbab3ea1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/rust/11 generated main/gen.py:12

    with open(args.out, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b38fbbe4395ce13a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/rust/19 structured sources/gen.py:12

    with open(args.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #183b4d2f0c84cf5d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/2 testsetups/envcheck.py:5

assert 'PATH' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e388265f3fb76e40 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/26 install umask/myinstall.py:6

prefix = os.environ['MESON_INSTALL_DESTDIR_PREFIX']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0b144a927880b44 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/26 install umask/myinstall.py:16

with open(os.path.join(dirname, sys.argv[2]), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #672e5fbb74cb91db — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/35 dist script/replacer.py:10

source_root = pathlib.Path(os.environ['MESON_DIST_ROOT'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e76e52c779827274 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/35 dist script/replacer.py:14

contents = modfile.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04afe78e8719ca3f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/35 dist script/replacer.py:16

modfile.write_text(contents)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #986dd712394cc904 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/35 dist script/subprojects/sub/dist-script.py:11

source_root = pathlib.Path(os.environ['MESON_PROJECT_DIST_ROOT'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c580d5f35956705c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/35 dist script/subprojects/sub/dist-script.py:12

mesonrewrite = shlex.split(os.environ['MESONREWRITE'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f1e0c8b50fcf703 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/45 native dep pkgconfig var/cross_pkgconfig.py:7

environ = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9200c8d64954b289 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/48 testsetup default/envcheck.py:5

assert 'ENV_A' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4fe48017172c745 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/48 testsetup default/envcheck.py:6

assert 'ENV_B' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0d31199c6b6fd1a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/48 testsetup default/envcheck.py:7

assert 'ENV_C' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d916955689111bc4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/48 testsetup default/envcheck.py:9

print('ENV_A is', os.environ['ENV_A'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67cf3ce9526fed8d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/48 testsetup default/envcheck.py:10

print('ENV_B is', os.environ['ENV_B'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0391dfb2f0e435aa — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/48 testsetup default/envcheck.py:11

print('ENV_C is', os.environ['ENV_C'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df9c6f71ad7a4d37 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/67 test env value/test.py:6

assert os.environ['TEST_VAR'] == sys.argv[1]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2071621caee8d1fd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/70 cross test passed/exewrapper.py:15

    defined = 'MESON_EXE_WRAPPER' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a92d8d587288cdd3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/70 cross test passed/exewrapper.py:18

        print(os.environ, file=sys.stderr)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cfea42d6c8d6acd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/90 devenv/test-devenv.py:5

assert os.environ['MESON_DEVENV'] == '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #186403ad0dd89e15 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/90 devenv/test-devenv.py:6

assert os.environ['MESON_PROJECT_NAME'] == 'devenv'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1455f88a75395d8f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/90 devenv/test-devenv.py:7

assert os.environ['TEST_A'] == '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2deed83e790d1e2 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/90 devenv/test-devenv.py:8

assert os.environ['TEST_B'] == '0+1+2+3+4'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f764bfe3c2b70e8 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/90 devenv/test-devenv.py:9

assert os.environ['TEST_C'] == os.pathsep.join(['/prefix', '/suffix'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #859491ffd483d7d8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/94 custominc/easytogrepfor/genh.py:5

f = open(sys.argv[1], 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #568dd84be7fa51fb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/98 install all targets/script.py:6

  with open(f, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #352fb9340123f30e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/98 install all targets/subdir/script.py:6

  with open(f, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bce0f01fd773b1df — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/vala/10 mixed sources/c/writec.py:11

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed9a2dc24246985a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/vala/8 generated sources/src/write_wrapper.py:11

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3632e9311da984e7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/windows/10 vs module defs generated custom target/subdir/make_def.py:4

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddf262c7941e23fa — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/windows/12 resources with custom targets/res/gen-res.py:5

with open(sys.argv[1]) as infile, open(sys.argv[2], 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #297eb2b99e61c392 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/windows/14 resources with custom target depend_files/ico/gen-ico.py:5

with open(sys.argv[1], 'rb') as infile, open(sys.argv[2], 'wb') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3cf964bf71bf41a2 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/windows/16 gui app/gui_app_tester.py:8

    if 'CI' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a6c33d1af81691ec — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/ac_converter.py:362

with open(sys.argv[1], encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #09dac69c471cd0eb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/boost_names.py:69

    raw = jamroot.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #25dafed1e4588282 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/boost_names.py:82

    raw = jamfile.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #66efc480d35a3282 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/boost_names.py:176

    data = json.loads(meta_file.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #fbdb476f82b8891d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/tools/build_website.py:30

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #53774622af6045b2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/dircondenser.py:46

    with open(sourcefile, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #3eb1326c3d879689 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/dircondenser.py:50

    with open(sourcefile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #9a7b4214cf59c2a9 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/tools/regenerate_docs.py:23

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ebdb8d08aa700b19 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/regenerate_docs.py:121

            with open(output_dir / (cmd+'_'+typ+'.inc'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #a434b029fcb891eb — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/vendored-meson/meson/tools/regenerate_docs.py:125

    url = urlopen('https://wrapdb.mesonbuild.com/v2/releases.json')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #502bbd63f694ea90 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/regenerate_docs.py:127

    with open(output_dir / 'wrapdb-table.md', 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6d442b30c7eed938 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/regenerate_docs.py:160

        with open(output_dir/dummy_output_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72404d430c5a3723 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/__init__.py:12

        if v in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #909514ab0c6f8527 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/__init__.py:13

            del os.environ[v]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f7d4d9b26cc45e6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/__init__.py:16

    os.environ.setdefault('MESON_UNIT_TEST_BACKEND', 'ninja')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #786114d60ad6471f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:136

                with open(fin, 'wb') as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c96e423ce10b6ae — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:140

                    with open(fout, 'rb') as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef169a4fa160263b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:258

                with open(os.path.join(self.builddir, header), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc5e54946fc0e827 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:262

                with open(os.path.join(cmake_builddir, header), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #921570c5466065e7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:541

        text_log = Path(self.logdir, 'testlog.txt').read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6e64f52f299fea2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:543

        json_log = json.loads(Path(self.logdir, 'testlog.json').read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #454977a7f684d931 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:741

        with open(os.path.join(self.logdir, 'testlog.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc8bd923d3ee4866 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:760

        with open(os.path.join(self.logdir, 'testlog.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d988fb2e38fdd7c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:800

        with open(os.path.join(self.logdir, 'testlog.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eee4b2730b66e02a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:805

        with open(os.path.join(self.logdir, 'testlog-valgrind.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa864b5f9688b7af — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:825

        with open(os.path.join(self.logdir, 'testlog-good.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2730741433d0bce4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:830

        with open(os.path.join(self.logdir, 'testlog-good.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #667242e3877382e9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:866

        with open(os.path.join(self.logdir, 'testlog.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca48aaaf6181e1ef — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:871

        with open(os.path.join(self.logdir, 'testlog-mydefault.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0a870191e7dabce — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:876

        with open(os.path.join(self.logdir, 'testlog-other.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #603a52191cf638d4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:897

            with open(os.path.join(self.logdir, 'testlog.json'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ba0f61dcfae2a67 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1057

        if mesonbuild.envconfig.detect_msys2_arch() and ('MESON_RSP_THRESHOLD' in os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85e0e672086d3a78 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1122

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26fee55636d87149 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1143

            if evar in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c43b0ba106c02ae0 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1156

                        evalue = os.environ.pop(evar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b587f9e0b20f09f1 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1237

                    if 'arch' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c5a894bc68f757d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1238

                        if os.environ['arch'] == 'x64':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #205c4e34e396c537 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1249

                os.environ[evar] = ' '.join(quote_arg(w) for w in wrappercc)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e4f93e04920726b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1253

                os.environ['AR'] = ' '.join(quote_arg(w) for w in wrapperlinker)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80dbd10336408da5 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1268

                del os.environ['AR']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0217520529516471 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1344

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4445b5910f34893 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1573

            with open(os.path.join(project_dir, '.hg', 'hgrc'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d17aa702ddff77b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1613

        with open(os.path.join(path, 'meson.build'), 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #beae00efdb375944 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1621

            with open(os.path.join(project_dir, 'meson.build'), 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b91e98d6c8e0adaf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1631

            with open(distexe_c, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f2768390b1c317d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1969

                with open(os.path.join(d, 'alexandria.pc'), 'w',
                          encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b928d3ce7d1b5b90 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2011

                with open(os.path.join(d, 'alexandriaConfig.cmake'), 'w',
                        encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e62f5bbe3be9462d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2140

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d26fc3c620a2895c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2148

        os.environ['PKG_CONFIG_LIBDIR'] = self.privatedir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc6196dfb07b15f2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2172

            with open(os.path.join(self.privatedir, name), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e30db770ac01767 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2564

                    with open(os.path.join(tmpdir, 'foo.' + lang), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d670067c4ea94ba7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2570

                    with open(os.path.join(tmpdir, 'Foo.' + lang), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32bcd425c07af9de — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2986

        with open(os.path.join(self.builddir, 'nosubst-nocopy1.txt'), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd467d70094df7df — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2988

        with open(os.path.join(self.builddir, 'nosubst-nocopy2.txt'), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10c061ed68a07cb9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2995

                of = open(mfile, 'w', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a0c573799dd3617 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3215

                            with open(intro_installed_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bb8756c0c8fb115 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3223

        with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4d5e0108e279819 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3226

        with open(filename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ade5f6f7df7b6b72 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3251

        open(filename, 'w', encoding='utf-8').close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3669c0c17d0cd76 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3406

            self.assertNotEqual(Path(testfile).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4aa848aaa48286f7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3407

                                Path(goodfile).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #292515d2ce8550b2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3408

            self.assertNotEqual(Path(testheader).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e2c85664a875239 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3409

                                Path(goodheader).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e8fb1a6ded9317e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3413

            self.assertNotEqual(Path(testfile).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c475373e9778a4ee — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3414

                                Path(goodfile).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e9881bebafed79b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3415

            self.assertNotEqual(Path(testheader).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #881e45470301a42f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3416

                                Path(goodheader).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a41fc1a833a27908 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3419

            with open(includefile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9de945f5d5f7ac79 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3422

            self.assertEqual(Path(testheader).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21f028e6c3d54050 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3423

                             Path(goodheader).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bab94d7604b3c4e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3465

        self.assertNotEqual(Path(testfile).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2767a80dfc603cdf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3466

                            Path(fixedfile).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4717c17e00566bf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3471

        self.assertEqual(Path(testfile).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9a94a15bcdade1e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3472

                         Path(fixedfile).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f90a4c51c8318d1e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3523

        with open(os.path.join(infodir, 'intro-targets.json'), encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13c8dc1e940693d7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3657

            with open(curr, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f41e77a61f2dcad5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3795

            with open(curr, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b560e2c1f3c44f8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3805

        with open(introfile, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63fec0919e713361 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3820

        with open(introfile, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6afbea14f88a7825 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3838

        with open(introfile, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9e45b9bd884b5ff — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3849

        with open(introfile, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ff2ea044a6e15a5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4279

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3a06044f20cfd6a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4296

        with open(doc_path, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #367eca02d16ac19d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4499

            with open(os.path.join(srcdir, 'subprojects', 'wrap_git.wrap'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #715dd474877cd960 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4516

            with open(os.path.join(srcdir, 'subprojects', 'wrap_git.wrap'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f052417084e997eb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4553

        with open(machinefile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11e4ed96fa9bca65 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4582

        with open(redirect_wrap, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff102ae08cda481c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4591

        with open(redirect_wrap, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #658d152afbc9bc9f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4600

        with open(redirect_wrap, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8cb910e4165915f7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4609

        with open(redirect_wrap, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #434ddcf876d14c13 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4614

        with open(real_wrap, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86ce5af0f2415ee2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4741

        o = Path(fname).read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #713efae9459fc132 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4800

        with mock.patch.dict(os.environ, {'CFLAGS': '-DCFLAG', 'LDFLAGS': '-flto'}):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92ed368464a6e06f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4991

        with open(introfile, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c494ebd00486d5d0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5324

        with open(gen_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #406e9a841495b8db — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5332

        with open(gen_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a0cae7f3f5c0210 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5409

        olddata = filename.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0dd66db5eb7b5f30 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5414

            newdata = filename.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30342f83c8b4a289 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5423

            newdata = filename.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2bc3086bde899161 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5585

        with open(os.path.join(testdir, 'mod1.f90'), 'a', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1559dc4800b06dd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5595

        with open(os.path.join(testdir, 'test.f90'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0dad6099b462fee — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:72

        cls.backend_name = os.environ.get('MESON_UNIT_TEST_BACKEND', 'ninja')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ff0c52921362dc8 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:107

        cls.env_patch = mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #592028572cb1a0ec — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:110

        os.environ['COLUMNS'] = '80'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f86ef769cc5b6a71 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:111

        os.environ['PYTHONIOENCODING'] = 'utf8'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea9e79802681fa40 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:120

        if (is_windows() or is_cygwin()) and not os.environ.get('MESON_FORCE_UNITTEST_IN_TMP', '0') == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4560b87a382b7dc3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:160

        return open(log, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a6c66a0b0b4927a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:186

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e3148af9864b6f5 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:290

            with mock.patch.dict(os.environ, override_envvars):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af8126ec4ac8a1a9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:341

            with open(os.path.join(self.builddir, 'compile_commands.json'), encoding='utf-8') as ifile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ed0aac8275c625d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:355

                with open(rsp, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7223037347eb5d3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:188

            with open(filename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58883c3bda25df0f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:328

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #804779fdb52fd7ba — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:346

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61269c50f1b78600 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:360

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdee7b3fa5066729 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:397

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ff8cbe48571eb45 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:414

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1785c076dfb6910d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:438

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08979113f8ab088b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:454

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49c5def0fbacabf9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:494

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #998adc988ac4cd0f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:512

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd746f1bfaedff2b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:546

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ce657412885ebaf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:566

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #78a914e9c9d5b7a2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/darwintests.py:59

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c895c1f2804c301d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/darwintests.py:70

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a859ed3f7a49c91 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:71

        with open('docs/markdown/Builtin-options.md', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #349fbc9e287717c7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:105

        with open('docs/markdown/Builtin-options.md', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb26ac7c8bfff1d2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:176

        with open("docs/markdown/Reference-tables.md", encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae596e504ebe057b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:192

        with open("docs/sitemap.txt", encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60102b779715c3dd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:206

        with open("docs/theme/extra/templates/navbar_links.html", encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f877cd922040b84 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:218

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9fafe3c9d739e65e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:228

        del os.environ['MESON_RUNNING_IN_PROJECT_TESTS']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c55c66891eb77a4a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:231

        with open('data/syntax-highlighting/vim/syntax/meson.vim', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fb13fe795332027 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:236

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8bb6e273f5310900 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:246

        del os.environ['MESON_RUNNING_IN_PROJECT_TESTS']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e17bec16ea4b57b4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/failuretests.py:93

        with open(self.mbuild, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #beacfb09880fe585 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/failuretests.py:102

            with open(self.moptions, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72d1803503507707 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/failuretests.py:119

        with open(self.mbuild, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8ea1c6bf9fb134e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/featurestests.py:85

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3e05e66baf6f992 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/featurestests.py:96

        os.environ.pop('MESON_RUNNING_IN_PROJECT_TESTS', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #244fa617454a5bad — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/helpers.py:34

IS_CI = os.environ.get('MESON_CI_JOBNAME', 'thirdparty') != 'thirdparty'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a79c69e14045720 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/helpers.py:211

            if not IS_CI and key in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8505e8077f3d0b80 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/helpers.py:213

            with mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93d0fb2d0ac89a7f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/helpers.py:214

                os.environ.pop(key, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb1192a7fafecc10 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/helpers.py:301

    if os.environ.get('MESON_CI_JOBNAME') == name:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96e9c9b735d03a62 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/internaltests.py:727

            script_path.write_text('import sys\nprint(sys.argv[1])\n', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e021050b06c3c82a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/internaltests.py:1081

        with open('data/test.schema.json', 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09f983a913e299c5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/internaltests.py:1092

                schema_validator(json.loads(p.read_text(encoding='utf-8')))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c3908ed060cc739 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:42

PKG_CONFIG = os.environ.get('PKG_CONFIG', 'pkg-config')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d8d86db4685ef25 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:58

    pkgconf = os.environ.get('PKG_CONFIG_PATH')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd577d0dd6242799 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:156

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6ae0d28ee95def8 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:168

        os.environ['PKG_CONFIG_LIBDIR'] = self.privatedir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c633ef2ed1813d3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:224

        with open(os.path.join(privatedir2, 'dependency-test.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85c96873044ef537 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:255

        with open(os.path.join(privatedir1, 'simple2.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44d23cbfce458223 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:260

        with open(os.path.join(privatedir1, 'simple3.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47dced4d90bff40b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:264

        with open(os.path.join(privatedir1, 'simple5.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47a117d404a033dd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:268

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2418525364491ea4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:274

        os.environ['PKG_CONFIG_LIBDIR'] = os.path.join(self.builddir, 'meson-uninstalled')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07307ba05ebd6f38 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:276

            os.environ['PATH'] += os.pathsep + self.builddir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63572023f7f452c8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:287

        with open(os.path.join(self.privatedir, 'somename.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b342a50769a72b12 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:824

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6cbb92bb48fe449 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:849

        with open(os.path.join(self.builddir, 'build.ninja'), encoding='utf-8') as ifile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #790bff6c017b3526 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1132

            myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #566389f63c5a20b7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1143

            myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa8e7ddf5667bbd6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1272

        myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #220e40e51bf5cede — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1287

        myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15ce854a149691c1 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1300

        myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55446589edd30ed7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1312

        with open(os.path.join(self.builddir, 'build.ninja'), encoding='utf-8') as bfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5c93ea0f4f5cb3b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1331

        with open(os.path.join(self.builddir, 'build.ninja'), encoding='utf-8') as bfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3eb0b09716407a6d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1344

        with open(os.path.join(self.builddir, 'build.ninja'), encoding='utf-8') as bfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f3eaefbb9e94108 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1430

        with open(os.path.join(self.builddir, 'build.ninja'), encoding='utf-8') as bfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ac90390864814af — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1495

                os.pathsep + os.environ['PATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e36181c70e89222 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1545

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3ac2d3397fecd75 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1554

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #421ec87e011406e8 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1653

            with mock.patch.dict(os.environ, {envvar: name}):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8c0bfe08a653bcb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1704

        with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b527c89d4a56822 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1728

        with open(wrap_filename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7aa959f6436ef614 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1756

            with open(os.path.join(d, 'meson.build'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #479b0a2cca5d5176 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1767

        with open(os.path.join(self.privatedir, 'bar1.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87985a02490cdab0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1770

        with open(os.path.join(self.privatedir, 'bar2.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68b481b4579589bd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1888

        with open(os.path.join(self.builddir, 'build.ninja'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #145dbf9098c5e1de — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:80

                home = PurePath(os.environ['HOME'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #355e083c278513a1 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:84

                if 'USER' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a24916ae99e6612f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:86

                home = PurePath('C:\\', 'Users', os.environ['USER'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e25a208b6abdd452 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:112

        with open(filename, 'wt', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7517036b75b3024 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:134

        with open(filename, 'wt', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ae63b3d6b63a058 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:172

        with open(batfile, 'wt', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95a7f68ce9cd03aa — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:206

                with open(fifo, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79a800dc74953a29 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:793

    @skipIf('MESON_EXE' in os.environ, 'MESON_EXE is defined, cannot use mocking.')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0fa947a1819cbe7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:808

                with mock.patch.dict(os.environ, {'XDG_DATA_HOME': d}):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77557cafaea619d9 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:813

                with mock.patch.dict(os.environ, {'XDG_DATA_DIRS': d}):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e3d2054d5d2add6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:814

                    os.environ.pop('XDG_DATA_HOME', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08d2509ea2f6c341 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:829

                with mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #746d23983a1b3e28 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:830

                    os.environ.pop('XDG_DATA_HOME', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c317b350033b393b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:843

        with open(filename, 'wt', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec0e5ca6d735dd71 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:943

                    del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #614e302863ef278f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:104

                with open(os.path.join(self.builddir, 'meson-info', 'intro-targets.json'), 'r', encoding='utf-8') as tgt_intro:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #df141c9dc0c0bbb4 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:141

            with urllib.request.urlopen('https://wrapdb.mesonbuild.com') as p:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #683c3cbd9dd0212f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:174

        with open(os.path.join(testdir, 'test.json'), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88a7ad64a6b6124d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:295

        with open(os.path.join(self.builddir, 'meson-logs', 'profile-startup-modules.json'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d0924f7c6353cb9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:298

        with open(os.path.join(testdir, 'expected_mods.json'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef69a33d2af7d38e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:387

        with open(editorconfig, 'w', encoding='utf-8') as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b08eed8e85a5cf1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:453

        with open(os.path.join(testdir, 'meson_options.txt'), 'a', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd247c03d9d6f28d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:462

        with open(os.path.join(testdir, 'meson_options.txt'), 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c35d9c0bd2146ba — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:464

        with open(os.path.join(testdir, 'meson_options.txt'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49165ad3387fc018 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:487

        with open(os.path.join(testdir, 'meson_options.txt'), 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5317395c5f4ead1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:489

        with open(os.path.join(testdir, 'meson_options.txt'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #785b1f24f11b4398 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:502

        with open(os.path.join(testdir, 'meson_options.txt'), 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee25a3eef0066165 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:504

        with open(os.path.join(testdir, 'meson_options.txt'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61e72d717c3ac9e7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:527

        with open(os.path.join(testdir, 'meson.options'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a622bd4e395e18d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:536

        with open(os.path.join(testdir, 'meson_options.txt'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04a8ecc966cfc828 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:545

        with open(os.path.join(testdir, 'subprojects/subproject/meson_options.txt'), 'a', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #556b5edfaff4bc9d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:600

            Path(d, 'bar.c').write_text('int main() {}', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58db8e00049d21e9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:605

            meson_build = Path(d, 'meson.build').read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf5acf852a480df2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:612

            Path(d, 'bar.c').write_text('int bar() {}', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #703f69a5a78233a3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:613

            Path(d, 'foo.c').write_text('int main() {}', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ec2bc793d29739c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:617

            meson_build = Path(d, 'meson.build').read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20009a127e2a1f6c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:624

            Path(d, 'bar.c').write_text('int main() {}', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d050f5ff47aaf14d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:629

            meson_build = Path(d, 'meson.build').read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12012aa9ea961bc1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:640

            meson_build = Path(d, 'meson.build').read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e6e6d992838bfe6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/pythontests.py:45

            mesonfile.write_text('''project('test', 'c', version: '1')
pymod = import('python')
python = pymod.find_installation('python3', required: true)
''', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bab1ea80501027d6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/rewritetests.py:485

        original_contents = meson_build_file.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bab43e171418278d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/rewritetests.py:531

        expected = Path(test_path / "expected_dag.txt").read_text(encoding='utf-8').strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #170aae3888e6dbcd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/subprojectscommandtests.py:35

        with open(str(path / 'meson.build'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f00bf9f8cf78b82 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/subprojectscommandtests.py:97

        with open(str((self.subprojects_dir / name).with_suffix('.wrap')), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33c675008a826ad3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/subprojectscommandtests.py:112

        with open(str((self.subprojects_dir / name).with_suffix('.wrap')), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c72a2b5f4fef57c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/subprojectscommandtests.py:260

        with open(str((self.subprojects_dir / 'redirect').with_suffix('.wrap')), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #157e1908f7e9128b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:49

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00eba7e4a5ea6293 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:78

        os.environ['PATH'] += os.pathsep + testdir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95275070411a808b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:80

        if '.PY' in [ext.upper() for ext in os.environ['PATHEXT'].split(';')]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6e98d3be7574338 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:104

        path = os.environ['PATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b31eda2411b7f04 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:106

            username = os.environ['USERNAME']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef7412af5357c547 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:240

            current_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fb810f02479bd00 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:296

            with mock.patch.dict(os.environ, {envvar: name}):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #355b4ca9fa160168 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:382

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46a20e21a800119b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:441

        if 'VSCMD_VER' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a19fd30fe2ada180 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:443

        if version_compare(os.environ['VSCMD_VER'], '<16.10.0'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6635222c413cee57 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:466

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

openai

python dependency

expand_more 69 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #166ead2f5866fad6 — Filesystem access.

pkgs/python/[email protected]/examples/image_stream.py:30

            with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #81b603a49614c1e1 — Filesystem access.

pkgs/python/[email protected]/examples/image_stream.py:41

            with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #03ea11fea38e8fa1 — Environment-variable access.

pkgs/python/[email protected]/examples/realtime/azure_realtime.py:31

    endpoint = os.environ["AZURE_OPENAI_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c3ba60d25d9f1945 — Environment-variable access.

pkgs/python/[email protected]/examples/realtime/azure_realtime.py:37

    deployment_name = os.environ["AZURE_OPENAI_DEPLOYMENT_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #96f35033a85b6763 — Filesystem access.

pkgs/python/[email protected]/examples/uploads.py:30

    data = file.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5714eee951f9fcc0 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:161

api_type: _ApiType | None = _t.cast(_ApiType, _os.environ.get("OPENAI_API_TYPE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8d48938ae8e77a9 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:163

api_version: str | None = _os.environ.get("OPENAI_API_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e545574b93908135 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:165

azure_endpoint: str | None = _os.environ.get("AZURE_OPENAI_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5bfde682a1a89e8b — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:167

azure_ad_token: str | None = _os.environ.get("AZURE_OPENAI_AD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4e13d9707be4bb0 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:341

    return _os.environ.get("OPENAI_API_KEY") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50a0c45069dfe280 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:345

    return azure_endpoint is not None or _os.environ.get("AZURE_OPENAI_API_KEY") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ae41d4f5fd9246f — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:350

        _os.environ.get("AZURE_OPENAI_AD_TOKEN") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0bd9e0bc20d437b1 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:366

            azure_endpoint = _os.environ.get("AZURE_OPENAI_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6665771ac4da8980 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:369

            azure_ad_token = _os.environ.get("AZURE_OPENAI_AD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b18a4b0c5ef6c261 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:372

            api_version = _os.environ.get("OPENAI_API_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e04189df10b2b0e7 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:382

            if (azure_ad_token is not None or azure_ad_token_provider is not None) and _os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4261a958548a97e — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:382

            if (azure_ad_token is not None or azure_ad_token_provider is not None) and _os.environ.get(
                "AZURE_OPENAI_API_KEY"
            ) is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #bfacd6209fe7d5dc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/openai/_base_client.py:319

        return await self._client.request(self._page_cls, self._options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #e38f110310897bbe — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:208

                api_key = os.environ.get("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65bd043594a45397 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:218

            admin_api_key = os.environ.get("OPENAI_ADMIN_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #091a018c13e19462 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:234

            organization = os.environ.get("OPENAI_ORG_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7804be88fd90538f — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:238

            project = os.environ.get("OPENAI_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a97237dc56092ca — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:242

            webhook_secret = os.environ.get("OPENAI_WEBHOOK_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e8e6b6f837a036b — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:250

            base_url = os.environ.get("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a48f25dda233acf — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:254

        custom_headers_env = os.environ.get("OPENAI_CUSTOM_HEADERS") if provider_runtime is None else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5e66cde3fc62315 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:808

                api_key = os.environ.get("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #782dc266a3756282 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:818

            admin_api_key = os.environ.get("OPENAI_ADMIN_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cccfdf517c379dff — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:834

            organization = os.environ.get("OPENAI_ORG_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb7a41a517a8586e — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:838

            project = os.environ.get("OPENAI_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #679252ec55e63b78 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:842

            webhook_secret = os.environ.get("OPENAI_WEBHOOK_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32adf568d18afccb — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:850

            base_url = os.environ.get("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #746bd9c968da5435 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:854

        custom_headers_env = os.environ.get("OPENAI_CUSTOM_HEADERS") if provider_runtime is None else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29ece54ffe151c6c — Filesystem access.

pkgs/python/[email protected]/src/openai/_files.py:69

            return (path.name, path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1648c996c2782df5 — Filesystem access.

pkgs/python/[email protected]/src/openai/_files.py:81

        return pathlib.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2b035405d843289 — Filesystem access.

pkgs/python/[email protected]/src/openai/_files.py:111

            return (path.name, await path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98afe95977dd2fca — Filesystem access.

pkgs/python/[email protected]/src/openai/_files.py:123

        return await anyio.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3d1a11d799bd7ae — Filesystem access.

pkgs/python/[email protected]/src/openai/_legacy_response.py:443

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7a462f6761760c2 — Filesystem access.

pkgs/python/[email protected]/src/openai/_legacy_response.py:456

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2da1f49945734a9 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_models.py:129

            extra="allow", defer_build=coerce_boolean(os.environ.get("DEFER_PYDANTIC_BUILD", "true"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a653b1699e2ff15 — Filesystem access.

pkgs/python/[email protected]/src/openai/_response.py:515

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4def22842d957395 — Filesystem access.

pkgs/python/[email protected]/src/openai/_response.py:557

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7ebfe52560df4da — Environment-variable access.

pkgs/python/[email protected]/src/openai/_utils/_logs.py:23

    env = os.environ.get("OPENAI_LOG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d57560e46802de0 — Filesystem access.

pkgs/python/[email protected]/src/openai/_utils/_transform.py:248

            binary = data.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a474e21f3a50fde1 — Filesystem access.

pkgs/python/[email protected]/src/openai/_utils/_transform.py:414

            binary = await anyio.Path(data).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #891e135e7afcb547 — Filesystem access.

pkgs/python/[email protected]/src/openai/_utils/_utils.py:383

    contents = Path(path).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05a7b73d66fbf1a7 — Filesystem access.

pkgs/python/[email protected]/src/openai/auth/_workload.py:59

            with open(token_file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #69508c56d77322fd — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/openai/auth/_workload.py:107

                response = http_client.get(url, params=params, headers={"Metadata": "true"}, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7e5348177b727227 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/openai/auth/_workload.py:110

                    response = client.get(url, params=params, headers={"Metadata": "true"}, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3895f35fc1b311db — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/openai/auth/_workload.py:154

                response = http_client.get(url, params=params, headers={"Metadata-Flavor": "Google"}, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e78d27fee6c70300 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/openai/auth/_workload.py:157

                    response = client.get(url, params=params, headers={"Metadata-Flavor": "Google"}, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fc301bb0350d3955 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/openai/auth/_workload.py:253

            response = client.post(
                self.token_exchange_url,
                json={
                    "grant_type": TOKEN_EXCHANGE_GRANT_TYPE,
                    "subject_token": subject_token,
                    "subject_token_type": subject_token_type,
                    "identity_provider_id": self.workload_identity["identity_provider_id"],
                    "service_account_id": self.workload_identity["service_account_id"],
                },
                timeout=10.0,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #a3eb14cc1e02f318 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/_bedrock_auth.py:172

        region = os.environ.get("AWS_REGION") or os.environ.get("AWS_DEFAULT_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a010d3ee37028da — Filesystem access.

pkgs/python/[email protected]/src/openai/lib/_validators.py:485

                with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61e4915a8620d43c — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:215

            api_key = os.environ.get("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f2101a2a1d4ad21 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:218

            azure_ad_token = os.environ.get("AZURE_OPENAI_AD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #852aa4573219973f — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:226

            api_version = os.environ.get("OPENAI_API_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7e22a2e3faf4ab3 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:240

                azure_endpoint = os.environ.get("AZURE_OPENAI_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e063fdcd63384759 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:539

            api_key = os.environ.get("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efb4fda55ae70992 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:542

            azure_ad_token = os.environ.get("AZURE_OPENAI_AD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ee0c54e81164e66 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:550

            api_version = os.environ.get("OPENAI_API_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ff572453fd10bef — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:564

                azure_endpoint = os.environ.get("AZURE_OPENAI_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70ba68ecc110cd5c — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/bedrock.py:70

    configured = region or os.environ.get("AWS_REGION") or os.environ.get("AWS_DEFAULT_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c89fecfc4734ea6e — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/bedrock.py:80

    environment_base_url = os.environ.get("AWS_BEDROCK_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f121476b2552ad65 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/bedrock.py:105

    token = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae64ad5f2221741f — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/bedrock.py:150

    environment_token = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a109d3de10989120 — Environment-variable access.

pkgs/python/[email protected]/src/openai/providers/bedrock.py:249

            token = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8ed6962fd26e883 — Environment-variable access.

pkgs/python/[email protected]/src/openai/providers/bedrock.py:332

            os.environ.get("AWS_REGION") or os.environ.get("AWS_DEFAULT_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32bb4f9a748a26f5 — Environment-variable access.

pkgs/python/[email protected]/src/openai/providers/bedrock.py:339

        environment_base_url = _normalize_optional_string(os.environ.get("AWS_BEDROCK_BASE_URL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2945c6581934154 — Environment-variable access.

pkgs/python/[email protected]/src/openai/providers/bedrock.py:392

        and bool(os.environ.get("AWS_BEARER_TOKEN_BEDROCK"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

prance

python dependency

expand_more 6 low-confidence finding(s)

low egress dependency Excluded from app score #70f8f6a1bc964e0d — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/prance/convert.py:46

    r = requests.post(
        "https://converter.swagger.io/api/convert", data=data, headers=headers
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #545d8ae2c88b4938 — Environment-variable access.

pkgs/python/[email protected]/prance/util/fs.py:69

            os.environ.get("SYSTEMDRIVE", "C:")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32f85d3bd9f02d4d — Filesystem access.

pkgs/python/[email protected]/prance/util/fs.py:244

    with open(filename, "rb") as raw_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0da78cfdbf95234d — Filesystem access.

pkgs/python/[email protected]/prance/util/fs.py:306

    with open(filename, encoding=encoding) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5ddbd1c5e885971 — Filesystem access.

pkgs/python/[email protected]/prance/util/fs.py:326

    with open(fname, mode="w", encoding=encoding) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #3ba17925bb01f8bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/prance/util/url.py:205

        response = requests.get(url.geturl())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

pydantic

python dependency

expand_more 9 low-confidence finding(s)

low env_fs dependency Excluded from app score #62eb5dd2d2d41c61 — Filesystem access.

pkgs/python/[email protected]/pydantic/deprecated/parse.py:71

    b = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41fca2fd2d1b8116 — Environment-variable access.

pkgs/python/[email protected]/pydantic/json_schema.py:344

                if os.getenv('PYDANTIC_PRIVATE_ALLOW_UNHANDLED_SCHEMA_TYPES'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88a47cb2ce635bce — Filesystem access.

pkgs/python/[email protected]/pydantic/mypy.py:1411

    with open(config_file, 'rb') as rf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cba040a4e0ee6f95 — Environment-variable access.

pkgs/python/[email protected]/pydantic/plugin/_loader.py:27

    disabled_plugins = os.getenv('PYDANTIC_DISABLE_PLUGINS')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9783f9549e68b4d4 — Environment-variable access.

pkgs/python/[email protected]/pydantic/v1/env_settings.py:173

            env_vars: Mapping[str, Optional[str]] = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67dca76431210210 — Environment-variable access.

pkgs/python/[email protected]/pydantic/v1/env_settings.py:175

            env_vars = {k.lower(): v for k, v in os.environ.items()}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96c64d85d3b0f7bb — Filesystem access.

pkgs/python/[email protected]/pydantic/v1/env_settings.py:307

                    secret_value = path.read_text().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8106fb5e4c0a312 — Filesystem access.

pkgs/python/[email protected]/pydantic/v1/mypy.py:948

    with open(config_file, read_mode) as rf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c56022f91dd39c2 — Filesystem access.

pkgs/python/[email protected]/pydantic/v1/parse.py:57

    b = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pydantic-settings

python dependency

expand_more 3 low-confidence finding(s)

low env_fs dependency Excluded from app score #6398e7b6f74cd94d — Environment-variable access.

pkgs/python/[email protected]/pydantic_settings/sources/providers/env.py:75

        return parse_env_vars(os.environ, self.case_sensitive, self.env_ignore_empty, self.env_parse_none_str)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8953c290150c72e7 — Filesystem access.

pkgs/python/[email protected]/pydantic_settings/sources/providers/nested_secrets.py:203

        return {str(p.relative_to(path)): p.read_text().strip() for p in cls._iter_secret_files(path)}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7c1ac4e655db490 — Filesystem access.

pkgs/python/[email protected]/pydantic_settings/sources/providers/secrets.py:122

                    return path.read_text().strip(), field_key, value_is_complex

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

typing-extensions

python dependency

expand_more 7 low-confidence finding(s)

low env_fs dependency Excluded from app score #394578821e927674 — Filesystem access.

pkgs/python/[email protected]/src/test_typing_extensions.py:1698

            Path(tempdir, "ann_module.py").write_text(ANN_MODULE_SOURCE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1622758e6acbe975 — Filesystem access.

pkgs/python/[email protected]/src/test_typing_extensions.py:1699

            Path(tempdir, "ann_module2.py").write_text(ANN_MODULE_2_SOURCE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #730a3555ab99749e — Filesystem access.

pkgs/python/[email protected]/src/test_typing_extensions.py:1700

            Path(tempdir, "ann_module3.py").write_text(ANN_MODULE_3_SOURCE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0feea0d7f96d4edf — Filesystem access.

pkgs/python/[email protected]/src/test_typing_extensions.py:8783

            Path(tempdir, "inspect_stock_annotations.py").write_text(STOCK_ANNOTATIONS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ea9b00074827422 — Filesystem access.

pkgs/python/[email protected]/src/test_typing_extensions.py:8784

            Path(tempdir, "inspect_stringized_annotations.py").write_text(STRINGIZED_ANNOTATIONS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2edfc6f6d9c91b4 — Filesystem access.

pkgs/python/[email protected]/src/test_typing_extensions.py:8785

            Path(tempdir, "inspect_stringized_annotations_2.py").write_text(STRINGIZED_ANNOTATIONS_2)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50118d95ff05f488 — Filesystem access.

pkgs/python/[email protected]/src/test_typing_extensions.py:9234

            Path(tempdir, "inspect_stringized_annotations_pep_695.py").write_text(STRINGIZED_ANNOTATIONS_PEP_695)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

websockets

python dependency

expand_more 24 low-confidence finding(s)

low env_fs dependency Excluded from app score #26657ff001def135 — Filesystem access.

pkgs/python/[email protected]/setup.py:10

exec((root_dir / "src" / "websockets" / "version.py").read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b313a8eb82514ed — Filesystem access.

pkgs/python/[email protected]/setup.py:16

    (root_dir / "README.rst").read_text(encoding="utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1730319bc80e3bfb — Environment-variable access.

pkgs/python/[email protected]/setup.py:22

if os.environ.get("BUILD_EXTENSION") == "no":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d67e7c5247d48b0a — Environment-variable access.

pkgs/python/[email protected]/setup.py:29

            optional=os.environ.get("BUILD_EXTENSION") != "yes",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22c9de39026fe249 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/asyncio/client.py:39

MAX_REDIRECTS = int(os.environ.get("WEBSOCKETS_MAX_REDIRECTS", "10"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2882d0793f62f4b0 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/client.py:353

BACKOFF_INITIAL_DELAY = float(os.environ.get("WEBSOCKETS_BACKOFF_INITIAL_DELAY", "5"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85e2e3d517b72076 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/client.py:354

BACKOFF_MIN_DELAY = float(os.environ.get("WEBSOCKETS_BACKOFF_MIN_DELAY", "3.1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4b0811fa372993c — Environment-variable access.

pkgs/python/[email protected]/src/websockets/client.py:355

BACKOFF_MAX_DELAY = float(os.environ.get("WEBSOCKETS_BACKOFF_MAX_DELAY", "90.0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25bed8744da16bf1 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/client.py:356

BACKOFF_FACTOR = float(os.environ.get("WEBSOCKETS_BACKOFF_FACTOR", "1.618"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #322456b1ae604701 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/frames.py:148

    MAX_LOG_SIZE = int(os.environ.get("WEBSOCKETS_MAX_LOG_SIZE", "75"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02dcc60da5393f5a — Environment-variable access.

pkgs/python/[email protected]/src/websockets/http11.py:27

USER_AGENT = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a7885cde10195b4 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/http11.py:27

USER_AGENT = os.environ.get(
    "WEBSOCKETS_USER_AGENT",
    f"Python/{PYTHON_VERSION} websockets/{websockets_version}",
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a21c625213b3efdc — Environment-variable access.

pkgs/python/[email protected]/src/websockets/http11.py:33

SERVER = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9fe8b0a69d3ea4e9 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/http11.py:33

SERVER = os.environ.get(
    "WEBSOCKETS_SERVER",
    f"Python/{PYTHON_VERSION} websockets/{websockets_version}",
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #559f18df0cc89fe8 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/http11.py:39

MAX_NUM_HEADERS = int(os.environ.get("WEBSOCKETS_MAX_NUM_HEADERS", "128"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47b597e2ec589112 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/http11.py:43

MAX_LINE_LENGTH = int(os.environ.get("WEBSOCKETS_MAX_LINE_LENGTH", "8192"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65c2660ad7128fd2 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/http11.py:47

MAX_BODY_SIZE = int(os.environ.get("WEBSOCKETS_MAX_BODY_SIZE", "1_048_576"))  # 1 MiB

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d647c0f5a5b9c20 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/legacy/client.py:417

    MAX_REDIRECTS_ALLOWED = int(os.environ.get("WEBSOCKETS_MAX_REDIRECTS", "10"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7660cca7d29cf0a1 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/legacy/client.py:602

    BACKOFF_INITIAL = float(os.environ.get("WEBSOCKETS_BACKOFF_INITIAL_DELAY", "5"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ea09169510d19a5 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/legacy/client.py:603

    BACKOFF_MIN = float(os.environ.get("WEBSOCKETS_BACKOFF_MIN_DELAY", "3.1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0795a8406941f761 — Environment-variable access.

pkgs/python/[email protected]/src/websockets/legacy/client.py:604

    BACKOFF_MAX = float(os.environ.get("WEBSOCKETS_BACKOFF_MAX_DELAY", "90.0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d34dd2f22960176b — Environment-variable access.

pkgs/python/[email protected]/src/websockets/legacy/client.py:605

    BACKOFF_FACTOR = float(os.environ.get("WEBSOCKETS_BACKOFF_FACTOR", "1.618"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16e694dae3bea79b — Environment-variable access.

pkgs/python/[email protected]/src/websockets/legacy/http.py:13

MAX_NUM_HEADERS = int(os.environ.get("WEBSOCKETS_MAX_NUM_HEADERS", "128"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e89a57f69176e29f — Environment-variable access.

pkgs/python/[email protected]/src/websockets/legacy/http.py:14

MAX_LINE_LENGTH = int(os.environ.get("WEBSOCKETS_MAX_LINE_LENGTH", "8192"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

⚠ Higher-risk dependencies not analyzed

These higher-risk dependencies were not analyzed in this scan — treat the verdict as provisional. This is a scan-coverage limitation, not a detected data leak.

azure-ai-projects cloud — sdist exceeds byte cap

Skipped dependencies

Production

azure-ai-projects prod — sdist exceeds byte cap
scipy prod — sdist exceeds byte cap
faiss-cpu prod — no sdist (wheels only)
sentence-transformers prod — scan budget exceeded
torch prod — scan budget exceeded
pymilvus prod — scan budget exceeded
milvus prod — scan budget exceeded
mistralai prod — scan budget exceeded
pymongo prod — scan budget exceeded
motor prod — scan budget exceeded
ipykernel prod — scan budget exceeded
ollama prod — scan budget exceeded
onnxruntime prod — scan budget exceeded
onnxruntime-genai prod — scan budget exceeded
oracledb prod — scan budget exceeded
pandas prod — scan budget exceeded
pinecone prod — scan budget exceeded
psycopg prod — scan budget exceeded
qdrant-client prod — scan budget exceeded
redis prod — scan budget exceeded
types-redis prod — scan budget exceeded
redisvl prod — scan budget exceeded
pyodbc prod — scan budget exceeded
usearch prod — scan budget exceeded
pyarrow prod — scan budget exceeded
weaviate-client prod — scan budget exceeded
click prod — scan budget exceeded
semantic-kernel prod — scan budget exceeded
python-dotenv prod — scan budget exceeded
anyio prod — scan budget exceeded
sse-starlette prod — scan budget exceeded
uvicorn prod — scan budget exceeded

verified_user Possible application data leak

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Potential data exfiltration in application code

</> First-Party Code

first-party (python): python

first-party (python): python/samples/demos/mcp_with_oauth/server

</> Dependencies

opentelemetry-sdk

azure-search-documents

google-cloud-aiplatform

opentelemetry-api

azure-core-tracing-opentelemetry

azure-ai-agents

chromadb

azure-ai-inference

azure-cosmos

azure-identity

transformers

aiohttp

aiortc

anthropic

autogen-agentchat

boto3

defusedxml

google-genai

httpx

jinja2

mcp

microsoft-agents-activity

microsoft-agents-copilotstudio-client

numpy

openai

prance

pydantic

pydantic-settings

typing-extensions

websockets

⚠ Higher-risk dependencies not analyzed

Skipped dependencies