Close Open Privacy Scan

link https://github.com/milvus-io/milvus
bolt Snapshot: commit 25ac6b4
science engine v1.5
schedule 2026-07-16T01:14:22.547040+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code. Dependency data flows are listed separately and do not affect this verdict.

App Privacy Score

97 /100
Low privacy risk

Low risk · 1148 finding(s)

Dependency score: 57 (Medium risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 2 medium 1146 low
First-party packages: 5
Dependency packages: 57
Ecosystem: go

swap_horiz Application data flows

No application data flows were found. See dependency data flows below.

hub Dependency data flows (1)
medium google.golang.org/protobuf dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520 → pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:523

</> First-Party Code

first-party (go)

go first-party
expand_more 47 low-confidence finding(s)
low env_fs production #cd4ba51eb65740cb — Filesystem access.
repo/cmd/components/util.go:125 
		f, err := os.Create(p.filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed3d96163b20bfbd — Filesystem access.
repo/cmd/milvus/stop.go:64 
	fd, err := os.OpenFile(path.Join(runtimeDir, filename), os.O_RDONLY, 0o664)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e7a5e69c7404e24 — Filesystem access.
repo/cmd/milvus/util.go:79 
	fd, err := os.OpenFile(fileFullName, os.O_CREATE|os.O_RDWR, 0o664)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #015f0cbd64028a9e — Environment-variable access.
repo/cmd/roles/roles.go:178 
	val, ok := os.LookupEnv(LDPreLoad)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a0a8939cebe4129 — Environment-variable access.
repo/cmd/tools/config-docs-generator/main.go:17 
	outputPath = os.Getenv("PWD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a42b48300b15003f — Filesystem access.
repo/cmd/tools/config-docs-generator/main.go:33 
	data, err := os.ReadFile(inputFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df1f17762a1f1233 — Filesystem access.
repo/cmd/tools/config-docs-generator/main.go:177 
		os.WriteFile(filepath.Join(outputPath, sec.fileName()), []byte(sectionFileContent), 0o600)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d65234907bc9a9de — Filesystem access.
repo/cmd/tools/config-docs-generator/main.go:179 
	err := os.WriteFile(filepath.Join(outputPath, fileName), []byte(fileContent), 0o600)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18ddea903104a98c — Filesystem access.
repo/cmd/tools/config/main.go:26 
		f, err := os.Create("configs.csv")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0278dcacf1848d39 — Filesystem access.
repo/cmd/tools/config/main.go:34 
		f, err := os.Create("milvus.yaml")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31ea158fc1bbe848 — Filesystem access.
repo/cmd/tools/config/printer.go:15 
	data, err := os.ReadFile(filepath) //nolint:gosec // filepath is from CLI args, not untrusted input

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f33db23e6708f8de — Environment-variable access.
repo/internal/distributed/proxy/service.go:1121 
	buildTags := os.Getenv(metricsinfo.GitBuildTagsEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa755bc5594351c6 — Filesystem access.
repo/internal/distributed/utils/util.go:70 
	b, err := os.ReadFile(caFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1be471e42485fd1 — Environment-variable access.
repo/internal/http/server.go:312 
	port := os.Getenv(ListenPortEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5331d59c11c6b526 — Filesystem access.
repo/internal/proxy/accesslog/chown_linux.go:12 
	f, err := os.OpenFile(name, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, info.Mode())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5f4bd7c80e0c891 — Filesystem access.
repo/internal/proxy/accesslog/writer.go:273 
	file, err := os.OpenFile(filename, os.O_APPEND|os.O_WRONLY, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b7e9dcdabd67435 — Filesystem access.
repo/internal/proxy/accesslog/writer.go:309 
	f, err := os.OpenFile(name, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ab0b0bb0f92c136 — Environment-variable access.
repo/internal/proxy/impl.go:4531 
		Status: merr.Success(os.Getenv(metricsinfo.DeployModeEnvKey)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d676372f3b0ca5af — Environment-variable access.
repo/internal/proxy/impl.go:6342 
		BuildTags:  os.Getenv(metricsinfo.GitBuildTagsEnvKey),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a3d51a77aa00823 — Environment-variable access.
repo/internal/proxy/impl.go:6343 
		BuildTime:  os.Getenv(metricsinfo.MilvusBuildTimeEnvKey),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bcc451534e28503a — Environment-variable access.
repo/internal/proxy/impl.go:6344 
		GitCommit:  os.Getenv(metricsinfo.GitCommitEnvKey),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92f6a7a0dbb761fb — Environment-variable access.
repo/internal/proxy/impl.go:6345 
		GoVersion:  os.Getenv(metricsinfo.MilvusUsedGoVersion),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4736971d0a38904 — Environment-variable access.
repo/internal/proxy/impl.go:6346 
		DeployMode: os.Getenv(metricsinfo.DeployModeEnvKey),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a20a20a23eefc1d0 — Filesystem access.
repo/internal/querynodev2/delegator/idf_oracle.go:301 
			f, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3abe4a1fd17befc — Filesystem access.
repo/internal/querynodev2/delegator/idf_oracle.go:772 
	f, err := os.Create(localPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c17fcbd49d6caf84 — Filesystem access.
repo/internal/storage/local_chunk_manager.go:310 
	dstFile, err := os.Create(dstFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fc467d07d5c5b62 — Filesystem access.
repo/internal/storage/print_binlog.go:47 
	fd, err := os.OpenFile(filename, os.O_RDONLY, 0o400)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e40e06724661e252 — Filesystem access.
repo/internal/storage/utils.go:55 
	reader, err := os.Open(filepath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08d54669cb7035ab — Filesystem access.
repo/internal/storage/utils.go:69 
	data, err := os.ReadFile(filepath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f4a67aa51cf5b08 — Filesystem access.
repo/internal/storage/utils.go:83 
	err := os.WriteFile(filepath, data, perm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #454b451883203a99 — Filesystem access.
repo/internal/util/fileresource/manager.go:200 
			file, err := os.Create(localFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9b56f6e954c3ee7 — Filesystem access.
repo/internal/util/fileresource/manager.go:312 
			file, err := os.Create(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7f53e77c7dfee1f — Environment-variable access.
repo/internal/util/function/embedding/bedrock_embedding_provider.go:107 
		awsAccessKeyId = os.Getenv(models.BedrockAccessKeyId)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97d82584f6a41f40 — Environment-variable access.
repo/internal/util/function/embedding/bedrock_embedding_provider.go:110 
		awsSecretAccessKey = os.Getenv(models.BedrockSAKEnvStr)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e45e6fed490c809 — Environment-variable access.
repo/internal/util/function/embedding/openai_embedding_provider.go:68 
			resourceName = os.Getenv(models.AzureOpenaiResourceName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e946554212dfdac3 — Environment-variable access.
repo/internal/util/function/embedding/vertexai_embedding_provider.go:49 
	jsonKeyPath := os.Getenv(models.VertexServiceAccountJSONEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b06cb33f7bb779b — Filesystem access.
repo/internal/util/function/embedding/vertexai_embedding_provider.go:57 
	jsonKey, err := os.ReadFile(jsonKeyPath) //nolint:gosec // path is from trusted environment variable

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8458f77bb520bae2 — Environment-variable access.
repo/internal/util/function/models/common.go:210 
		apiKey = os.Getenv(apiKeyEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1021389efad348ed — Environment-variable access.
repo/internal/util/function/models/common.go:217 
		apiKey = os.Getenv(newEnvStr)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a90f87b8217dc64 — Filesystem access.
repo/internal/util/metrics/thread.go:190 
		nameBytes, err := os.ReadFile(filepath.Join(taskDir, entry.Name(), "comm"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92d8b2ac89828572 — Filesystem access.
repo/internal/util/metrics/thread.go:194 
		statBytes, err := os.ReadFile(filepath.Join(taskDir, entry.Name(), "stat"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe1a780ae545dd7b — Environment-variable access.
repo/internal/util/sessionutil/labels.go:69 
	for _, value := range os.Environ() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28c44abb035cf55c — Environment-variable access.
repo/internal/util/sessionutil/session_util.go:423 
	if os.Getenv(MilvusNodeIDForTesting) != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d8c523a9410f0a4 — Environment-variable access.
repo/internal/util/sessionutil/session_util.go:424 
		mlog.Info(context.TODO(), "use node id for testing", mlog.String("nodeID", os.Getenv(MilvusNodeIDForTesting)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e082d50a51767068 — Environment-variable access.
repo/internal/util/sessionutil/session_util.go:425 
		return strconv.ParseInt(os.Getenv(MilvusNodeIDForTesting), 10, 64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c699fd6306d50e9 — Filesystem access.
repo/internal/util/sessionutil/session_util.go:1204 
	fd, err := os.OpenFile(fileFullPath, os.O_RDWR|os.O_CREATE|os.O_APPEND, 0o664)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab6af5a604450559 — Environment-variable access.
repo/internal/util/streamingutil/env.go:12 
	return os.Getenv(MilvusStreamingServiceEnabled) == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (go): client

go first-party
expand_more 1 low-confidence finding(s)
low env_fs production #ebe0023048982772 — Filesystem access.
repo/client/milvusclient/tls.go:30 
	caPem, err := os.ReadFile(caPemPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (go): examples/telemetry_demo

go first-party
expand_more 2 low-confidence finding(s)
low env_fs test-only #132dc24b12dbf4a2 — Environment-variable access.
repo/examples/telemetry_demo/main.go:742 
	if v := os.Getenv(key); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #285eb72629e699c8 — Environment-variable access.
repo/examples/telemetry_demo/multi_database_demo.go:627 
	if v := os.Getenv(key); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (go): examples/telemetry_e2e_test

go first-party
expand_more 1 low-confidence finding(s)
low env_fs test-only #32d6f3eb95290e1b — Environment-variable access.
repo/examples/telemetry_e2e_test/main.go:45 
	address := os.Getenv("MILVUS_ADDRESS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (go): pkg

go first-party
expand_more 24 low-confidence finding(s)
low env_fs production #7f76bd5ad17e8dd2 — Environment-variable access.
repo/pkg/config/env_source.go:43 
	for _, value := range os.Environ() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5ed8ee87356c993 — Filesystem access.
repo/pkg/config/file_source.go:140 
		data, err := os.ReadFile(configFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #051c7229367238b7 — Environment-variable access.
repo/pkg/objectstorage/huawei/huawei.go:116 
	regionName := os.Getenv("HUAWEICLOUD_SDK_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f61294d1a2659db6 — Environment-variable access.
repo/pkg/objectstorage/util.go:199 
		if os.Getenv("AZURE_FEDERATED_TOKEN_FILE") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab03c309c0cf08b2 — Environment-variable access.
repo/pkg/objectstorage/util.go:201 
				ClientID:      os.Getenv("AZURE_CLIENT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b6377c167248dac — Environment-variable access.
repo/pkg/objectstorage/util.go:202 
				TenantID:      os.Getenv("AZURE_TENANT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59fef0e8cd4ca7b1 — Environment-variable access.
repo/pkg/objectstorage/util.go:203 
				TokenFilePath: os.Getenv("AZURE_FEDERATED_TOKEN_FILE"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a322a4f26f79e42 — Environment-variable access.
repo/pkg/objectstorage/util.go:206 
			clientID := os.Getenv("AZURE_CLIENT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a83461ac83f77be — Environment-variable access.
repo/pkg/objectstorage/util.go:222 
		connectionString := os.Getenv("AZURE_STORAGE_CONNECTION_STRING")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05f8178abd57fcf9 — Filesystem access.
repo/pkg/streaming/util/message/codegen/main.go:359 
	jsonData, err := os.ReadFile(reflectInfoFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a860964973fbfb59 — Filesystem access.
repo/pkg/streaming/util/message/codegen/main.go:380 
	err = os.WriteFile(reflectInfoGo, []byte(code), 0o644) // #nosec G306

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67a781204947e334 — Filesystem access.
repo/pkg/util/etcd/etcd_util.go:174 
	caCert, err := os.ReadFile(caCertFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #09091a7afc0aeb07 — Environment-variable access.
repo/pkg/util/gc/gc_tuner.go:110 
		if envGOGC := os.Getenv("GOGC"); envGOGC != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a27abf54d834fc6 — Environment-variable access.
repo/pkg/util/hardware/container_linux.go:63 
	memoryStr := os.Getenv("MEM_LIMIT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8aa514b96cc481a — Environment-variable access.
repo/pkg/util/hardware/container_test_linux.go:55 
		assert.Equal(t, "", os.Getenv("MEM_LIMIT"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52a8e25fc8384230 — Environment-variable access.
repo/pkg/util/metricsinfo/utils.go:34 
	m.SystemVersion = os.Getenv(GitCommitEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57efe3e8fd640694 — Environment-variable access.
repo/pkg/util/metricsinfo/utils.go:35 
	m.DeployMode = os.Getenv(DeployModeEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33c6ddf00bb2858f — Environment-variable access.
repo/pkg/util/metricsinfo/utils.go:36 
	m.BuildVersion = os.Getenv(GitBuildTagsEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da0de3994e26c652 — Environment-variable access.
repo/pkg/util/metricsinfo/utils.go:37 
	m.UsedGoVersion = os.Getenv(MilvusUsedGoVersion)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6ac58d98a7bfd91 — Environment-variable access.
repo/pkg/util/metricsinfo/utils.go:38 
	m.BuildTime = os.Getenv(MilvusBuildTimeEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2eb092a81acc3f2 — Environment-variable access.
repo/pkg/util/paramtable/base_table.go:237 
	configDir := os.Getenv("MILVUSCONF")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b66a9c6df0defc8 — Environment-variable access.
repo/pkg/util/paramtable/component_param.go:7123 
	if os.Getenv(metricsinfo.DeployModeEnvKey) == metricsinfo.StandaloneDeployMode {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0905e31bac2e946 — Environment-variable access.
repo/pkg/util/paramtable/runtime.go:47 
		if refreshInterval := os.Getenv(MilvusConfigRefreshIntervalEnvKey); refreshInterval != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6dd1506348b3b279 — Environment-variable access.
repo/pkg/util/paramtable/service_param.go:145 
	if p.UseEmbedEtcd.GetAsBool() && (os.Getenv(metricsinfo.DeployModeEnvKey) != metricsinfo.StandaloneDeployMode) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

github.com/cockroachdb/errors

go dependency
medium telemetry dependency Excluded from app score #40d079d4668f9a36 — Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/report/report.go:380 
	res := sentry.CaptureEvent(event)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #b0e8c3b1615fbb93 — Filesystem access.
pkgs/go/[email protected]/testutils/simplecheck.go:208 
		data, err := ioutil.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

google.golang.org/protobuf

go dependency
medium pii_flow dependency Excluded from app score #4ca668e74fce6ba5 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:523 · flow /tmp/closeopen-ivhl18k1/pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520 → /tmp/closeopen-ivhl18k1/pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:523 
		fmt.Printf("executing: %v\n%s\n", strings.Join(cmd.Args, " "), out)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
expand_more 22 low-confidence finding(s)
low env_fs dependency Excluded from app score #616b772bf9bc0cae — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-corpus/main.go:117 
		if err := os.WriteFile(fmt.Sprintf("internal/fuzz/wirefuzz/corpus/%x", sha1.Sum(wire)), wire, 0777); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83b7cf018b4deb83 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-corpus/main.go:125 
		if err := os.WriteFile(fmt.Sprintf("internal/fuzz/textfuzz/corpus/%x", sha1.Sum(text)), text, 0777); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0abbd8cfb440f921 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-corpus/main.go:133 
		if err := os.WriteFile(fmt.Sprintf("internal/fuzz/jsonfuzz/corpus/%x", sha1.Sum(json)), json, 0777); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98085c6c798d2473 — Environment-variable access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:46 
	if plugin := os.Getenv("RUN_AS_PROTOC_PLUGIN"); plugin != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0af3d3ccb27802d0 — Environment-variable access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:85 
	flag.StringVar(&protoRoot, "protoroot", os.Getenv("PROTOBUF_ROOT"), "The root of the protobuf source tree.")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95f4b58503dce6ac — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:119 
	out, err := os.Create(outFn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0323267b07ae4245 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:124 
	b, err := os.ReadFile(inFn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1db0913d68447fc — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:427 
			check(os.WriteFile(filepath.Join(tmpDir, filepath.FromSlash(d.path+"/gen_test.go")), b, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1c69f222751b093 — Environment-variable access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520 
	cmd.Env = append(os.Environ(), "RUN_AS_PROTOC_PLUGIN=1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5502870dfe4ce87 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:721 
	src, err := os.ReadFile(srcPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a2bab843ea178dd — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:724 
	dst, _ := os.ReadFile(dstPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e765cfcc1f414f8 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:728 
	check(os.WriteFile(dstPath, src, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3635a1dbbf83f10 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-types/main.go:263 
		prev, _ := os.ReadFile(absFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a62ed2c01db7513 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-types/main.go:266 
			check(os.WriteFile(absFile, b, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df85ffb6285c6c8b — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-types/main.go:269 
		check(os.WriteFile(absFile+".tmp", b, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6433070697b96557 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/pbdump/pbdump.go:121 
		b, err := os.ReadFile(f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65dbe00d88b8af5b — Filesystem access.
pkgs/go/[email protected]/internal/detrand/rand.go:46 
	f, err := os.Open(s)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c540aaf693f1d407 — Filesystem access.
pkgs/go/[email protected]/internal/fuzztest/fuzztest.go:20 
	dir, err := os.Open(*corpus)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ae678b1b28d0943 — Filesystem access.
pkgs/go/[email protected]/internal/fuzztest/fuzztest.go:36 
			b, err := os.ReadFile(filepath.Join(*corpus, name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b583df83db86cd4a — Environment-variable access.
pkgs/go/[email protected]/internal/impl/lazy.go:24 
	if os.Getenv("GOPROTODEBUG") == "nolazy" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c968c3ab48a7137e — Environment-variable access.
pkgs/go/[email protected]/reflect/protoregistry/registry.go:51 
	if v := os.Getenv(env); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1497928d486381f — Environment-variable access.
pkgs/go/[email protected]/reflect/protoregistry/registry.go:63 
		panic("invalid " + env + " value: " + os.Getenv(env))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

cloud.google.com/go/storage

go dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #0d2d7dd3608d8a47 — Environment-variable access.
pkgs/go/[email protected]/grpc_client.go:93 
	if host := os.Getenv("STORAGE_EMULATOR_HOST_GRPC"); host != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b90b9e3dc079a6d0 — Environment-variable access.
pkgs/go/[email protected]/http_client.go:76 
	if host := os.Getenv("STORAGE_EMULATOR_HOST"); host == "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #057667dc19c46cbf — Environment-variable access.
pkgs/go/[email protected]/option.go:49 
	increaseRate := os.Getenv(dynamicReadReqIncreaseRateEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6e9ec491c127bb5 — Environment-variable access.
pkgs/go/[email protected]/option.go:64 
	initialTimeout := os.Getenv(dynamicReadReqInitialTimeoutEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae01c07284647716 — Environment-variable access.
pkgs/go/[email protected]/storage.go:146 
	if host := os.Getenv("STORAGE_EMULATOR_HOST"); host == "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c95352dbc02c9106 — Environment-variable access.
pkgs/go/[email protected]/storage.go:352 
	if host := os.Getenv("STORAGE_EMULATOR_HOST"); host != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad75daa1837b066b — Environment-variable access.
pkgs/go/[email protected]/storage.go:364 
	if host := os.Getenv("STORAGE_EMULATOR_HOST"); host != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ad3a5d5297f3ac8 — Filesystem access.
pkgs/go/[email protected]/transfermanager/downloader.go:202 
		f, fErr := os.Create(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/Azure/azure-sdk-for-go/sdk/azcore

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #90feed0c02d87535 — Environment-variable access.
pkgs/go/[email protected]/runtime/policy_telemetry.go:78 
		operatingSystem = os.Getenv("OS") // Get more specific OS information

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/Azure/azure-sdk-for-go/sdk/azidentity

go dependency
expand_more 36 low-confidence finding(s)
low env_fs dependency Excluded from app score #d281072710796f37 — Environment-variable access.
pkgs/go/[email protected]/azidentity.go:70 
		if envAuthorityHost := os.Getenv(azureAuthorityHost); envAuthorityHost != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a4349d8bb1971fe — Environment-variable access.
pkgs/go/[email protected]/azure_cli_credential.go:134 
		dir := os.Getenv("SYSTEMROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d462a275975be09 — Environment-variable access.
pkgs/go/[email protected]/azure_cli_credential.go:144 
	cliCmd.Env = os.Environ()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0aada5dfb3ce6a40 — Environment-variable access.
pkgs/go/[email protected]/azure_developer_cli_credential.go:120 
		dir := os.Getenv("SYSTEMROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d017e610d6c4f92f — Environment-variable access.
pkgs/go/[email protected]/azure_developer_cli_credential.go:130 
	cliCmd.Env = os.Environ()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bebdf0d5a3b9aa8b — Environment-variable access.
pkgs/go/[email protected]/azure_pipelines_credential.go:61 
	u := os.Getenv(systemOIDCRequestURI)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca707839eeafa2a0 — Environment-variable access.
pkgs/go/[email protected]/azure_pipelines_credential.go:65 
	sat := os.Getenv(systemAccessToken)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e1caf6e293e4755 — Environment-variable access.
pkgs/go/[email protected]/confidential_client.go:75 
		region:   os.Getenv(azureRegionalAuthorityName),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd99b598ace6ea1c — Environment-variable access.
pkgs/go/[email protected]/default_azure_credential.go:69 
		if tenants := os.Getenv(azureAdditionallyAllowedTenants); tenants != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed44c729041e0672 — Environment-variable access.
pkgs/go/[email protected]/default_azure_credential.go:100 
	if ID, ok := os.LookupEnv(azureClientID); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e77cef816e2f317 — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:87 
	tenantID := os.Getenv(azureTenantID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0ee760db4836066 — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:91 
	clientID := os.Getenv(azureClientID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5339664cdb1fa849 — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:98 
		if tenants := os.Getenv(azureAdditionallyAllowedTenants); tenants != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b373c9d383c53071 — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:102 
	if clientSecret := os.Getenv(azureClientSecret); clientSecret != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c672c16ef8e4ef28 — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:115 
	if certPath := os.Getenv(azureClientCertificatePath); certPath != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b727555c195f6e72 — Filesystem access.
pkgs/go/[email protected]/environment_credential.go:117 
		certData, err := os.ReadFile(certPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #691cdcf979753ff4 — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:122 
		if v := os.Getenv(azureClientCertificatePassword); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4bc01e00402688bd — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:134 
		if v, ok := os.LookupEnv(envVarSendCertChain); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a9580aeb658a64d — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:143 
	if username := os.Getenv(azureUsername); username != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #111dc0ceefb7b60b — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:144 
		if password := os.Getenv(azurePassword); password != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a448df1f566212d — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:76 
		pd := os.Getenv("ProgramData")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e393f5500a33fefc — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:143 
	if endpoint, ok := os.LookupEnv(identityEndpoint); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02ca338ca0740d74 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:144 
		if _, ok := os.LookupEnv(identityHeader); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9d93cbdeb3bc381 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:145 
			if _, ok := os.LookupEnv(identityServerThumbprint); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4b8967508c94f9e — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:154 
		} else if _, ok := os.LookupEnv(arcIMDSEndpoint); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91cbe27177c94d47 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:159 
	} else if endpoint, ok := os.LookupEnv(msiEndpoint); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53351f11a437ffaa — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:161 
		if _, ok := os.LookupEnv(msiSecret); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd5c8459a3338954 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:344 
	request.Raw().Header.Set("X-IDENTITY-HEADER", os.Getenv(identityHeader))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bce7717814b07ae1 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:364 
	request.Raw().Header.Set("secret", os.Getenv(msiSecret))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f7bd870e0bbacb8 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:368 
	q.Add("clientid", os.Getenv(defaultIdentityClientID))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82745676c160a8d5 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:389 
	request.Raw().Header.Set("Secret", os.Getenv(identityHeader))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbd2334ab881fe69 — Filesystem access.
pkgs/go/[email protected]/managed_identity_client.go:449 
	key, err := os.ReadFile(p)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #884461903ea442c2 — Environment-variable access.
pkgs/go/[email protected]/workload_identity.go:65 
		if clientID, ok = os.LookupEnv(azureClientID); !ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90a4a8c794240477 — Environment-variable access.
pkgs/go/[email protected]/workload_identity.go:71 
		if file, ok = os.LookupEnv(azureFederatedTokenFile); !ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #662b561772eb0989 — Environment-variable access.
pkgs/go/[email protected]/workload_identity.go:77 
		if tenantID, ok = os.LookupEnv(azureTenantID); !ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d61da4a806c932e4 — Filesystem access.
pkgs/go/[email protected]/workload_identity.go:117 
			content, err := os.ReadFile(w.file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/Azure/azure-sdk-for-go/sdk/storage/azblob

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #7074f5687af491a8 — Environment-variable access.
pkgs/go/[email protected]/internal/testcommon/common.go:179 
	env, ok := os.LookupEnv(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/aliyun/credentials-go

go dependency
expand_more 16 low-confidence finding(s)
low env_fs dependency Excluded from app score #84c31018cbe3fe13 — Environment-variable access.
pkgs/go/[email protected]/credentials/credential.go:166 
		v = os.Getenv("ALIBABA_CLOUD_CREDENTIALS_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #511a03f989077192 — Filesystem access.
pkgs/go/[email protected]/credentials/credential.go:243 
		file, err1 := os.Open(tea.StringValue(config.PrivateKeyFile))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #052beb2dc2823f61 — Environment-variable access.
pkgs/go/[email protected]/credentials/env_provider.go:27 
	accessKeyId, ok1 := os.LookupEnv(EnvVarAccessKeyIdNew)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d0189b6c1037b91 — Environment-variable access.
pkgs/go/[email protected]/credentials/env_provider.go:29 
		accessKeyId, ok1 = os.LookupEnv(EnvVarAccessKeyId)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #880113c154b6150a — Environment-variable access.
pkgs/go/[email protected]/credentials/env_provider.go:31 
	accessKeySecret, ok2 := os.LookupEnv(EnvVarAccessKeySecret)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecd8bed2300c2a65 — Environment-variable access.
pkgs/go/[email protected]/credentials/instance_provider.go:18 
	roleName, ok := os.LookupEnv(ENVEcsMetadata)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40559fe06190a2d0 — Environment-variable access.
pkgs/go/[email protected]/credentials/oidc_credential.go:108 
		tokenPath = os.Getenv("ALIBABA_CLOUD_OIDC_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #314a437583fec561 — Filesystem access.
pkgs/go/[email protected]/credentials/oidc_credential.go:113 
	byt, err := ioutil.ReadFile(tokenPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ed3ab4e17bedaf8 — Environment-variable access.
pkgs/go/[email protected]/credentials/oidc_credential_provider.go:18 
	roleArn, ok1 := os.LookupEnv(ENVRoleArn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bec659fe8bd616d2 — Environment-variable access.
pkgs/go/[email protected]/credentials/oidc_credential_provider.go:19 
	oidcProviderArn, ok2 := os.LookupEnv(ENVOIDCProviderArn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe82e5b93fdb4a44 — Environment-variable access.
pkgs/go/[email protected]/credentials/oidc_credential_provider.go:20 
	oidcTokenFilePath, ok3 := os.LookupEnv(ENVOIDCTokenFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d7f365410c3e5a0 — Environment-variable access.
pkgs/go/[email protected]/credentials/oidc_credential_provider.go:32 
	roleSessionName, ok := os.LookupEnv(ENVRoleSessionName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6b559ce2e2863a8 — Environment-variable access.
pkgs/go/[email protected]/credentials/profile_provider.go:47 
	path, ok := os.LookupEnv(ENVCredentialFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4a95af5d0f8b2e0 — Environment-variable access.
pkgs/go/[email protected]/credentials/profile_provider.go:299 
		path, ok := os.LookupEnv("USERPROFILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2f2b443ee86f207 — Environment-variable access.
pkgs/go/[email protected]/credentials/profile_provider.go:305 
	path, ok := os.LookupEnv("HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ad97e4d93304804 — Environment-variable access.
pkgs/go/[email protected]/credentials/uri_credential.go:32 
		URL = os.Getenv("ALIBABA_CLOUD_CREDENTIALS_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/antlr4-go/antlr/v4

go dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #b9ac94516ecc6a4b — Filesystem access.
pkgs/go/[email protected]/file_stream.go:23 
	f, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d5e695898f9d615 — Filesystem access.
pkgs/go/[email protected]/statistics.go:158 
	f, err := os.OpenFile(cname, os.O_APPEND|os.O_CREATE|os.O_WRONLY, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c8658f138ecfa7f — Filesystem access.
pkgs/go/[email protected]/statistics.go:175 
	f, err = os.OpenFile(fname, os.O_APPEND|os.O_CREATE|os.O_WRONLY, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/apache/arrow/go/v17

go dependency
expand_more 26 low-confidence finding(s)
low env_fs dependency Excluded from app score #64161683ee09430f — Filesystem access.
pkgs/go/[email protected]/arrow/_tools/tmpl/main.go:124 
	data, err := ioutil.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99cc37ca514c508e — Filesystem access.
pkgs/go/[email protected]/arrow/_tools/tmpl/main.go:184 
		os.WriteFile(spec.out, generated, fileMode(spec.in))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bfbbd1cd8246496b — Filesystem access.
pkgs/go/[email protected]/arrow/avro/avro2parquet/main.go:43 
		f, err := os.Create(*cpuprofile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecffac9b13d20c60 — Filesystem access.
pkgs/go/[email protected]/arrow/avro/avro2parquet/main.go:65 
	data, err := os.ReadFile(*filepath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a0265ceffe3eeaa — Filesystem access.
pkgs/go/[email protected]/arrow/avro/avro2parquet/main.go:79 
	fp, err := os.OpenFile(*filepath+".parquet", os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a96cf16435efdd1 — Filesystem access.
pkgs/go/[email protected]/arrow/gen-flatbuffers.go:78 
	raw, err := ioutil.ReadFile(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b630ad98b01b7fd — Filesystem access.
pkgs/go/[email protected]/arrow/gen-flatbuffers.go:83 
	f, err := os.Create(dst)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40bcfdebe3cfe4c3 — Filesystem access.
pkgs/go/[email protected]/arrow/internal/cdata_integration/entrypoints.go:70 
	f, err := os.Open(jsonPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #404d1ae616bacdff — Filesystem access.
pkgs/go/[email protected]/arrow/internal/flight_integration/scenario.go:173 
	r, err := os.Open(s.path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54d283823f122223 — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-cat/main.go:125 
	f, err := os.Open(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb50285b07fa19ff — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-file-to-stream/main.go:50 
	r, err := os.Open(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #585e17090f2b894b — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-json-integration-test/main.go:76 
	r, err := os.Open(arrowName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07f339411dacd93d — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-json-integration-test/main.go:82 
	w, err := os.Create(jsonName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #caeb3f21ba404128 — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-json-integration-test/main.go:127 
	r, err := os.Open(jsonName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1275f47a92c6da48 — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-json-integration-test/main.go:133 
	w, err := os.Create(arrowName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a63815dfb10919e — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-json-integration-test/main.go:177 
	jr, err := os.Open(jsonName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #240a6986f9d69e2f — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-json-integration-test/main.go:188 
	ar, err := os.Open(arrowName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #987cbfc8b1d9d29b — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-ls/main.go:122 
	f, err := os.Open(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3765272dbc49aa3 — Environment-variable access.
pkgs/go/[email protected]/arrow/memory/checked_allocator.go:123 
	if val, ok := os.LookupEnv("ARROW_CHECKED_ALLOC_FRAMES"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d53444dcacf8a35 — Environment-variable access.
pkgs/go/[email protected]/arrow/memory/checked_allocator.go:129 
	if val, ok := os.LookupEnv("ARROW_CHECKED_REALLOC_FRAMES"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b75e7f935626084 — Environment-variable access.
pkgs/go/[email protected]/arrow/memory/checked_allocator.go:135 
	if val, ok := os.LookupEnv("ARROW_CHECKED_MAX_RETAINED_FRAMES"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62d75b94ea89148f — Environment-variable access.
pkgs/go/[email protected]/internal/utils/min_max_arm64.go:31 
	if ext, ok := os.LookupEnv("ARM_ENABLE_EXT"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a636406c797199f — Filesystem access.
pkgs/go/[email protected]/parquet/cmd/parquet_reader/main.go:77 
		fileOut, err := os.Create(config.Output)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46ec2a9b6461c6f5 — Filesystem access.
pkgs/go/[email protected]/parquet/file/file_reader.go:89 
		source, err = os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc69907e9b4ef218 — Environment-variable access.
pkgs/go/[email protected]/parquet/internal/bmi/bmi_arm64.go:33 
	if ext, ok := os.LookupEnv("ARM_ENABLE_EXT"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6474abba3d2d99c5 — Environment-variable access.
pkgs/go/[email protected]/parquet/internal/utils/unpack_bool_arm64.go:34 
	if ext, ok := os.LookupEnv("ARM_ENABLE_EXT"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/apache/pulsar-client-go

go dependency
expand_more 30 low-confidence finding(s)
low env_fs dependency Excluded from app score #22fc7c6639d476a2 — Filesystem access.
pkgs/go/[email protected]/oauth2/client_credentials_provider.go:58 
		keyFile, err = os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b9429cc53b8bb1d — Filesystem access.
pkgs/go/[email protected]/oauth2/client_credentials_provider.go:68 
		keyFile, err = os.ReadFile(k.KeyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #129b40504daec013 — Filesystem access.
pkgs/go/[email protected]/perf/pulsar-perf-go.go:61 
		tokenBytes, err := os.ReadFile(clientArgs.TokenFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b3d66a2e7663edd — Filesystem access.
pkgs/go/[email protected]/pulsar/auth/athenz.go:247 
		pem, err := os.ReadFile(uriSt.Path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7ddaf5399c80d53 — Filesystem access.
pkgs/go/[email protected]/pulsar/auth/token.go:71 
			data, err := os.ReadFile(tokenFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a872582d96714ad — Filesystem access.
pkgs/go/[email protected]/pulsar/crypto/default_crypto_Key_reader.go:46 
	key, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08ea5e4a3e2037e3 — Filesystem access.
pkgs/go/[email protected]/pulsar/internal/connection.go:1124 
		caCerts, err := os.ReadFile(c.tlsOptions.TrustCertsFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc774576dbaa6250 — Filesystem access.
pkgs/go/[email protected]/pulsar/internal/http_client.go:353 
				rootCA, err := os.ReadFile(tlsConfig.TrustCertsFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #786ea9831376f9bf — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/auth/token.go:57 
	data, err := os.ReadFile(tokenFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97ee90eee7c9ceba — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/auth/transport.go:50 
		rootCA, err := os.ReadFile(config.TLSTrustCertsFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c5885156e3d9372 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:322 
		file, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4b851952e369c78 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:450 
	_, err := os.Open(destinationFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d8f367a9a571f8d — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:457 
	file, err := os.Create(destinationFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ce065bbc6945de8 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:484 
	_, err := os.Open(destinationFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d28f7866a2b6b4a — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:491 
	file, err := os.Create(destinationFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9c798af3881ed4e — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:634 
		file, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8dcd395fed930fb5 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:892 
		file, err := os.Open(triggerFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51f83d13e04e1eff — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:959 
	file, err := os.Open(sourceFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da4a228d6ac19805 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/packages.go:168 
	_, err = os.Open(destinationFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #115f0a6b7150d0a3 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/packages.go:175 
	file, err := os.Create(destinationFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ceb235db58774ea0 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/packages.go:236 
	file, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #081cbfd690d108d0 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/sinks.go:236 
		file, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #effac8673cce8f3e — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/sinks.go:369 
		file, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17e18183b2e6e817 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/sources.go:240 
		file, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63df79b063e4c782 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/sources.go:373 
		file, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86a5f793c411f9dd — Environment-variable access.
pkgs/go/[email protected]/pulsaradmin/pkg/utils/home_dir.go:38 
		home := os.Getenv("HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9560ad8646647398 — Environment-variable access.
pkgs/go/[email protected]/pulsaradmin/pkg/utils/home_dir.go:40 
		if homeDrive, homePath := os.Getenv("HOMEDRIVE"), os.Getenv("HOMEPATH"); len(homeDrive) > 0 && len(homePath) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d4449c14ed1c717 — Environment-variable access.
pkgs/go/[email protected]/pulsaradmin/pkg/utils/home_dir.go:43 
		userProfile := os.Getenv("USERPROFILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04ca6ded8a4dfd04 — Environment-variable access.
pkgs/go/[email protected]/pulsaradmin/pkg/utils/home_dir.go:96 
	return os.Getenv("HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #088433b68f803f8f — Environment-variable access.
pkgs/go/[email protected]/pulsaradmin/pkg/utils/utils.go:44 
	if envConf, ok := os.LookupEnv("PULSAR_CLIENT_CONF_PATH"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/aws/aws-sdk-go-v2

go dependency
expand_more 9 low-confidence finding(s)
low env_fs dependency Excluded from app score #9107ea9e159218c1 — Filesystem access.
pkgs/go/[email protected]/aws/generate.go:29 
	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df65a034752ba11e — Filesystem access.
pkgs/go/[email protected]/aws/logging_generate.go:85 
	file, err := os.Create("logging.go")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7892a75cb0895336 — Environment-variable access.
pkgs/go/[email protected]/aws/middleware/recursion_detection.go:40 
	_, hasLambdaEnv := os.LookupEnv(envAwsLambdaFunctionName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79b2db44137e1382 — Environment-variable access.
pkgs/go/[email protected]/aws/middleware/recursion_detection.go:41 
	xAmznTraceID, hasTraceID := os.LookupEnv(envAmznTraceID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b4b05af7693c7ff — Environment-variable access.
pkgs/go/[email protected]/aws/middleware/user_agent.go:201 
	if ev := os.Getenv(execEnvVar); len(ev) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46ca771166f46134 — Environment-variable access.
pkgs/go/[email protected]/internal/awstesting/util.go:106 
	originalEnv := os.Environ()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15c2cace0ee8542d — Environment-variable access.
pkgs/go/[email protected]/internal/awstesting/util.go:150 
		if val, ok := os.LookupEnv(env); ok && len(val) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e1df54fbac03475 — Filesystem access.
pkgs/go/[email protected]/internal/endpoints/awsrulesfn/internal/partition/codegen.go:90 
	modelFile, err := os.Open(modelFilename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #854e0234b6054b58 — Filesystem access.
pkgs/go/[email protected]/internal/endpoints/awsrulesfn/internal/partition/codegen.go:101 
	file, err := os.Create(outputFilename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/aws/aws-sdk-go-v2/config

go dependency
expand_more 35 low-confidence finding(s)
low env_fs dependency Excluded from app score #599c2705c422d2a8 — Filesystem access.
pkgs/go/[email protected]/codegen/main.go:94 
	file, err := os.OpenFile(config.OutputPath, os.O_CREATE|os.O_TRUNC|os.O_WRONLY, 0744)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef6cb6b51a7dbf8c — Environment-variable access.
pkgs/go/[email protected]/config.go:221 
	if os.Getenv(awsProfileEnv) != "" || options.SharedConfigProfile != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3a5e7354e59709a — Environment-variable access.
pkgs/go/[email protected]/defaultsmode.go:43 
		EnvironmentIdentifier:     aws.ExecutionEnvironmentID(os.Getenv(execEnvVar)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d15a12370062eec2 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:326 
		creds.AccountID = os.Getenv(awsAccountIDEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91b931ff33ee0bb2 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:327 
		creds.SessionToken = os.Getenv(awsSessionTokenEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5b232dc54513d6f — Environment-variable access.
pkgs/go/[email protected]/env_config.go:331 
	cfg.ContainerCredentialsEndpoint = os.Getenv(awsContainerCredentialsFullURIEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c30d9407da523b86 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:332 
	cfg.ContainerCredentialsRelativePath = os.Getenv(awsContainerCredentialsRelativeURIEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69661caefcc86771 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:333 
	cfg.ContainerAuthorizationToken = os.Getenv(awsContainerAuthorizationTokenEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25f901a75c184b7e — Environment-variable access.
pkgs/go/[email protected]/env_config.go:338 
	cfg.SharedCredentialsFile = os.Getenv(awsSharedCredentialsFileEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #381cc21a4c40b902 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:339 
	cfg.SharedConfigFile = os.Getenv(awsConfigFileEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2542da6dafab79ce — Environment-variable access.
pkgs/go/[email protected]/env_config.go:341 
	cfg.CustomCABundle = os.Getenv(awsCABundleEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ac6ddb6f9b0b7a8 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:343 
	cfg.WebIdentityTokenFilePath = os.Getenv(awsWebIdentityTokenFileEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40a05c2aca3612aa — Environment-variable access.
pkgs/go/[email protected]/env_config.go:345 
	cfg.RoleARN = os.Getenv(awsRoleARNEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c0fa0d8f756102d — Environment-variable access.
pkgs/go/[email protected]/env_config.go:346 
	cfg.RoleSessionName = os.Getenv(awsRoleSessionNameEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5944cb824acc547d — Environment-variable access.
pkgs/go/[email protected]/env_config.go:348 
	cfg.AppID = os.Getenv(awsSdkUaAppIDEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d98416f7dae9559 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:369 
	cfg.EC2IMDSEndpoint = os.Getenv(awsEc2MetadataServiceEndpointEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b47f46865a67e8a9 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:478 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b14c2f629f689c48 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:496 
		if value := os.Getenv(k); len(value) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f87b4ce1757d249 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:508 
		if value := os.Getenv(k); len(value) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c591aba194f9c7c9 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:521 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f5b416cdd648b16 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:534 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a5cd81ef292a010 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:556 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #338d5cb6f794bb98 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:575 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed184fb284d15bed — Filesystem access.
pkgs/go/[email protected]/env_config.go:649 
	b, err := os.ReadFile(c.CustomCABundle)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fde1fdfd53fdd66 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:673 
	if endpt := os.Getenv(fmt.Sprintf("%s_%s", awsEndpointURLEnv, normalizeEnv(sdkID))); endpt != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13c3812a9f7f647c — Environment-variable access.
pkgs/go/[email protected]/env_config.go:726 
		if v := os.Getenv(k); len(v) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #605301178dcf6076 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:735 
		if v := os.Getenv(k); len(v) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2d48affb2465c1e — Environment-variable access.
pkgs/go/[email protected]/env_config.go:750 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c0d6ba37dee6109 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:777 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #988d4bdf5c144a23 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:801 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8d5ab8047544bf1 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:824 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b1a4021c01b42a4 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:845 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8216a6d11309e5d6 — Environment-variable access.
pkgs/go/[email protected]/resolve_credentials.go:340 
			if authFilePath := os.Getenv(httpProviderAuthFileEnvVar); authFilePath != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76a5d0085b0f3acc — Filesystem access.
pkgs/go/[email protected]/resolve_credentials.go:344 
					if contents, err = ioutil.ReadFile(authFilePath); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4475f6ce54836e7 — Filesystem access.
pkgs/go/[email protected]/shared_config.go:495 
	b, err := ioutil.ReadFile(c.CustomCABundle)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/aws/aws-sdk-go-v2/credentials

go dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #f59de5be916c6551 — Environment-variable access.
pkgs/go/[email protected]/processcreds/provider.go:107 
	cmd.Env = os.Environ()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e429efbd020288d — Filesystem access.
pkgs/go/[email protected]/ssocreds/sso_cached_token.go:148 
	fileBytes, err := ioutil.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #684987e643718422 — Filesystem access.
pkgs/go/[email protected]/ssocreds/sso_cached_token.go:181 
	f, err = os.OpenFile(filename, os.O_CREATE|os.O_TRUNC|os.O_RDWR, fileMode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edc0fa95c87d7311 — Filesystem access.
pkgs/go/[email protected]/stscreds/web_identity_provider.go:83 
	b, err := ioutil.ReadFile(string(j))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/aws/aws-sdk-go-v2/service/bedrockruntime

go dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #93601a28ed332d5e — Environment-variable access.
pkgs/go/[email protected]/endpoints.go:207 
	_, g := os.LookupEnv("AWS_ENDPOINT_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bc44af61a604589 — Environment-variable access.
pkgs/go/[email protected]/endpoints.go:208 
	_, s := os.LookupEnv("AWS_ENDPOINT_URL_BEDROCK_RUNTIME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/bytedance/mockey

go dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #97a54840c9345334 — Environment-variable access.
pkgs/go/[email protected]/internal/tool/check_gcflags.go:29 
	if flag := os.Getenv("MOCKEY_CHECK_GCFLAGS"); flag != "false" && !IsGCFlagsSet() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d916e04aff7b1e7 — Environment-variable access.
pkgs/go/[email protected]/internal/tool/debug.go:27 
	if flag := os.Getenv("MOCKEY_DEBUG"); flag == "true" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/bytedance/sonic

go dependency
expand_more 12 low-confidence finding(s)
low env_fs dependency Excluded from app score #3f06f09cb7e26fed — Environment-variable access.
pkgs/go/[email protected]/internal/cpu/features.go:32 
	switch v := os.Getenv("SONIC_MODE"); v {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a8792ac1cf24af9 — Environment-variable access.
pkgs/go/[email protected]/internal/decoder/jitdec/debug.go:29 
	debugSyncGC  = os.Getenv("SONIC_SYNC_GC") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bf76a450f0be297 — Environment-variable access.
pkgs/go/[email protected]/internal/decoder/jitdec/debug.go:30 
	debugAsyncGC = os.Getenv("SONIC_NO_ASYNC_GC") == ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd48759c8abb46f9 — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/vars/const.go:37 
	DebugSyncGC   = os.Getenv("SONIC_SYNC_GC") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #311dfff38ac110a5 — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/vars/const.go:38 
	DebugAsyncGC  = os.Getenv("SONIC_NO_ASYNC_GC") == ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ace2eeb2ef11141f — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/vars/const.go:39 
	DebugCheckPtr = os.Getenv("SONIC_CHECK_POINTER") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fb68ab52a1b6d6c — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/vars/const.go:42 
var UseVM = os.Getenv("SONIC_ENCODER_USE_VM") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b59fef16c2aea1ba — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/vars/errors.go:86 
	if v := os.Getenv("SONIC_PANIC_MAX_JSON_LENGTH"); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8303791f87110dc2 — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/x86/debug_go116.go:32 
	debugSyncGC  = os.Getenv("SONIC_SYNC_GC") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb4f07672d16ef2f — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/x86/debug_go116.go:33 
	debugAsyncGC = os.Getenv("SONIC_NO_ASYNC_GC") == ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1dbe631c725446e9 — Environment-variable access.
pkgs/go/[email protected]/internal/envs/decode.go:7 
var UseOptDec = os.Getenv("SONIC_USE_OPTDEC") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a9f521362daa00b — Environment-variable access.
pkgs/go/[email protected]/internal/envs/decode.go:8 
var UseFastMap = os.Getenv("SONIC_USE_FASTMAP") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/casbin/casbin/v2

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #839b5f102bf3cd1e — Filesystem access.
pkgs/go/[email protected]/config/config.go:91 
	f, err := os.Open(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a9b98412ddb105b — Filesystem access.
pkgs/go/[email protected]/persist/file-adapter/adapter.go:89 
	f, err := os.Open(a.filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81a704e9b9640201 — Filesystem access.
pkgs/go/[email protected]/persist/file-adapter/adapter.go:107 
	f, err := os.Create(a.filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b10ab28604cfedf9 — Filesystem access.
pkgs/go/[email protected]/persist/file-adapter/adapter_filtered.go:81 
	f, err := os.Open(a.filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f4c2696c19d8678 — Filesystem access.
pkgs/go/[email protected]/persist/file-adapter/adapter_mock.go:54 
	f, err := os.Open(a.filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/confluentinc/confluent-kafka-go

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #9bf37a41e695ebe3 — Filesystem access.
pkgs/go/[email protected]/kafka/go_rdkafka_generr/go_rdkafka_generr.go:30 
	f, err := os.Create(outfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb105e71fe11ab4f — Filesystem access.
pkgs/go/[email protected]/kafka/testhelpers.go:49 
	cf, err := os.Open("testconf.json")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a1508f9f68d33b6 — Environment-variable access.
pkgs/go/[email protected]/kafka/testhelpers.go:70 
		testconf.Brokers = os.Getenv(testconf.Brokers[1:])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #128dc30cbd622fd4 — Filesystem access.
pkgs/go/[email protected]/schemaregistry/rest_service.go:171 
		caCert, err := ioutil.ReadFile(caFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e934ef3f97abaf39 — Filesystem access.
pkgs/go/[email protected]/schemaregistry/testhelpers.go:40 
	cf, err := os.Open("../kafka/testconf.json")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/containerd/cgroups/v3

go dependency
expand_more 48 low-confidence finding(s)
low env_fs dependency Excluded from app score #67ad962942e6b3da — Filesystem access.
pkgs/go/[email protected]/cgroup1/blkio.go:75 
			if err := os.WriteFile(
				filepath.Join(b.Path(path), "blkio."+t.name),
				t.format(t.value),
				defaultFilePerm,
			); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e0de2b1dc3f4876 — Filesystem access.
pkgs/go/[email protected]/cgroup1/blkio.go:134 
	f, err := os.Open(filepath.Join(b.procRoot, "partitions"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4d9203608fc0be1 — Filesystem access.
pkgs/go/[email protected]/cgroup1/blkio.go:177 
	f, err := os.Open(filepath.Join(b.Path(path), "blkio."+name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #736f544affc8d664 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cgroup.go:201 
	f, err := os.OpenFile(path, os.O_CREATE|os.O_WRONLY, perm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca05bf1d9c3d75c3 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpu.go:85 
				if err := os.WriteFile(
					filepath.Join(c.Path(path), "cpu."+t.name),
					value,
					defaultFilePerm,
				); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0618d0a11e9f8ed5 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpu.go:103 
	f, err := os.Open(filepath.Join(c.Path(path), "cpu.stat"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12b86905a21c71b8 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuacct.go:74 
	data, err := os.ReadFile(filepath.Join(c.Path(path), "cpuacct.usage_percpu"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0292837630b1df93 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuacct.go:90 
	f, err := os.Open(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88013481a1eab30a — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuset.go:71 
				if err := os.WriteFile(
					filepath.Join(c.Path(path), "cpuset."+t.name),
					[]byte(t.value),
					defaultFilePerm,
				); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec3fb922cc2a6e09 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuset.go:89 
	if cpus, err = os.ReadFile(filepath.Join(path, "cpuset.cpus")); err != nil && !os.IsNotExist(err) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #949db384aa15fd5e — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuset.go:92 
	if mems, err = os.ReadFile(filepath.Join(path, "cpuset.mems")); err != nil && !os.IsNotExist(err) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4bafe323a0b9bcf1 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuset.go:136 
		if err := os.WriteFile(
			filepath.Join(current, "cpuset.cpus"),
			parentCpus,
			defaultFilePerm,
		); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #945619061a188a25 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuset.go:145 
		if err := os.WriteFile(
			filepath.Join(current, "cpuset.mems"),
			parentMems,
			defaultFilePerm,
		); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #033b428a3c96eb00 — Filesystem access.
pkgs/go/[email protected]/cgroup1/devices.go:63 
		if err := os.WriteFile(
			filepath.Join(d.Path(path), file),
			[]byte(deviceString(device)),
			defaultFilePerm,
		); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #778466ea6107aedb — Filesystem access.
pkgs/go/[email protected]/cgroup1/freezer.go:53 
	return os.WriteFile(
		filepath.Join(f.root, path, "freezer.state"),
		[]byte(strings.ToUpper(string(state))),
		defaultFilePerm,
	)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d004700feac806b2 — Filesystem access.
pkgs/go/[email protected]/cgroup1/freezer.go:61 
	current, err := os.ReadFile(filepath.Join(f.root, path, "freezer.state"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ec7982e30a043ee — Filesystem access.
pkgs/go/[email protected]/cgroup1/hugetlb.go:59 
		if err := os.WriteFile(
			filepath.Join(h.Path(path), strings.Join([]string{"hugetlb", limit.Pagesize, "limit_in_bytes"}, ".")),
			[]byte(strconv.FormatUint(limit.Limit, 10)),
			defaultFilePerm,
		); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e382e5ed87ef30f8 — Filesystem access.
pkgs/go/[email protected]/cgroup1/memory.go:235 
	fMemStat, err := os.Open(filepath.Join(m.Path(path), "memory.stat"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afcdd3b3518e8944 — Filesystem access.
pkgs/go/[email protected]/cgroup1/memory.go:250 
	fMemOomControl, err := os.Open(filepath.Join(m.Path(path), "memory.oom_control"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c603ce7620ebfac — Filesystem access.
pkgs/go/[email protected]/cgroup1/memory.go:397 
			if err := os.WriteFile(
				filepath.Join(m.Path(path), "memory."+t.name),
				[]byte(strconv.FormatInt(*t.value, 10)),
				defaultFilePerm,
			); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9978c5d40cb16e12 — Filesystem access.
pkgs/go/[email protected]/cgroup1/memory.go:470 
	evtFile, err := os.Open(filepath.Join(root, event.EventFile()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c79f86f6a8aac18 — Filesystem access.
pkgs/go/[email protected]/cgroup1/memory.go:478 
	if err := os.WriteFile(evctlPath, []byte(data), 0o700); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ff3e0f09c241f60 — Filesystem access.
pkgs/go/[email protected]/cgroup1/net_cls.go:50 
		return os.WriteFile(
			filepath.Join(n.Path(path), "net_cls.classid"),
			[]byte(strconv.FormatUint(uint64(*resources.Network.ClassID), 10)),
			defaultFilePerm,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a57c503ee83698c — Filesystem access.
pkgs/go/[email protected]/cgroup1/net_prio.go:51 
			if err := os.WriteFile(
				filepath.Join(n.Path(path), "net_prio.ifpriomap"),
				formatPrio(prio.Name, prio.Priority),
				defaultFilePerm,
			); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #580628331c74ddef — Filesystem access.
pkgs/go/[email protected]/cgroup1/pids.go:51 
		return os.WriteFile(
			filepath.Join(p.Path(path), "pids.max"),
			[]byte(strconv.FormatInt(resources.Pids.Limit, 10)),
			defaultFilePerm,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10b8b98068c735d0 — Filesystem access.
pkgs/go/[email protected]/cgroup1/rdma.go:70 
			return os.WriteFile(
				filepath.Join(p.Path(path), "rdma.max"),
				[]byte(createCmdString(device, &limit)),
				defaultFilePerm,
			)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac47eabcfa5760e2 — Filesystem access.
pkgs/go/[email protected]/cgroup1/rdma.go:127 
	currentData, err := os.ReadFile(filepath.Join(p.Path(path), "rdma.current"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88aa832a5355d99e — Filesystem access.
pkgs/go/[email protected]/cgroup1/rdma.go:133 
	maxData, err := os.ReadFile(filepath.Join(p.Path(path), "rdma.max"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d7bee0cef019403 — Filesystem access.
pkgs/go/[email protected]/cgroup1/utils.go:85 
	f, err := os.Open(filepath.Join(path, pType))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3d0fccf0e6d0bb2 — Filesystem access.
pkgs/go/[email protected]/cgroup1/utils.go:135 
	f, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e59098a0242a838 — Filesystem access.
pkgs/go/[email protected]/cgroup1/utils.go:212 
	f, err := os.Open("/proc/self/mountinfo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #947f3a2785c7016f — Filesystem access.
pkgs/go/[email protected]/cgroup1/v1.go:50 
	f, err := os.Open("/proc/self/mountinfo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a74175e9645740db — Filesystem access.
pkgs/go/[email protected]/cgroup2/manager.go:148 
	return os.WriteFile(
		filepath.Join(path, c.filename),
		data,
		perm,
	)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55a56d8250c1de5a — Filesystem access.
pkgs/go/[email protected]/cgroup2/manager.go:250 
	val, err := os.ReadFile(filepath.Join(c.path, typeFile))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f5bbaa7968b38ea — Filesystem access.
pkgs/go/[email protected]/cgroup2/manager.go:271 
	b, err := os.ReadFile(filepath.Join(c.unifiedMountpoint, controllersFile))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eedf9cb7a5588da2 — Filesystem access.
pkgs/go/[email protected]/cgroup2/manager.go:279 
	b, err := os.ReadFile(filepath.Join(c.path, controllersFile))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07abbe2a32ab67af — Filesystem access.
pkgs/go/[email protected]/cgroup2/manager.go:332 
	f, err := os.OpenFile(filePath, os.O_WRONLY, 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f04d64cbc01c794 — Filesystem access.
pkgs/go/[email protected]/cgroup2/manager.go:636 
	f, err := os.Open(filepath.Join(path, file))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0795258219c3a995 — Filesystem access.
pkgs/go/[email protected]/cgroup2/state.go:53 
	current, err := os.ReadFile(filepath.Join(path, cgroupFreeze))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b298ba2e445fec4 — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:74 
	f, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #862390c06f9d6efd — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:127 
	f, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #738b03b100b868d9 — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:246 
	f, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46e0d5a3fddba0df — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:278 
	currentData, err := os.ReadFile(fpath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4efac733617ab24 — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:332 
	currentData, err := os.ReadFile(filepath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05979d0bbfaa8e47 — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:423 
		dir, err := os.OpenFile("/sys/kernel/mm/hugepages", unix.O_DIRECTORY|unix.O_RDONLY, 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9bc994647b2421b — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:488 
	f, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34095feb90a3b7a3 — Filesystem access.
pkgs/go/[email protected]/utils.go:82 
		file, err := os.Open("/proc/self/uid_map")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af602e3b1d1ef898 — Filesystem access.
pkgs/go/[email protected]/utils.go:114 
	f, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/dave/jennifer

go dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #bed2b7b150cb8b7d — Filesystem access.
pkgs/go/[email protected]/genjen/main.go:14 
	if err := os.WriteFile("./jen/generated.go", buf.Bytes(), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #176aec7e1754eb3a — Filesystem access.
pkgs/go/[email protected]/gennames/main.go:26 
	if err := os.WriteFile(*out, buf.Bytes(), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #783593200cbbf756 — Filesystem access.
pkgs/go/[email protected]/jen/jen.go:27 
	if err := os.WriteFile(filename, buf.Bytes(), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/gin-gonic/gin

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #c10fe1f9bcea1c34 — Filesystem access.
pkgs/go/[email protected]/context.go:718 
	out, err := os.Create(dst)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea7a2f2cf708da5f — Environment-variable access.
pkgs/go/[email protected]/logger.go:227 
	if w, ok := out.(*os.File); !ok || os.Getenv("TERM") == "dumb" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f83066986ab0160d — Environment-variable access.
pkgs/go/[email protected]/mode.go:53 
	mode := os.Getenv(EnvGinMode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20c5245cff3ac76d — Filesystem access.
pkgs/go/[email protected]/recovery.go:130 
			data, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7872c0e38d0ea08 — Environment-variable access.
pkgs/go/[email protected]/utils.go:143 
		if port := os.Getenv("PORT"); port != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/go-playground/validator/v10

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #fc59c4389951d391 — Filesystem access.
pkgs/go/[email protected]/baked_in.go:1592 
		file, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/gofrs/flock

go dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #ffe2bd995724b89f — Filesystem access.
pkgs/go/[email protected]/flock.go:128 
	fh, err := os.OpenFile(f.path, flags, os.FileMode(0600))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #caf392577ed9fffb — Filesystem access.
pkgs/go/[email protected]/flock_unix.go:187 
			fh, err := os.OpenFile(f.path, os.O_CREATE|os.O_RDWR, os.FileMode(0600))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/hamba/avro/v2

go dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #08924db038ecde6b — Filesystem access.
pkgs/go/[email protected]/cmd/avrogen/main.go:142 
		file, err := os.Create(filepath.Clean(filename))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa7a1bad59c2d04d — Filesystem access.
pkgs/go/[email protected]/cmd/avrogen/main.go:224 
	return os.ReadFile(filepath.Clean(templateFileName))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f136970d8902c188 — Filesystem access.
pkgs/go/[email protected]/protocol.go:206 
	s, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0eff17bccffbe36 — Filesystem access.
pkgs/go/[email protected]/schema_parse.go:51 
		s, err := os.ReadFile(filepath.Clean(path))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/magiconair/properties

go dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #8a647fae11d8a59b — Filesystem access.
pkgs/go/[email protected]/load.go:94 
	data, err := ioutil.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f3d9d632b281b2e — Environment-variable access.
pkgs/go/[email protected]/properties.go:776 
			val = os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/minio/minio-go/v7

go dependency
expand_more 376 low-confidence finding(s)
low env_fs dependency Excluded from app score #e5ca694bf970f745 — Filesystem access.
pkgs/go/[email protected]/api-get-object-file.go:75 
	filePart, err := os.OpenFile(filePartPath, os.O_CREATE|os.O_APPEND|os.O_WRONLY, 0o600)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #407554c481882f3e — Filesystem access.
pkgs/go/[email protected]/api-put-object-file-context.go:40 
	fileReader, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ba767dad3579caa — Filesystem access.
pkgs/go/[email protected]/api-putobject-snowball.go:138 
			f, err := os.Open(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e76856ad2f4b477 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:80 
	transport, err = minio.DefaultTransport(mustParseBool(os.Getenv(enableHTTPS)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0992910cfaff6ab9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:86 
	if mustParseBool(os.Getenv(skipCERTValidation)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81eaafac7ec0f0cc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:266 
	return os.Getenv("RUN_ON_FAIL") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17d325b173f7955a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:272 
	if os.Getenv(serverEndpoint) == "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd0bebfe0f8b5614 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:280 
var mintDataDir = os.Getenv("MINT_DATA_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33fcd8a6f9dddaf3 — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:338 
	reader, _ := os.Open(getMintDataDirFilePath(fileName))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76de733e39384cd6 — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:342 
		reader, _ = os.Open(getMintDataDirFilePath(fileName))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f12a2eff152854a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:384 
	return os.Getenv("MINT_MODE") == "full"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11f55cabb74d06d1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:414 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #507b5a28d6be171a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:416 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #436e4021a6e0d998 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:417 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69d5ff271512d3cd — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:468 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f7a63af05900da2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:470 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b78cfcb4f2a54213 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:471 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e2d3578eb4ec1e9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:538 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f13947cbecbb86a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:540 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95d4043f790dd000 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:542 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de932e8148bb1c5c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:605 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9df52da2cac9b8d2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:607 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2689ec36dac80838 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:609 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #641c9896559dcd1d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:704 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7fef28c0ce24d79 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:706 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba436e7af6c999c9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:708 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a18dcd352f912103 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:824 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d40f9742a91f474 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:826 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47734c6cd9fd496e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:828 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #247e125f2570b38c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:942 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28af9082df3d14cb — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:944 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23817fa549468e38 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:946 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3c90fd7ad7a1478 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1082 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6cf16b9583ad0d22 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1084 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31b23a3b8e58a38d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1086 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #584d2eea7b2284ba — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1228 
		Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3712c1273069745e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1230 
		Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a2385e6280bbf33 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1232 
	c, err := minio.New(os.Getenv(serverEndpoint), opts)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6e3d974255f01dc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1237 
	core, err := minio.NewCore(os.Getenv(serverEndpoint), opts)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #573e08eb14306a14 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1354 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #465b78334b43c5c3 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1356 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0871c75364604835 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1358 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c40479e6030e7371 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1492 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21a7dbf2da1c36d1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1494 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6487ad0f2824bb9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1496 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad83cf4b4b6f42da — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1653 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbe346eb2970bca9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1655 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eaf8b1c8c970d3a5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1657 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec305646ff71f0ff — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1794 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce8aba3234d6bd79 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1796 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #110e732209598aa8 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1798 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5890ec954d356906 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1907 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e6ef01733d9d1ce — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1909 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39dd65c47eb90a4e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1911 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60ae116959d1f578 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2003 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5dfb6087221f7063 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2005 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6db621f8c90a3b94 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2007 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1dd711f5d9b4276 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2171 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acbd1243cb0669c4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2173 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7717ec309817d4f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2175 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f83a4135fb86af1e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2366 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7340510d791647ee — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2368 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ca5b2e12b43b09d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2370 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7e109531a50867d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2536 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fe8ab13752405a4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2538 
			Creds:           credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7934ccc435e54db — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2540 
			Secure:          mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #729ce65776a66443 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2750 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c434a89093f72395 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2752 
			Creds:           credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8293c09aca1e4aff — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2754 
			Secure:          mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a14d993e065dd6c7 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2856 
		if mustParseBool(os.Getenv(enableHTTPS)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d3733e62582f861 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2902 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e483c9eb7557689 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2905 
			Creds:           credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54dab9b987bf0d86 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2907 
			Secure:          mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8bdf8555b248658f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3109 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b719f2fa3df2082 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3112 
			Creds:           credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbd762ce3556b94c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3113 
			Secure:          mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea6d2535d75c26ad — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3194 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3277cb574a3b7403 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3197 
			Creds:           credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3cb7c08c85d2ced — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3199 
			Secure:          mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29f2242ce60cc8b5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3460 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8c84ebe052f88ee — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3462 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d48b5aa5cc68f5e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3464 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #043c020ecf30678c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3567 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0dc227353230d3cb — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3569 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c30b063f421812ea — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3571 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05af875c493a2211 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3637 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cbe167d606c4838c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3639 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ae7e9f1fb116aee — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3641 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46cf836faf9e0053 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3709 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1fa924983403152 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3711 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3432e4844583f9e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3713 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3e600778438fb6e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3832 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d18a512ebc0fac79 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3834 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4818a3da0ae6b63b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3836 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5167456bfa7be1cb — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3923 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c34d48b7f2cacee — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3925 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93142298ec8f3399 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3927 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9921773c7160c360 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4020 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc9069eae2aaaf3d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4022 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e7d5643230554d0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4024 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a172bf66a5e4f2d9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4104 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8a711801041cba1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4106 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d972a22fbea30670 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4108 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3edf51ea28bea361 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4240 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f35a612e7df91fda — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4242 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ac016fa0f2bce63 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4244 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c8c84c4dda7f758 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4346 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c130da621a717c2a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4348 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6d51cd1efc11605 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4350 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09525f4ea83effab — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:4431 
	srcFile, err := os.Open(fName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9eb4a2a26d802219 — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:4438 
	tmpFile, err := os.Create(fName + ".gtar")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa834b18a2474d7c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4516 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d0d95278dbc98f2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4518 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84e3a19e2e66edee — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4520 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b01fff95c69cca3 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4617 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36e9ee035daaedb9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4619 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46c809bcfa0c6280 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4621 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f21c761c6b9fe0b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4719 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #089ed7315e811f81 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4721 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c2d4daee6e651e9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4723 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b013f07cf601514 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4792 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68663b12a9250401 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4794 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85a263e8c51709fd — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4796 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75617f489a04608c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4976 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e0843ed20f576db — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4978 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fadc5210a720f86a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4980 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a601760433a6e988 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5146 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5aba62457cd3a648 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5148 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2fe7d74d7c3cb82 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5150 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbee32077e3fd67a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5324 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a2001fea7a9f202 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5326 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d931b53f33091bf8 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5328 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18deaafcba8bdcda — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5444 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a427373defacd76f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5446 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08fd55b796942889 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5448 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8d35403bcd0b5cb — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:5568 
	f, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1ed368d3c9a3727 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5587 
	transport, err := minio.DefaultTransport(mustParseBool(os.Getenv(enableHTTPS)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #915d09e543bd99d7 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5624 
	if mustParseBool(os.Getenv(enableHTTPS)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4e2b8f766402128 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5630 
	expectedLocation := scheme + os.Getenv(serverEndpoint) + "/" + bucketName + "/" + objectName

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1ecf00fe1c63a15 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5631 
	expectedLocationBucketDNS := scheme + bucketName + "." + os.Getenv(serverEndpoint) + "/" + objectName

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21f7196c263640ec — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5666 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5f26410739c029c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5668 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd6dc363fb63f5b4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5670 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd301b9d2bb775c2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5861 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b6faf21aac13ed1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5863 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37579bebd6d7d68a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5865 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c475e948007dcdc5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6044 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #245f88d8cf859ccf — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6046 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10b8966574c9e730 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6048 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc053fd42f42a9cb — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6225 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f6182075522bdb6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6227 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7599edb16b7f406e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6229 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89666ff0d5a3dad2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6409 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #597d5cd95023e35c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6411 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03ca769362759596 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6413 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b71aa614971b47e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6594 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #362b4288f0576e63 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6596 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b4ea98cba132f96 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6598 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c900bd901e4fa21 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6704 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b287fc6d31542494 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6706 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af773a43ab94b236 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6708 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75af5056f5302c74 — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:6766 
		file, err := os.Create(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf8876e4421653c1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6827 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc44514c28247bdf — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6829 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #830704eed091302e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6831 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d340e8d6e897510 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6935 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30696333130d650d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6937 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01cd909b00eccbce — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6939 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #802bec9c43f70374 — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:6996 
		file, err := os.Create(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b72c3f4d0e42e45 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7051 
	if os.Getenv("NOTIFY_BUCKET") == "" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #733f6e3533206d7b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7052 
		os.Getenv("NOTIFY_SERVICE") == "" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96c4c11f32fae018 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7053 
		os.Getenv("NOTIFY_REGION") == "" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #978771276f813aac — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7054 
		os.Getenv("NOTIFY_ACCOUNTID") == "" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #131636bc9359c423 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7055 
		os.Getenv("NOTIFY_RESOURCE") == "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4539ac7eeeb0b6b8 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7063 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62859b704fb8fc25 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7065 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2c1e4f22193614a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7067 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dde1578d04a45b31 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7080 
	bucketName := os.Getenv("NOTIFY_BUCKET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b17b3e056307199b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7083 
	topicArn := notification.NewArn("aws", os.Getenv("NOTIFY_SERVICE"), os.Getenv("NOTIFY_REGION"), os.Getenv("NOTIFY_ACCOUNTID"), os.Getenv("NOTIFY_RESOURCE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7911575862dfb1a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7158 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c01070e813718edc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7160 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2247bda1ef25276d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7162 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa3c3d62b2d6c0aa — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:7192 
	file, err := os.Create(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73ca649c18840e81 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7516 
	transport, err := minio.DefaultTransport(mustParseBool(os.Getenv(enableHTTPS)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9920cc5f4613999 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7846 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #888c70b0e08c5a3b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7848 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af7cc3d0061e7481 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7850 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #922ab8546baca313 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7942 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85cdfe988c970c7b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7944 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7b86a251a8de450 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7946 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #927bc7802af04ead — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:7973 
		tempfile, err = os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f84a39a2cbfc0e8e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8065 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f432c03289c20a1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8067 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85e8b9225dd649e0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8069 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7efc8f36e913a633 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8125 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c30d5be5ad67120 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8127 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #850b2d0d44a5f2d6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8129 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c19b524e0e64f6d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8216 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb049ff518d702ca — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8218 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #849f155b74a1d320 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8220 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45fa06dc0a97641b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8377 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fd97a622c6973a0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8379 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d70edfea221e38a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8381 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ef9fdb44196a0bc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8440 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #268e82c43ac6ddcf — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8442 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b957e94ac34a790 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8444 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1778f49e71c16fcf — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8595 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64a7ed04448c2b03 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8597 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a729fbfa33d868a7 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8599 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f082ad7bc389efc4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8757 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c914c716299700f2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8759 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c56d1466624f6005 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8761 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95ca9b688d196559 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8973 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7e9c36119e144a5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8975 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8728fa5bb1aa3d8b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8977 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47c429023ed8ec6c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9071 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5536020823cf5de — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9073 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb4e29f1f9c55190 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9075 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27f2015ecf85c3ac — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9093 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f552269fb064979 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9095 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f99d38e7673a2a76 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9097 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4bf0ae973c3f8f10 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9354 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #797745f111d10431 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9356 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71e79c5ee93e8113 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9358 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dac604d596403eb0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9381 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e36ab08e04262381 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9383 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #086cf69b33760fe6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9385 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e69b27534934d522 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9409 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bb59103a8e66ecf — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9411 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb03d9e796b4114a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9413 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c8830aae84f8f0b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9436 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a0053aefd6e2f42 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9438 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26f032be3da14bed — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9440 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db6a19c9448153f5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9464 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f288b787a2ff814 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9466 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c2be3dfa622fa14 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9468 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aed94b4b2dd80e8b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9492 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23dfa666ca2921ce — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9494 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ac9fc284f607b33 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9496 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8260c3d21a04af2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9520 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e38a81b7cbfb22aa — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9522 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e23b44385a243734 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9524 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f72aa2f800aae684 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9548 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d344e4975b681456 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9550 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74a1132c6f49a5cd — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9552 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da189d516c90ad3f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9576 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #353bea73706e1e9e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9578 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7889706929c3c8a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9580 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84514ea6e16aa48f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9604 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d7c0c3e5f554819 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9606 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa824b80fe190dd4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9608 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d4e11619881dcce — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9631 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de86709a1c8948b4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9633 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7806651b8140a0b4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9635 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b130074688b5536c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9691 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f93da272b91c049 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9693 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e24f20d412a5272 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9695 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b5f8b39f16370d9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9889 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #744771b9ed040644 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9891 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c67680015673e52b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9893 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0dd7503facfe447 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10067 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0cea04d012c7d62 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10069 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7788bba8a7fc66c1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10071 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62dc64ca961813d7 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10244 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81a3315c7e88bc7a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10246 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd09d28303d74e32 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10248 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a11012adb6d529c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10424 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c68aeeff6843e66 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10426 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39a0a7e6a97abd20 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10428 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c38ae6c4081950b6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10599 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a37336e02ea5399f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10601 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b7c5719b03df929 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10603 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df98e31d0cd168d5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10770 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d03d8bf5de2a2c6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10772 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53ff348fa3ca3b70 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10774 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #280e3cd48c716bf2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10943 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f7f309cf0248acd — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10945 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09a4f5f4930c4b8e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10947 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f703213ed4f9f77 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11119 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba2560160c0df028 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11121 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e409d17458a2d53 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11123 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2464708c1acb5669 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11291 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ffb9fc1fa272888a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11293 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b98278f825a2218 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11295 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #997fc31a78393dac — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11465 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd0fd85a8da8bbff — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11467 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1db80f3d48c1cca — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11469 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4aaa29f17f2ce86f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11642 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49cc8faff116b0e1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11644 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2e7b118e057f5ae — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11646 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57ee3cf564cbbfb0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11665 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a744471b7f2fad81 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11667 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #155908dece2bb2ff — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11669 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a18fb466f2aad70b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11753 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c8bd23a813d916e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11755 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccb9bcbd75e8feff — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11757 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61f1bbdb97518f31 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11796 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd5625f5a1d70fb2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11798 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78f0bc893d7063b8 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11799 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #005f38c9c73383b5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11926 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30d30dd6e924f46d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11928 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4b9a1c2e5d41f0b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11930 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #466631d01b3e1ac0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12002 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3be8b628a57453c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12004 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49e23430ef093875 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12006 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd10543219eb9005 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12093 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aca00736f3b86e90 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12095 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fb3f702547fa57c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12097 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91f4c6f6543a5a90 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12155 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1939bbbfc3d48f64 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12157 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0a8cc01eb28b413 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12159 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f5cd7fc7e1018ba — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12178 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #914305c3650012ae — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12180 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a36b60d3b158b66f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12182 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b800ad867a4bf9d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12204 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15cda4506cb6ed60 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12206 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65325c25c5ee3854 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12207 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c011b3c70603399 — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:12241 
	file, err := os.Create(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0526ed34b8c6101 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12455 
	transport, err := minio.DefaultTransport(mustParseBool(os.Getenv(enableHTTPS)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #208a795de8134e3d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12665 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b9011e85c2861c1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12667 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25cf16fd98b5eab8 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12669 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #597dfee05e7cbfbb — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12768 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84d3950c9ab60ab9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12770 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49865bb8dd5b2599 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12772 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ea4e841bc3ad3fc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12857 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #759b4fc412c9333d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12859 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14a00bf0612f2feb — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12861 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #090943ab4f85e983 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12967 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d512742e39e88a4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12969 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84f5903cb1782ed6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12971 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b95c4c7c59677c3f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13044 
	if os.Getenv(serverEndpoint) != "s3.amazonaws.com" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d068c6813a6acd08 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13143 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bc4255f7de3c3d7 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13145 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #902172e3d3ff94f1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13147 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a31e61f73b8a97db — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13218 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a60b4436f492551 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13220 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22f6de6782995f9c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13222 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5115d676082e867c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13319 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #142cbf77f80e9563 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13321 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8537eadc7b0b64e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13323 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e59d1fbd1f57e3d0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13408 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7195ea234df4f4b2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13410 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8644e3adef37b592 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13412 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78c9c7e2afdfec8c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13509 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c726d082267b82a6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13511 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6631a01922cea5da — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13513 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dca2e875baa55cbd — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13654 
	tls := mustParseBool(os.Getenv(enableHTTPS))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e53fe41af1bd755 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13655 
	kms := mustParseBool(os.Getenv(enableKMS))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7eb1e18b388763d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13656 
	if os.Getenv(enableKMS) == "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8db282510e677552 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_aws.go:44 
	id := os.Getenv("AWS_ACCESS_KEY_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0c0d1524b5c9f06 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_aws.go:46 
		id = os.Getenv("AWS_ACCESS_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c24e7361d88e908 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_aws.go:49 
	secret := os.Getenv("AWS_SECRET_ACCESS_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d7ea835a82782a6 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_aws.go:51 
		secret = os.Getenv("AWS_SECRET_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3224ba84e505e935 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_aws.go:63 
		SessionToken:    os.Getenv("AWS_SESSION_TOKEN"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61abe396bcaacc0c — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_minio.go:45 
	id := os.Getenv("MINIO_ROOT_USER")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c213760bf699085c — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_minio.go:46 
	secret := os.Getenv("MINIO_ROOT_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4ae851cf49d71f1 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_minio.go:50 
		id = os.Getenv("MINIO_ACCESS_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41c36e6917697bb0 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_minio.go:51 
		secret = os.Getenv("MINIO_SECRET_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82c2f381a6227a4e — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/file_aws_credentials.go:78 
		p.Filename = os.Getenv("AWS_SHARED_CREDENTIALS_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfc480eee55ddb7b — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/file_aws_credentials.go:88 
		p.Profile = os.Getenv("AWS_PROFILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #724ad0b7b8578eb9 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/file_minio_client.go:63 
		if value, ok := os.LookupEnv("MINIO_SHARED_CREDENTIALS_FILE"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4cd8e7b44d2e88e6 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/file_minio_client.go:78 
		p.Alias = os.Getenv("MINIO_ALIAS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78555eb394b2ef84 — Filesystem access.
pkgs/go/[email protected]/pkg/credentials/file_minio_client.go:124 
	configBytes, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b060a260240ba513 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:104 
	token := os.Getenv("AWS_CONTAINER_AUTHORIZATION_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae6363d95f7b14f5 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:109 
	tokenFile := os.Getenv("AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20da863dd4eb8d70 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:114 
	relativeURI := os.Getenv("AWS_CONTAINER_CREDENTIALS_RELATIVE_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb056718f38b3f56 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:119 
	fullURI := os.Getenv("AWS_CONTAINER_CREDENTIALS_FULL_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c1e473a362c6431 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:124 
	identityFile := os.Getenv("AWS_WEB_IDENTITY_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e46f986a37c38d05 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:129 
	roleArn := os.Getenv("AWS_ROLE_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4247fdbc1d3d11e7 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:134 
	roleSessionName := os.Getenv("AWS_ROLE_SESSION_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60cccbd53d2009d0 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:139 
	region := os.Getenv("AWS_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b346fc57a982ccab — Filesystem access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:166 
				token, err := os.ReadFile(identityFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3964c1d26fb8f101 — Filesystem access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:320 
		bytes, err := os.ReadFile(tokenFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68f5074b98f85614 — Environment-variable access.
pkgs/go/[email protected]/transport.go:73 
		if f := os.Getenv("SSL_CERT_FILE"); f != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b743f0bcd11200d0 — Filesystem access.
pkgs/go/[email protected]/transport.go:75 
			data, err := os.ReadFile(f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/peterstace/simplefeatures

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #1277cdcbdd0e6abf — Filesystem access.
pkgs/go/[email protected]/internal/benchmarkreport/main.go:17 
	buf, err := os.ReadFile(os.Args[1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/prometheus/client_golang

go dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #8474d9d13e11e99b — Filesystem access.
pkgs/go/[email protected]/prometheus/collectors/gen_go_collector_set.go:105 
	if err := os.WriteFile(fname, result, 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #969fdb86ddd93a53 — Filesystem access.
pkgs/go/[email protected]/prometheus/gen_go_collector_metrics_set.go:102 
	if err := os.WriteFile(fname, result, 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ad8ae30e1344d47 — Filesystem access.
pkgs/go/[email protected]/prometheus/process_collector.go:166 
		content, err := os.ReadFile(pidFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/prometheus/common

go dependency
expand_more 7 low-confidence finding(s)
low env_fs dependency Excluded from app score #fe7009554f8bfa21 — Filesystem access.
pkgs/go/[email protected]/config/generate.go:172 
	if err := os.WriteFile(fmt.Sprintf("%s.crt", path), b.Bytes(), 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6103b02ab64cc1fc — Filesystem access.
pkgs/go/[email protected]/config/generate.go:181 
	if err := os.WriteFile(fmt.Sprintf("%s.key", path), b.Bytes(), 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8adb7ac4f7373c4c — Filesystem access.
pkgs/go/[email protected]/config/generate.go:241 
	if err := os.WriteFile("testdata/tls-ca-chain.pem", b.Bytes(), 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecbbc5a52b882354 — Filesystem access.
pkgs/go/[email protected]/config/headers.go:87 
			_, err := os.ReadFile(f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #383d22318625a8b0 — Filesystem access.
pkgs/go/[email protected]/config/headers.go:125 
			b, err := os.ReadFile(f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0df4203c59079eea — Filesystem access.
pkgs/go/[email protected]/config/http_config.go:286 
	content, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88b72ea187e3c62a — Filesystem access.
pkgs/go/[email protected]/config/http_config.go:730 
	fileBytes, err := os.ReadFile(s.file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/sbinet/npyio

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #e12c3ef6102f1dab — Filesystem access.
pkgs/go/[email protected]/ci/run-tests.go:45 
	f, err := os.Create("coverage.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #863abfbd7eb4df5f — Filesystem access.
pkgs/go/[email protected]/ci/run-tests.go:81 
			profile, err := ioutil.ReadFile("profile.out")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86d8e4ea3984e09c — Filesystem access.
pkgs/go/[email protected]/cmd/npyio-ls/main.go:33 
		f, err := os.Open(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcb66082e7aefd5a — Filesystem access.
pkgs/go/[email protected]/npz/reader.go:47 
	r, err := os.Open(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8bb79635065aae65 — Filesystem access.
pkgs/go/[email protected]/npz/writer.go:57 
	w, err := os.Create(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/shirou/gopsutil/v4

go dependency
expand_more 59 low-confidence finding(s)
low env_fs dependency Excluded from app score #ae9f962d4d6333a3 — Environment-variable access.
pkgs/go/[email protected]/cpu/cpu_plan9.go:22 
	root := os.Getenv("HOST_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba8b0448436168e6 — Filesystem access.
pkgs/go/[email protected]/disk/disk_linux.go:512 
	if f, err := os.Open(udevDataPath); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61de140adc5c681d — Filesystem access.
pkgs/go/[email protected]/disk/disk_linux.go:544 
	model, _ := os.ReadFile(filepath.Join(devicePath, "model"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #390275d89f379e96 — Filesystem access.
pkgs/go/[email protected]/disk/disk_linux.go:545 
	serial, _ := os.ReadFile(filepath.Join(devicePath, "serial"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #304004b060f1f372 — Filesystem access.
pkgs/go/[email protected]/disk/disk_linux.go:557 
		dmname, err := os.ReadFile(dmnameFilename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eba4cad40ed9494f — Filesystem access.
pkgs/go/[email protected]/disk/disk_solaris.go:51 
	f, err := os.Open(_MNTTAB)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79fad6869e70f5cf — Filesystem access.
pkgs/go/[email protected]/host/host_darwin.go:56 
	file, err := os.Open(utmpfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15ad0e2741be7243 — Filesystem access.
pkgs/go/[email protected]/host/host_freebsd.go:52 
	file, err := os.Open(utmpfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc6a32ffc1c99360 — Filesystem access.
pkgs/go/[email protected]/host/host_freebsd.go:109 
	file, err := os.Open(utmpfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8ca0912a607183f — Filesystem access.
pkgs/go/[email protected]/host/host_linux.go:84 
	file, err := os.Open(utmpfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c3920a257cc843d — Filesystem access.
pkgs/go/[email protected]/host/host_openbsd.go:63 
	file, err := os.Open(utmpfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #609e9d9fdc061037 — Filesystem access.
pkgs/go/[email protected]/host/host_solaris.go:104 
	b, err := os.ReadFile("/etc/release")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #817c6e50193b40a1 — Filesystem access.
pkgs/go/[email protected]/internal/common/common.go:93 
		return os.ReadFile(fpath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b55e55e86a51b30 — Filesystem access.
pkgs/go/[email protected]/internal/common/common.go:104 
	content, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff72ed6172c1f696 — Filesystem access.
pkgs/go/[email protected]/internal/common/common.go:120 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2a1830141f7e013 — Filesystem access.
pkgs/go/[email protected]/internal/common/common.go:148 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebe441faa77a3a8d — Filesystem access.
pkgs/go/[email protected]/internal/common/common.go:233 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1bd59047df5ed9b — Environment-variable access.
pkgs/go/[email protected]/internal/common/common.go:351 
		value = os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e6208c5a1314ce5 — Environment-variable access.
pkgs/go/[email protected]/internal/common/common.go:362 
	value := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de3c5e69f103d26a — Filesystem access.
pkgs/go/[email protected]/internal/common/common_linux.go:27 
	f, err := os.Open(HostProcWithContext(ctx))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c7b1de4186a7899 — Filesystem access.
pkgs/go/[email protected]/load/load_linux.go:79 
	out, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61459375eb94688d — Filesystem access.
pkgs/go/[email protected]/load/load_linux.go:121 
	line, err := os.ReadFile(loadavgFilename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f1f10d0ab6a3086 — Filesystem access.
pkgs/go/[email protected]/mem/mem_linux.go:464 
	f, err := os.Open(swapsFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eab64172eeae4f6f — Environment-variable access.
pkgs/go/[email protected]/mem/mem_plan9.go:20 
	root := os.Getenv("HOST_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c5e21c279e63715 — Environment-variable access.
pkgs/go/[email protected]/mem/mem_plan9.go:42 
	root := os.Getenv("HOST_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a3266f5483fb60f — Filesystem access.
pkgs/go/[email protected]/net/net_linux.go:475 
	f, err := os.Open(dir)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5ff6374930a45d4 — Filesystem access.
pkgs/go/[email protected]/net/net_linux.go:518 
	d, err := os.Open(common.HostProcWithContext(ctx))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef689eb81232335c — Filesystem access.
pkgs/go/[email protected]/net/net_linux.go:562 
	contents, err := os.ReadFile(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #511b4bfe4406729f — Filesystem access.
pkgs/go/[email protected]/net/net_linux.go:681 
	contents, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5260df83c178f428 — Filesystem access.
pkgs/go/[email protected]/net/net_linux.go:742 
	contents, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6a089479f1f8d86 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:139 
	contents, err := os.ReadFile(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63053af97be0faa8 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:348 
		statContents, err := os.ReadFile(statFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #512687b476c3a3a1 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:399 
	contents, err := os.ReadFile(smapsPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6724dbc00d813f8d — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:494 
	environContent, err := os.ReadFile(environPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #956cd23994d54e39 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:521 
	d, err := os.Open(limitsFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bd9b975cdbe7c4f — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:614 
	d, err := os.Open(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3531ee20479aeab — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:678 
	cmdline, err := os.ReadFile(cmdPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #893fc6e707b4c185 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:692 
	cmdline, err := os.ReadFile(cmdPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5f79348156066aa — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:715 
	ioline, err := os.ReadFile(ioPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30fd9b0dda223dc8 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:755 
	contents, err := os.ReadFile(memPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f6eb293bb3f0053 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:816 
	contents, err := os.ReadFile(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a77ee5b066c525f — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:833 
	contents, err := os.ReadFile(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7efacb093df090ba — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:1040 
	contents, err := os.ReadFile(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #990052524f76d102 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:1165 
	d, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c49b23c27ddc9a31 — Filesystem access.
pkgs/go/[email protected]/process/process_posix.go:29 
	d, err := os.Open("/dev")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c848d15591ae7ecb — Filesystem access.
pkgs/go/[email protected]/process/process_posix.go:46 
	ptsd, err := os.Open("/dev/pts")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3e5e9b6b00609d4 — Filesystem access.
pkgs/go/[email protected]/process/process_solaris.go:203 
	d, err := os.Open(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65193c75e0b7e57f — Filesystem access.
pkgs/go/[email protected]/process/process_solaris.go:235 
	exe, err := os.ReadFile(execNamePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9afe2dfef0446be — Filesystem access.
pkgs/go/[email protected]/process/process_solaris.go:245 
	cmdline, err := os.ReadFile(cmdPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1af2d1ea105b0ecb — Filesystem access.
pkgs/go/[email protected]/process/process_solaris.go:259 
	cmdline, err := os.ReadFile(cmdPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ddc6db2a4063093 — Filesystem access.
pkgs/go/[email protected]/process/process_solaris.go:281 
	d, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7750c5f16b04efd8 — Filesystem access.
pkgs/go/[email protected]/sensors/ex_linux.go:52 
		if raw, _ = os.ReadFile(basepath + "_label"); len(raw) != 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cdb1c02a9cd54df4 — Filesystem access.
pkgs/go/[email protected]/sensors/ex_linux.go:58 
		if raw, err = os.ReadFile(filepath.Join(directory, "name")); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcf284dd89f27f4a — Filesystem access.
pkgs/go/[email protected]/sensors/sensors_linux.go:39 
			name, err := os.ReadFile(filepath.Join(file, "type"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc5af09d8935ad60 — Filesystem access.
pkgs/go/[email protected]/sensors/sensors_linux.go:45 
			current, err := os.ReadFile(filepath.Join(file, "temp"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2dc4d58cd922891f — Filesystem access.
pkgs/go/[email protected]/sensors/sensors_linux.go:89 
		if raw, _ = os.ReadFile(basepath + "_label"); len(raw) != 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82ef82b83cb1abe1 — Filesystem access.
pkgs/go/[email protected]/sensors/sensors_linux.go:95 
		if raw, err = os.ReadFile(filepath.Join(directory, "name")); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b864fb89886cb74 — Filesystem access.
pkgs/go/[email protected]/sensors/sensors_linux.go:107 
		if raw, err = os.ReadFile(file); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10fd9232b627a9e1 — Filesystem access.
pkgs/go/[email protected]/sensors/sensors_linux.go:163 
	if raw, err = os.ReadFile(filename); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/sirupsen/logrus

go dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #9e2d8f5118499d8a — Environment-variable access.
pkgs/go/[email protected]/text_formatter.go:121 
		switch force, ok := os.LookupEnv("CLICOLOR_FORCE"); {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5c5ecb39e31c78a — Environment-variable access.
pkgs/go/[email protected]/text_formatter.go:124 
		case ok && force == "0", os.Getenv("CLICOLOR") == "0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common

go dependency
expand_more 11 low-confidence finding(s)
low env_fs dependency Excluded from app score #964170318b27488d — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/env_provider.go:31 
	secretId, ok1 := os.LookupEnv(p.secretIdENV)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #741bca8585ed7541 — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/env_provider.go:32 
	secretKey, ok2 := os.LookupEnv(p.secretKeyENV)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6cf136cfe09c09c — Filesystem access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/ini.go:17 
	data, err = ioutil.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1737dd76f834584 — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/oidc_role_arn_provider.go:59 
		reg := os.Getenv("TKE_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78a9ef663c8b9abc — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/oidc_role_arn_provider.go:64 
		providerId := os.Getenv("TKE_PROVIDER_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52ed8db35651b9ba — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/oidc_role_arn_provider.go:69 
		tokenFile := os.Getenv("TKE_WEB_IDENTITY_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf557d8aa11ef555 — Filesystem access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/oidc_role_arn_provider.go:73 
		tokenBytes, err := ioutil.ReadFile(tokenFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c004c107d6d5f47 — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/oidc_role_arn_provider.go:78 
		roleArn := os.Getenv("TKE_ROLE_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bc8b01a292802e3 — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/profile_provider.go:32 
		return os.Getenv("USERPROFILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea8cb57f1a410fdf — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/profile_provider.go:35 
	return os.Getenv("HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9923bf07486cd454 — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/profile_provider.go:62 
	path, ok := os.LookupEnv(EnvCredentialFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/tikv/client-go/v2

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #eb5f73a76c0e1d4e — Filesystem access.
pkgs/go/github.com_tikv_client-go_v2@v2.0.8-0.20260610031342-e999c1f9c7c3/config/security.go:69 
		ca, err = os.ReadFile(s.ClusterSSLCA)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/twpayne/go-geom

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #757734d584d3c38f — Filesystem access.
pkgs/go/[email protected]/internal/cmd/parse-igc/main.go:14 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/zilliztech/woodpecker

go dependency
expand_more 39 low-confidence finding(s)
low env_fs dependency Excluded from app score #4aacd75b3385b63a — Filesystem access.
pkgs/go/[email protected]/cmd/external/user_config.go:81 
		data, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50ab79fa4d35c040 — Environment-variable access.
pkgs/go/[email protected]/cmd/main.go:185 
			"admin_port": os.Getenv("METRICS_PORT"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2d2e4a8fab2a968 — Filesystem access.
pkgs/go/[email protected]/cmd/wpcli/cmd/ctx.go:81 
			if err := os.WriteFile(path, data, 0o600); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cff06e0735a31ed5 — Filesystem access.
pkgs/go/[email protected]/cmd/wpcli/cmd/profile.go:57 
			f, err := os.Create(outputFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #358eecb54fb0bb97 — Environment-variable access.
pkgs/go/[email protected]/cmd/wpcli/cmd/resolver.go:39 
	ctx.Endpoint = resolveEndpoint(Globals.Endpoint, os.Getenv("WOODPECKER_ENDPOINT"), ctx.Endpoint)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8726eac033fb4f22 — Filesystem access.
pkgs/go/[email protected]/cmd/wpcli/config/cli_config.go:47 
	data, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #765000c3e6385255 — Environment-variable access.
pkgs/go/[email protected]/cmd/wpcli/config/cli_config.go:87 
	if p := os.Getenv("WOODPECKER_CLI_CONFIG"); p != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de7c57eeee8f03ca — Environment-variable access.
pkgs/go/[email protected]/cmd/wpcli/config/cli_config.go:90 
	if p := os.Getenv("XDG_CONFIG_HOME"); p != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c355ceb13f200e10 — Filesystem access.
pkgs/go/[email protected]/common/config/configuration.go:436 
		data, err := os.ReadFile(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e1400e6a04bbde5 — Filesystem access.
pkgs/go/[email protected]/common/etcd/etcd_util.go:88 
	caCert, err := os.ReadFile(caCertFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19acfaf15faca0f3 — Environment-variable access.
pkgs/go/[email protected]/common/hardware/container_linux.go:62 
	memoryStr := os.Getenv("MEM_LIMIT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d02a733f3f8f29d — Environment-variable access.
pkgs/go/[email protected]/common/http/management/env_handler.go:47 
		for _, kv := range os.Environ() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e900033bac64da4 — Environment-variable access.
pkgs/go/[email protected]/common/http/management/env_handler.go:65 
				GOGC:         os.Getenv("GOGC"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c8d19f8e1d76482 — Environment-variable access.
pkgs/go/[email protected]/common/http/server.go:100 
		pprofEnableKey := os.Getenv(PprofEnableEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c515c7cff80ac8b — Environment-variable access.
pkgs/go/[email protected]/common/http/server.go:277 
	port := os.Getenv(ListenPortEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31efe300ac5a5d43 — Environment-variable access.
pkgs/go/[email protected]/common/metrics/service_metrics.go:36 
	if v := os.Getenv("NODE_NAME"); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c6620002225f3f2 — Environment-variable access.
pkgs/go/[email protected]/common/objectstorage/azure_object_storage.go:212 
		if os.Getenv("AZURE_FEDERATED_TOKEN_FILE") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3db89c4f55a4fa56 — Environment-variable access.
pkgs/go/[email protected]/common/objectstorage/azure_object_storage.go:214 
				ClientID:      os.Getenv("AZURE_CLIENT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81ba83d43ff5a87b — Environment-variable access.
pkgs/go/[email protected]/common/objectstorage/azure_object_storage.go:215 
				TenantID:      os.Getenv("AZURE_TENANT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4dd1a7abdade304b — Environment-variable access.
pkgs/go/[email protected]/common/objectstorage/azure_object_storage.go:216 
				TokenFilePath: os.Getenv("AZURE_FEDERATED_TOKEN_FILE"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec875a619ec488ca — Environment-variable access.
pkgs/go/[email protected]/common/objectstorage/azure_object_storage.go:219 
			clientID := os.Getenv("AZURE_CLIENT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c4b0743c933396b — Environment-variable access.
pkgs/go/[email protected]/common/objectstorage/azure_object_storage.go:235 
		connectionString := os.Getenv("AZURE_STORAGE_CONNECTION_STRING")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57c4e800dc28a62c — Environment-variable access.
pkgs/go/[email protected]/common/topology/topology_utils.go:13 
	if v := os.Getenv(key); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac076dab74a16a47 — Filesystem access.
pkgs/go/[email protected]/server/delete_marker.go:71 
	f, err := os.OpenFile(tmp, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb477b5ac5e47666 — Filesystem access.
pkgs/go/[email protected]/server/delete_marker.go:92 
	dir, err := os.Open(filepath.Dir(p))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aba6dbab3ac2cf33 — Filesystem access.
pkgs/go/[email protected]/server/delete_marker.go:130 
		data, rerr := os.ReadFile(path) //nolint:gosec

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67e32d58954b5a15 — Filesystem access.
pkgs/go/[email protected]/server/lifecycle.go:181 
	data, err := os.ReadFile(m.stateFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e37b4201402098f0 — Filesystem access.
pkgs/go/[email protected]/server/lifecycle.go:221 
	if err := os.WriteFile(tmpPath, data, 0o600); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #433dc0cc34343e20 — Filesystem access.
pkgs/go/[email protected]/server/storage/disk/reader_impl.go:89 
	file, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19e8fa3f8224ca69 — Filesystem access.
pkgs/go/[email protected]/server/storage/disk/writer_impl.go:216 
		file, err = os.OpenFile(filePath, os.O_CREATE|os.O_WRONLY|os.O_APPEND, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #646174c0a34be485 — Filesystem access.
pkgs/go/[email protected]/server/storage/disk/writer_impl.go:230 
		file, err = os.OpenFile(filePath, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42d4e4be99652361 — Filesystem access.
pkgs/go/[email protected]/server/storage/disk/writer_impl.go:1074 
	fenceFile, err := os.Create(fenceFlagPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4a5328d2851a455 — Filesystem access.
pkgs/go/[email protected]/server/storage/disk/writer_impl.go:1140 
	file, err := os.Open(w.segmentFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53586c86f617d0c0 — Filesystem access.
pkgs/go/[email protected]/server/storage/disk/writer_impl.go:1461 
	if infoFile, err := os.OpenFile(s.lockFilePath, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0o644); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #780acefcc1883999 — Filesystem access.
pkgs/go/[email protected]/server/storage/stagedstorage/reader_impl.go:110 
	file, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1febf62dac17e591 — Filesystem access.
pkgs/go/[email protected]/server/storage/stagedstorage/writer_impl.go:256 
		file, err = os.OpenFile(filePath, os.O_CREATE|os.O_WRONLY|os.O_APPEND, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70904698081aae10 — Filesystem access.
pkgs/go/[email protected]/server/storage/stagedstorage/writer_impl.go:260 
		file, err = os.OpenFile(filePath, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dd8c23ca16c4501 — Filesystem access.
pkgs/go/[email protected]/server/storage/stagedstorage/writer_impl.go:1607 
	file, err := os.Open(w.segmentFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ba0ddd6fa0f11be — Filesystem access.
pkgs/go/[email protected]/server/storage/stagedstorage/writer_impl.go:1765 
	file, err := os.Open(w.segmentFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.etcd.io/etcd/client/v3

go dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #2a1a316d4ab85f5b — Environment-variable access.
pkgs/go/[email protected]/logger.go:30 
	if os.Getenv("ETCD_CLIENT_DEBUG") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc7d1c0e668a513d — Environment-variable access.
pkgs/go/[email protected]/logger.go:49 
	envLevel := os.Getenv("ETCD_CLIENT_DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #253aa75bd7a4dfce — Filesystem access.
pkgs/go/[email protected]/snapshot/v3_snapshot.go:61 
	f, err = os.OpenFile(partpath, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, fileutil.PrivateFileMode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82745bf042508640 — Filesystem access.
pkgs/go/[email protected]/yaml/config.go:45 
	b, err := ioutil.ReadFile(fpath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.etcd.io/etcd/server/v3

go dependency
expand_more 18 low-confidence finding(s)
low env_fs dependency Excluded from app score #8965c769a7d3686e — Filesystem access.
pkgs/go/[email protected]/auth/options.go:73 
		opts.PublicKey, err = ioutil.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9a1d43599fed018 — Filesystem access.
pkgs/go/[email protected]/auth/options.go:80 
		opts.PrivateKey, err = ioutil.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ce50040ad6bebd4 — Filesystem access.
pkgs/go/[email protected]/embed/config.go:545 
	b, err := ioutil.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e69e0f645bbd6865 — Environment-variable access.
pkgs/go/[email protected]/etcdmain/config.go:361 
		cfg.configFile = os.Getenv(flags.FlagToEnv("ETCD", "config-file"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36f9eaf8297127e8 — Environment-variable access.
pkgs/go/[email protected]/etcdmain/config.go:405 
	if verVal := os.Getenv(verKey); verVal != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28b885f00e16503e — Filesystem access.
pkgs/go/[email protected]/etcdmain/config.go:478 
	b, rerr := ioutil.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20d9bf637c2fa977 — Filesystem access.
pkgs/go/[email protected]/etcdmain/etcd.go:287 
	b, err := ioutil.ReadFile(clusterfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fd0a4d1729e452e — Environment-variable access.
pkgs/go/[email protected]/etcdmain/etcd.go:481 
	if env, ok := os.LookupEnv("ETCD_UNSUPPORTED_ARCH"); ok && env == runtime.GOARCH {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #319e237782707d28 — Filesystem access.
pkgs/go/[email protected]/etcdmain/grpc_proxy.go:579 
		caCert, err := ioutil.ReadFile(ca)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27961f3ab9c0a5b6 — Filesystem access.
pkgs/go/[email protected]/etcdserver/api/snap/snapshotter.go:163 
	b, err := ioutil.ReadFile(snapname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93848451eb760a54 — Filesystem access.
pkgs/go/[email protected]/etcdserver/api/snap/snapshotter.go:218 
	dir, err := os.Open(s.dir)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e17c4250c069ea9 — Filesystem access.
pkgs/go/[email protected]/etcdserver/api/snap/snapshotter.go:275 
	dir, err := os.Open(s.dir)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e741a70fa4243677 — Environment-variable access.
pkgs/go/[email protected]/mvcc/backend/verify.go:59 
	return os.Getenv(ENV_VERIFY) == ENV_VERIFY_ALL_VALUE || os.Getenv(ENV_VERIFY) == ENV_VERIFY_LOCK

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d716de5686899db6 — Environment-variable access.
pkgs/go/[email protected]/verify/verify.go:101 
	return os.Getenv(ENV_VERIFY) == ENV_VERIFY_ALL_VALUE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81a5aae1e3b57e5d — Environment-variable access.
pkgs/go/[email protected]/verify/verify.go:107 
	previousEnv := os.Getenv(ENV_VERIFY)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5926e6faea725f21 — Environment-variable access.
pkgs/go/[email protected]/verify/verify.go:117 
	previousEnv := os.Getenv(ENV_VERIFY)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e493234d64cef70 — Filesystem access.
pkgs/go/[email protected]/wal/repair.go:68 
			bf, bferr := os.Create(f.Name() + ".broken")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b32bf435a2f1c76 — Filesystem access.
pkgs/go/[email protected]/wal/wal.go:397 
			rf, err := os.OpenFile(p, os.O_RDONLY, fileutil.PrivateFileMode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/exporters/jaeger

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #3dafd177eb13504b — Environment-variable access.
pkgs/go/[email protected]/env.go:40 
	if v, ok := os.LookupEnv(key); ok && v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #b85df0495d4d972d — Environment-variable access.
pkgs/go/go.opentelemetry.io_otel_exporters_otlp_otlptrace_otlptracegrpc@v1.42.0/internal/x/x.go:46 
		vRaw := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #0f8cfdf4c7d0d464 — Environment-variable access.
pkgs/go/go.opentelemetry.io_otel_exporters_otlp_otlptrace_otlptracehttp@v1.43.0/internal/x/x.go:46 
		vRaw := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/exporters/stdout/stdouttrace

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #9abb942b978a69a0 — Environment-variable access.
pkgs/go/[email protected]/internal/x/x.go:46 
		vRaw := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/sdk

go dependency
expand_more 10 low-confidence finding(s)
low env_fs dependency Excluded from app score #f0d7ac8fdc969db7 — Environment-variable access.
pkgs/go/[email protected]/internal/x/x.go:46 
		vRaw := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3b59b8700475d4a — Filesystem access.
pkgs/go/[email protected]/resource/container.go:47 
		return os.Open(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #441346fbb26efaec — Environment-variable access.
pkgs/go/[email protected]/resource/env.go:39 
	attrs := strings.TrimSpace(os.Getenv(resourceAttrKey))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #210fdd231855d0ba — Environment-variable access.
pkgs/go/[email protected]/resource/env.go:40 
	svcName := strings.TrimSpace(os.Getenv(svcNameKey))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33e24d384a7ebdfe — Filesystem access.
pkgs/go/[email protected]/resource/host_id_readfile.go:11 
	b, err := os.ReadFile(filename) // nolint:gosec // false positive

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05ce5eb36a5b9a0a — Filesystem access.
pkgs/go/[email protected]/resource/os_unix.go:71 
		file, err := os.Open(c)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98dee6dd4a696f31 — Environment-variable access.
pkgs/go/[email protected]/trace/internal/env/env.go:64 
		value := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fce5a9cb1db12c1 — Environment-variable access.
pkgs/go/[email protected]/trace/internal/env/env.go:84 
	value := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f7e93e6d85c6f88 — Environment-variable access.
pkgs/go/[email protected]/trace/sampler_env.go:49 
	sampler, ok := os.LookupEnv(tracesSamplerKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7917482d6f0a1ea1 — Environment-variable access.
pkgs/go/[email protected]/trace/sampler_env.go:55 
	samplerArg, hasSamplerArg := os.LookupEnv(tracesSamplerArgKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/trace

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #e3f2d2a68c77c8dc — Environment-variable access.
pkgs/go/[email protected]/auto.go:649 
		strV := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.uber.org/atomic

go dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #941774de76a6cd68 — Filesystem access.
pkgs/go/[email protected]/internal/gen-atomicint/main.go:75 
		f, err := os.Create(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70c2fd37460caae9 — Filesystem access.
pkgs/go/[email protected]/internal/gen-atomicwrapper/main.go:157 
		f, err := os.Create(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.uber.org/automaxprocs

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #13aa96b54fbb528d — Filesystem access.
pkgs/go/[email protected]/internal/cgroups/cgroup.go:56 
	paramFile, err := os.Open(cg.ParamPath(param))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a71694fd3a42ae1 — Filesystem access.
pkgs/go/[email protected]/internal/cgroups/cgroups2.go:129 
	cpuMaxParams, err := os.Open(path.Join(cg.mountPoint, cg.groupPath, cg.cpuMaxFile))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec04859b3475da11 — Filesystem access.
pkgs/go/[email protected]/internal/cgroups/mountpoint.go:152 
	mountInfoFile, err := os.Open(procPathMountInfo)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74fbd65b55eee71f — Filesystem access.
pkgs/go/[email protected]/internal/cgroups/subsys.go:79 
	cgroupFile, err := os.Open(procPathCGroup)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc7c55c65e8d1aed — Environment-variable access.
pkgs/go/[email protected]/maxprocs/maxprocs.go:100 
	if max, exists := os.LookupEnv(_maxProcsKey); exists {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.uber.org/zap

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #5d4b7028597bdd36 — Environment-variable access.
pkgs/go/[email protected]/internal/ztest/timeout.go:55 
	if v := os.Getenv("TEST_TIMEOUT_SCALE"); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/crypto

go dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #041e349bd90770d2 — Filesystem access.
pkgs/go/[email protected]/acme/autocert/cache.go:50 
		data, err = os.ReadFile(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78b3c5e9b3674b70 — Environment-variable access.
pkgs/go/[email protected]/internal/testenv/exec.go:41 
			if s := os.Getenv("GO_TEST_TIMEOUT_SCALE"); s != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3290a16ebab3ee0d — Filesystem access.
pkgs/go/[email protected]/ssh/knownhosts/knownhosts.go:411 
		f, err := os.Open(fn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3ba37cf24bba759 — Filesystem access.
pkgs/go/[email protected]/x509roots/gen_fallback_bundle.go:48 
		f, err := os.Open(*certDataPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00a2db22d31c6d73 — Filesystem access.
pkgs/go/[email protected]/x509roots/gen_fallback_bundle.go:136 
	if err := os.WriteFile(*output, formatted, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #372a95e1a8d31122 — Filesystem access.
pkgs/go/[email protected]/x509roots/gen_fallback_bundle.go:140 
	if err := os.WriteFile(*derOutput, rawCertsData.Bytes(), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/exp

go dependency
expand_more 24 low-confidence finding(s)
low env_fs dependency Excluded from app score #084bfeaed10b2be2 — Filesystem access.
pkgs/go/[email protected]/cmd/apidiff/main.go:194 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94f8f8294993304f — Filesystem access.
pkgs/go/[email protected]/cmd/apidiff/main.go:215 
	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99e9808aa89ba113 — Filesystem access.
pkgs/go/[email protected]/cmd/apidiff/main.go:228 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1607ba1420eb02f7 — Filesystem access.
pkgs/go/[email protected]/cmd/apidiff/main.go:244 
	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7d28c9a193f8992 — Environment-variable access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:145 
	ctx := context.WithValue(context.Background(), "env", append(os.Environ(), "GO111MODULE=on"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a647f10707eccf5 — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:311 
	m.goModData, err = os.ReadFile(m.goModPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ca46ab4841d010a — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:373 
				if data, err := os.ReadFile(altGoModPath); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7146b6a4e7f068f — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:513 
	if m.goModData, err = os.ReadFile(m.goModPath); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95dce77477a48044 — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:1099 
	if err := os.WriteFile(filepath.Join(dir, "go.mod"), goModData, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb4e5c6c5a291109 — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:1103 
	goSumData, err = os.ReadFile(filepath.Join(modRoot, "go.sum"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cbe1c2bea9610611 — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:1107 
	if err := os.WriteFile(filepath.Join(dir, "go.sum"), goSumData, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bde89618b7251c67 — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:1122 
	if err := os.WriteFile(filepath.Join(dir, "tmp.go"), []byte(fakeImports.String()), 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02c3ca867fb6dfe5 — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:1151 
	newGoModData, err := os.ReadFile(goModPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d9e0d0c8104b645 — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:1190 
		newGoSumData, err := os.ReadFile(goSumPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbc0b8cb6f04cf81 — Filesystem access.
pkgs/go/[email protected]/cmd/txtar/txtar.go:129 
		if err := os.WriteFile(fileName, f.Data, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6784e40c6e6731a — Filesystem access.
pkgs/go/[email protected]/cmd/txtar/txtar.go:171 
			data, err := os.ReadFile(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9c43a7e48ebc35f — Environment-variable access.
pkgs/go/[email protected]/cmd/txtar/txtar.go:215 
		v, ok := os.LookupEnv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba837dee04ca801c — Filesystem access.
pkgs/go/[email protected]/ebnflint/ebnflint.go:99 
		f, err := os.Open(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71e13ac9f6fd2c59 — Filesystem access.
pkgs/go/[email protected]/io/i2c/devfs.go:33 
	f, err := os.OpenFile(d.Dev, os.O_RDWR, os.ModeDevice)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0812728966643754 — Filesystem access.
pkgs/go/[email protected]/io/spi/devfs.go:71 
	f, err := os.OpenFile(d.Dev, os.O_RDWR, os.ModeDevice)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1df7c5fd7cb833f5 — Filesystem access.
pkgs/go/[email protected]/mmap/mmap_other.go:51 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95f673cbe2ef7a92 — Filesystem access.
pkgs/go/[email protected]/mmap/mmap_unix.go:84 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d69515009491ae1 — Filesystem access.
pkgs/go/[email protected]/mmap/mmap_windows.go:83 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf7a55c04b8c0556 — Filesystem access.
pkgs/go/[email protected]/trace/internal/testgen/go122/trace.go:29 
	out, err := os.Create(os.Args[1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/net

go dependency
expand_more 28 low-confidence finding(s)
low env_fs dependency Excluded from app score #b5a86284d69d8b7d — Filesystem access.
pkgs/go/[email protected]/html/atom/gen.go:50 
	if err := os.WriteFile(name, b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #306bcb807642dac0 — Environment-variable access.
pkgs/go/[email protected]/http/httpproxy/proxy.go:95 
		CGI:        os.Getenv("REQUEST_METHOD") != "",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #189e4bc059306a39 — Environment-variable access.
pkgs/go/[email protected]/http/httpproxy/proxy.go:101 
		if val := os.Getenv(n); val != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e199fe78c59b1d9 — Environment-variable access.
pkgs/go/[email protected]/http2/gotrack.go:21 
var DebugGoroutines = os.Getenv("DEBUG_HTTP2_GOROUTINES") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc2dff79e071853a — Environment-variable access.
pkgs/go/[email protected]/http2/h2c/h2c.go:52 
	e := os.Getenv("GODEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #265dd2b74cb5e141 — Filesystem access.
pkgs/go/[email protected]/http2/hpack/gen.go:178 
	if err := os.WriteFile(name, b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c124600f125ccc5 — Environment-variable access.
pkgs/go/[email protected]/http2/http2.go:53 
	e := os.Getenv("GODEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62846f67463efa27 — Filesystem access.
pkgs/go/[email protected]/internal/iana/gen.go:71 
	if err := os.WriteFile("const.go", b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4a3b935188279e8 — Environment-variable access.
pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:67 
	if keylog := os.Getenv("SSLKEYLOGFILE"); keylog != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1360f1d76ce0cc4c — Filesystem access.
pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:68 
		f, err := os.Create(keylog)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b245a1c7d66a7b71 — Environment-variable access.
pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:76 
	testcase := os.Getenv("TESTCASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc589064608c4097 — Filesystem access.
pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:216 
	f, err := os.Open(filepath.Join(*root, string(req)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7f17e258ba491d6 — Filesystem access.
pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:267 
	file, err := os.Create(filepath.Join(*output, u.Path[1:]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e328554a5d9e3a6 — Filesystem access.
pkgs/go/[email protected]/ipv4/gen.go:41 
	f, err := os.Open(defs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a645c325ffc2fcd — Filesystem access.
pkgs/go/[email protected]/ipv4/gen.go:63 
	if err := os.WriteFile(zsys, b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e52beaccf929ed91 — Filesystem access.
pkgs/go/[email protected]/ipv4/gen.go:102 
	if err := os.WriteFile("iana.go", b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c225a0e02859ddf — Filesystem access.
pkgs/go/[email protected]/ipv6/gen.go:41 
	f, err := os.Open(defs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f08c4a600c4c27f5 — Filesystem access.
pkgs/go/[email protected]/ipv6/gen.go:63 
	if err := os.WriteFile(zsys, b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13f10abab22020d8 — Filesystem access.
pkgs/go/[email protected]/ipv6/gen.go:102 
	if err := os.WriteFile("iana.go", b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #827373669cda0991 — Environment-variable access.
pkgs/go/[email protected]/proxy/proxy.go:138 
		e.val = os.Getenv(n)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #587a6ee5b74a9476 — Filesystem access.
pkgs/go/[email protected]/publicsuffix/gen.go:275 
	return os.WriteFile(filename, b, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #5167afbe1fa81689 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/go/[email protected]/publicsuffix/gen.go:279 
	res, err := http.Get(gitCommitURL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #cc93ead8ded70b1d — Filesystem access.
pkgs/go/[email protected]/publicsuffix/gen.go:320 
	if err := os.WriteFile("data/text", []byte(combinedText), 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0cc0d4fdd28eb18f — Filesystem access.
pkgs/go/[email protected]/publicsuffix/gen.go:333 
	if err := os.WriteFile("data/nodes", nodes, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69222630b8a03036 — Filesystem access.
pkgs/go/[email protected]/publicsuffix/gen.go:341 
	if err := os.WriteFile("data/children", children, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b15f92ee74791e8 — Environment-variable access.
pkgs/go/[email protected]/quic/log.go:19 
	s := os.Getenv("GODEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08ef8edb66d8eb90 — Filesystem access.
pkgs/go/[email protected]/quic/qlog/qlog.go:181 
		w, err = os.OpenFile(filepath.Join(opts.Dir, filename), os.O_CREATE|os.O_EXCL|os.O_WRONLY, 0666)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d50b9f4bcb50cdc8 — Filesystem access.
pkgs/go/[email protected]/webdav/file.go:95 
	f, err := os.OpenFile(name, flag, perm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/oauth2

go dependency
expand_more 12 low-confidence finding(s)
low env_fs dependency Excluded from app score #77c28a22c901f51b — Environment-variable access.
pkgs/go/[email protected]/google/default.go:237 
	if filename := os.Getenv(envVar); filename != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c9f3c3329330c22 — Filesystem access.
pkgs/go/[email protected]/google/default.go:247 
	if b, err := os.ReadFile(filename); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #400e702c2dee7a51 — Environment-variable access.
pkgs/go/[email protected]/google/default.go:429 
		return filepath.Join(os.Getenv("APPDATA"), "gcloud", f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a9787c33365dde8 — Filesystem access.
pkgs/go/[email protected]/google/default.go:435 
	b, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa312faa482e6ae1 — Environment-variable access.
pkgs/go/[email protected]/google/externalaccount/executablecredsource.go:98 
	return os.Environ()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #deb48e62582fe2d4 — Environment-variable access.
pkgs/go/[email protected]/google/externalaccount/executablecredsource.go:102 
	return os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #febb247acf9dbd5c — Filesystem access.
pkgs/go/[email protected]/google/externalaccount/executablecredsource.go:253 
	file, err := os.Open(cs.OutputFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ef7622f1fe19811 — Filesystem access.
pkgs/go/[email protected]/google/externalaccount/filecredsource.go:26 
	tokenFile, err := os.Open(cs.File)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #374cd126bc687aef — Filesystem access.
pkgs/go/[email protected]/google/sdk.go:60 
	f, err := os.Open(credentialsPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98ee5f282a5c26ee — Filesystem access.
pkgs/go/[email protected]/google/sdk.go:75 
		f, err := os.Open(propertiesPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a93bbd894d412a42 — Environment-variable access.
pkgs/go/[email protected]/google/sdk.go:182 
		return filepath.Join(os.Getenv("APPDATA"), "gcloud"), nil

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4d0213053a86b8c — Environment-variable access.
pkgs/go/[email protected]/google/sdk.go:193 
	if v := os.Getenv("HOME"); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/sys

go dependency
expand_more 59 low-confidence finding(s)
low env_fs dependency Excluded from app score #6fb0b7c06c8dc981 — Environment-variable access.
pkgs/go/[email protected]/cpu/cpu.go:276 
	env := os.Getenv("GODEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a54875ba7e98141f — Filesystem access.
pkgs/go/[email protected]/cpu/hwcap_linux.go:42 
	buf, err := os.ReadFile(procAuxv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6a235f40620ecf1 — Filesystem access.
pkgs/go/[email protected]/cpu/proc_cpuinfo_linux.go:17 
	f, err := os.Open("/proc/cpuinfo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #def0407ac8517d03 — Environment-variable access.
pkgs/go/[email protected]/plan9/mksyscall.go:90 
	goos := os.Getenv("GOOS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7b74071ed6af696 — Environment-variable access.
pkgs/go/[email protected]/plan9/mksyscall.go:91 
	goarch := os.Getenv("GOARCH_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e2cfa13743ccfe9 — Environment-variable access.
pkgs/go/[email protected]/plan9/mksyscall.go:93 
		goarch = os.Getenv("GOARCH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4faa61479b9c0cdc — Environment-variable access.
pkgs/go/[email protected]/plan9/mksyscall.go:98 
		if os.Getenv("GOLANG_SYS_BUILD") != "docker" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bdd286b08b69b60 — Filesystem access.
pkgs/go/[email protected]/plan9/mksyscall.go:127 
		file, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b402c7ad936696b4 — Filesystem access.
pkgs/go/[email protected]/unix/internal/mkmerge/mkmerge.go:443 
		src, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12d698e47f266aa6 — Filesystem access.
pkgs/go/[email protected]/unix/internal/mkmerge/mkmerge.go:467 
	f, err := os.Create(mergedFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23cd0bd159dce543 — Filesystem access.
pkgs/go/[email protected]/unix/internal/mkmerge/mkmerge.go:494 
		err = os.WriteFile(inFile.name, src, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3414cd88d0e3116c — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mkall.go:182 
	if os.Getenv("GOLANG_SYS_BUILD") != "docker" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9cdfe6dd21925f9 — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:317 
	if fmtCmd.Stdout, err = os.Create(outputFile); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02ba577861207fc9 — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mkall.go:337 
	t.env = append(os.Environ(), fmt.Sprintf("%s=%s", "GOOS", GOOS))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db1ac21cb60153d6 — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:447 
	if file, err := os.Create(stubsFile); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47e44d3393cfc4b7 — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:482 
	abiFile, err := os.Create(filepath.Join(abiDir, "abi.h"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #815cc75f019d5452 — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:631 
	f, err := os.Open(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73396d95da762ab8 — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:756 
	f, err := os.Create(fmt.Sprintf("zptrace_%s_linux.go", archName))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc04f34b74372ac9 — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:784 
	f, err := os.Create(fmt.Sprintf("zptrace_linux_%s.go", arch))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7164078028e16bbc — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:819 
	data, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5bbfa3e8321b5f1 — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mksysnum.go:100 
	goos = os.Getenv("GOOS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #394563379797c4d8 — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mksysnum.go:101 
	goarch = os.Getenv("GOARCH_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e278d0f28739412 — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mksysnum.go:103 
		goarch = os.Getenv("GOARCH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ee489cc67bfe11d — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mksysnum.go:111 
	if os.Getenv("GOLANG_SYS_BUILD") != "docker" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c81a14ec4538e91 — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mksysnum.go:117 
	cc := os.Getenv("CC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5e47f0b1c0b083b — Filesystem access.
pkgs/go/[email protected]/unix/mkasm.go:36 
		in, err := os.ReadFile(inFileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36530fbf5dc7f7cd — Filesystem access.
pkgs/go/[email protected]/unix/mkasm.go:73 
	if err := os.WriteFile(outFileName, out.Bytes(), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #138f6d04c6e44175 — Filesystem access.
pkgs/go/[email protected]/unix/mkasm.go:110 
	if err := os.WriteFile(fileName, out.Bytes(), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df5097860cbc24ed — Environment-variable access.
pkgs/go/[email protected]/unix/mkpost.go:26 
	goos := os.Getenv("GOOS_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #733e35f2e2af40f8 — Environment-variable access.
pkgs/go/[email protected]/unix/mkpost.go:28 
		goos = os.Getenv("GOOS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3a60ad4cf9bc2ec — Environment-variable access.
pkgs/go/[email protected]/unix/mkpost.go:30 
	goarch := os.Getenv("GOARCH_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c97d991ec2022d2 — Environment-variable access.
pkgs/go/[email protected]/unix/mkpost.go:32 
		goarch = os.Getenv("GOARCH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f12e7b0397c8c6e — Environment-variable access.
pkgs/go/[email protected]/unix/mkpost.go:36 
		if os.Getenv("GOLANG_SYS_BUILD") != "docker" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #561f4cb43d9b2c69 — Environment-variable access.
pkgs/go/[email protected]/unix/mksyscall.go:104 
	goos := os.Getenv("GOOS_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9a33d915e774506 — Environment-variable access.
pkgs/go/[email protected]/unix/mksyscall.go:106 
		goos = os.Getenv("GOOS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0b58b44f89bc143 — Environment-variable access.
pkgs/go/[email protected]/unix/mksyscall.go:115 
		if os.Getenv("GOLANG_SYS_BUILD") != "docker" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #143e7934c83b6197 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall.go:145 
		file, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fade00fa420dba13 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_aix_ppc.go:100 
		file, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43f8b8776d60dd7d — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_aix_ppc64.go:148 
		file, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf8b23c1773344b0 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_aix_ppc64.go:521 
	err := os.WriteFile("zsyscall_aix_ppc64.go",
		[]byte(fmt.Sprintf(srcTemplate1, cmdLine(), goBuildTags(), pack, imp, textcommon)),
		0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5132f9f5e46f313a — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_aix_ppc64.go:532 
	err = os.WriteFile("zsyscall_aix_ppc64_gc.go",
		[]byte(fmt.Sprintf(srcTemplate2, cmdLine(), goBuildTags(), pack, imp, dynimports, linknames, vardecls, textgc)),
		0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9bf54952974a194 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_aix_ppc64.go:541 
	err = os.WriteFile("zsyscall_aix_ppc64_gccgo.go",
		[]byte(fmt.Sprintf(srcTemplate3, cmdLine(), goBuildTags(), pack, cExtern, imp, textgccgo)),
		0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8039383482a877a — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_solaris.go:103 
		file, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0364d26b61024d62 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_zos_s390x.go:208 
	f, err := os.Open(*inputgo)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b4dfa046647a413 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_zos_s390x.go:216 
	fasm, asmerr := os.Create(*outasm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1605f50fe88955a8 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_zos_s390x.go:230 
	fgo, goerr := os.Create(*outputgo)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e10c6da5d5744e41 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_zos_s390x.go:272 
	f, err := os.Create(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f37fb2b11f569101 — Environment-variable access.
pkgs/go/[email protected]/unix/mksysctl_openbsd.go:122 
	goos = os.Getenv("GOOS_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35958bb00e389c5a — Environment-variable access.
pkgs/go/[email protected]/unix/mksysctl_openbsd.go:124 
		goos = os.Getenv("GOOS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #761dda2833e9918e — Environment-variable access.
pkgs/go/[email protected]/unix/mksysctl_openbsd.go:127 
	goarch = os.Getenv("GOARCH_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #beaa5226343a283a — Environment-variable access.
pkgs/go/[email protected]/unix/mksysctl_openbsd.go:129 
		goarch = os.Getenv("GOARCH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #079a324d87d1a067 — Filesystem access.
pkgs/go/[email protected]/unix/mksysctl_openbsd.go:259 
		file, err := os.Open(filepath.Join("/usr/include", header))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b754cb14b9f11e17 — Filesystem access.
pkgs/go/[email protected]/unix/mksysnum.go:70 
	file, err := os.Open(os.Args[1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0838891f426c188c — Environment-variable access.
pkgs/go/[email protected]/unix/mksysnum.go:90 
	goos = os.Getenv("GOOS_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b30fe18ccf3f9fe — Environment-variable access.
pkgs/go/[email protected]/unix/mksysnum.go:92 
		goos = os.Getenv("GOOS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1d8aae0784b2733 — Environment-variable access.
pkgs/go/[email protected]/unix/mksysnum.go:95 
	goarch = os.Getenv("GOARCH_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18a1cc0a27912a4a — Environment-variable access.
pkgs/go/[email protected]/unix/mksysnum.go:97 
		goarch = os.Getenv("GOARCH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb01037848583952 — Filesystem access.
pkgs/go/[email protected]/windows/mkwinsyscall/mkwinsyscall.go:710 
	file, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c5909a43a7ebf0b — Filesystem access.
pkgs/go/[email protected]/windows/mkwinsyscall/mkwinsyscall.go:894 
		err = os.WriteFile(*filename, data, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/text

go dependency
expand_more 31 low-confidence finding(s)
low env_fs dependency Excluded from app score #dba2ccfa4664fe95 — Filesystem access.
pkgs/go/[email protected]/cmd/gotext/main.go:328 
			if err := os.WriteFile("doc.go", b, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e6706985c7b6142d — Filesystem access.
pkgs/go/[email protected]/collate/tools/colcmp/colcmp.go:122 
		f, err := os.Create(*cpuprofile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f27214ce5c4c1ebc — Filesystem access.
pkgs/go/[email protected]/encoding/internal/enctest/enctest.go:160 
	dst, err := os.ReadFile(dstFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef4414365172611a — Filesystem access.
pkgs/go/[email protected]/encoding/internal/enctest/enctest.go:162 
		if dst, err = os.ReadFile("../" + dstFile); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #164c743281eb3215 — Filesystem access.
pkgs/go/[email protected]/encoding/internal/enctest/enctest.go:166 
	src, err := os.ReadFile(srcFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47276239456ea76b — Filesystem access.
pkgs/go/[email protected]/encoding/internal/enctest/enctest.go:168 
		if src, err = os.ReadFile("../" + srcFile); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #f652fcbabc723cc8 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/go/[email protected]/encoding/korean/maketables.go:26 
	res, err := http.Get("http://encoding.spec.whatwg.org/index-euc-kr.txt")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8102e39db67ed42c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/go/[email protected]/encoding/simplifiedchinese/maketables.go:31 
	res, err := http.Get("http://encoding.spec.whatwg.org/index-gb18030.txt")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e93afffc4a11c869 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/go/[email protected]/encoding/simplifiedchinese/maketables.go:57 
	res, err := http.Get("http://encoding.spec.whatwg.org/index-gbk.txt")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c0743951a349219b — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/go/[email protected]/encoding/traditionalchinese/maketables.go:26 
	res, err := http.Get("http://encoding.spec.whatwg.org/index-big5.txt")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #50fd11e0a8e92f85 — Environment-variable access.
pkgs/go/[email protected]/gen.go:81 
		goroot := os.Getenv("GOROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92825817633b3ca8 — Filesystem access.
pkgs/go/[email protected]/gen.go:150 
	w, err := os.OpenFile(file, os.O_APPEND|os.O_WRONLY, 0600)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e34f187f5a31b2c0 — Filesystem access.
pkgs/go/[email protected]/gen.go:257 
		b, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d9ccac65f2a2448 — Filesystem access.
pkgs/go/[email protected]/gen.go:276 
		return os.WriteFile(file, b, 0666)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2463bfe6f729b23 — Environment-variable access.
pkgs/go/[email protected]/internal/export/unicode/gen.go:45 
	if v := os.Getenv("UNICODE_VERSION"); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d4d64ff7e75452c — Filesystem access.
pkgs/go/[email protected]/internal/gen/code.go:53 
	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c026e82e21fd356 — Filesystem access.
pkgs/go/[email protected]/internal/gen/code.go:73 
	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #345c39b2945e72e6 — Environment-variable access.
pkgs/go/[email protected]/internal/gen/gen.go:57 
	if v := os.Getenv(name); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #992ae0af1d969c86 — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:174 
		os.WriteFile(readme, []byte(readmeTxt), permissions)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20e5c88515471c0f — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:207 
	if f, err := os.Open(file); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af4568dfbe059731 — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:217 
	if err := os.WriteFile(file, b, permissions); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60b8a0adbf755c6a — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:257 
	w, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3febdcde831d130 — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:284 
		b, err := os.ReadFile(oldFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a9045982c07f6e9 — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:289 
		err = os.WriteFile(oldFile, b, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b79440ff12d92eb3 — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:305 
	w, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e765a5ae4fa828c — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:338 
	src, err := os.ReadFile(inFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68fb3c9a4d64ee8a — Filesystem access.
pkgs/go/[email protected]/internal/testtext/codesize.go:34 
	if err := os.WriteFile(filename, []byte(s), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5aa78ba5421af54 — Filesystem access.
pkgs/go/[email protected]/message/pipeline/pipeline.go:231 
		b, err := ioutil.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e5bb558febb6b1b — Filesystem access.
pkgs/go/[email protected]/message/pipeline/pipeline.go:362 
		if err := ioutil.WriteFile(file, data, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d815777f42e89864 — Filesystem access.
pkgs/go/[email protected]/message/pipeline/rewrite.go:53 
				if w, err = os.Create(conf.Fset.File(f.Pos()).Name()); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11f094d9fcfd9ffc — Filesystem access.
pkgs/go/[email protected]/unicode/cldr/decode.go:132 
	return os.Open(pl[i])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

google.golang.org/grpc

go dependency
expand_more 49 low-confidence finding(s)
low env_fs dependency Excluded from app score #f82676c7f14abdd4 — Filesystem access.
pkgs/go/[email protected]/authz/grpc_authz_server_interceptors.go:143 
	policyContents, err := os.ReadFile(i.policyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #41eafdf3b200c846 — Filesystem access.
pkgs/go/[email protected]/benchmark/benchmain/main.go:961 
		f, err := os.Create(opts.cpuProfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ed00755f299e53a1 — Filesystem access.
pkgs/go/[email protected]/benchmark/benchmain/main.go:979 
		f, err := os.Create(opts.memProfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #8e106bc8da79c7f5 — Filesystem access.
pkgs/go/[email protected]/benchmark/benchmain/main.go:992 
		f, err := os.Create(opts.benchmarkResultFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ca8fa5e4d032d730 — Filesystem access.
pkgs/go/[email protected]/benchmark/benchresult/main.go:44 
	f, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #a730d15077032d38 — Filesystem access.
pkgs/go/[email protected]/benchmark/benchresult/main.go:117 
	f, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5875014ded4d103b — Filesystem access.
pkgs/go/[email protected]/benchmark/client/main.go:104 
	cf, err := os.Create("/tmp/" + *testName + ".cpu")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #14286841b215a506 — Filesystem access.
pkgs/go/[email protected]/benchmark/client/main.go:117 
	mf, err := os.Create("/tmp/" + *testName + ".mem")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #1bb8e1b9322d7eac — Filesystem access.
pkgs/go/[email protected]/benchmark/server/main.go:66 
	cf, err := os.Create("/tmp/" + *testName + ".cpu")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #603c8084057b74a8 — Filesystem access.
pkgs/go/[email protected]/benchmark/server/main.go:85 
	mf, err := os.Create("/tmp/" + *testName + ".mem")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b0a1d8d2a6ba1efa — Filesystem access.
pkgs/go/[email protected]/benchmark/stats/curve.go:83 
	data, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #d9f271a71f25a1af — Filesystem access.
pkgs/go/[email protected]/benchmark/stats/curve.go:104 
	f, err := os.Open(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cca76e4614652f2b — Filesystem access.
pkgs/go/[email protected]/credentials/jwt/file_reader.go:50 
	tokenBytes, err := os.ReadFile(r.tokenFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #724c7bdaaf9852f3 — Filesystem access.
pkgs/go/[email protected]/credentials/oauth/oauth.go:76 
	jsonKey, err := os.ReadFile(keyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d226693f7a1ac664 — Filesystem access.
pkgs/go/[email protected]/credentials/oauth/oauth.go:195 
	jsonKey, err := os.ReadFile(keyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb17d4eab1563aac — Filesystem access.
pkgs/go/[email protected]/credentials/tls.go:284 
	b, err := os.ReadFile(certFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72b4e858bdb666bf — Filesystem access.
pkgs/go/[email protected]/credentials/tls/certprovider/pemfile/watcher.go:164 
	certFileContents, err := os.ReadFile(w.opts.CertFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a58e72866b06fa85 — Filesystem access.
pkgs/go/[email protected]/credentials/tls/certprovider/pemfile/watcher.go:169 
	keyFileContents, err := os.ReadFile(w.opts.KeyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae70223ce72834fa — Filesystem access.
pkgs/go/[email protected]/credentials/tls/certprovider/pemfile/watcher.go:211 
	spiffeBundleMapContents, err := os.ReadFile(w.opts.SPIFFEBundleMapFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73aa9225f1ad9e04 — Filesystem access.
pkgs/go/[email protected]/credentials/tls/certprovider/pemfile/watcher.go:230 
	rootFileContents, err := os.ReadFile(w.opts.RootFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5b320265a07dc86 — Filesystem access.
pkgs/go/[email protected]/experimental/credentials/tls.go:199 
	b, err := os.ReadFile(certFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd6ea8f5e8b04ad7 — Environment-variable access.
pkgs/go/[email protected]/grpclog/loggerv2.go:65 
	logLevel := os.Getenv("GRPC_GO_LOG_SEVERITY_LEVEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62276a25635f344b — Environment-variable access.
pkgs/go/[email protected]/grpclog/loggerv2.go:76 
	vLevel := os.Getenv("GRPC_GO_LOG_VERBOSITY_LEVEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4ee5c7bd1b75047 — Environment-variable access.
pkgs/go/[email protected]/grpclog/loggerv2.go:81 
	jsonFormat := strings.EqualFold(os.Getenv("GRPC_GO_LOG_FORMATTER"), "json")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2eb3e149a16c383c — Environment-variable access.
pkgs/go/[email protected]/internal/binarylog/binarylog.go:77 
	configStr := os.Getenv(envStr)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d987cd1d4e4ff21 — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/envconfig.go:134 
		return !strings.EqualFold(os.Getenv(envVar), "false")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5b80a33fc038b11 — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/envconfig.go:137 
	return strings.EqualFold(os.Getenv(envVar), "true")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63a977fd203fea8c — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/envconfig.go:141 
	v, err := strconv.ParseUint(os.Getenv(envVar), 10, 64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69e68ed5face4e98 — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/observability.go:34 
	ObservabilityConfig = os.Getenv(envObservabilityConfig)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66a890a76f81e6d6 — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/observability.go:41 
	ObservabilityConfigFile = os.Getenv(envObservabilityConfigFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d073aa5962f82065 — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/xds.go:46 
	XDSBootstrapFileName = os.Getenv(XDSBootstrapFileNameEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5aaaf54bdde7b17b — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/xds.go:52 
	XDSBootstrapFileContent = os.Getenv(XDSBootstrapFileContentEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18837517998d9866 — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/xds.go:55 
	C2PResolverTestOnlyTrafficDirectorURI = os.Getenv("GRPC_TEST_ONLY_GOOGLE_C2P_RESOLVER_TRAFFIC_DIRECTOR_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #361f2bb1888ca339 — Filesystem access.
pkgs/go/[email protected]/internal/googlecloud/manufacturer_linux.go:26 
	return os.ReadFile(linuxProductNameFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34ad7e63fb053764 — Environment-variable access.
pkgs/go/[email protected]/internal/grpctest/tlogger.go:78 
	if vLevelEnv, found := os.LookupEnv("GRPC_GO_LOG_VERBOSITY_LEVEL"); found {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9320b1aef569b3c — Filesystem access.
pkgs/go/[email protected]/internal/testutils/tls_creds.go:39 
	b, err := os.ReadFile(testdata.Path("x509/server_ca_cert.pem"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95766515517ade44 — Filesystem access.
pkgs/go/[email protected]/internal/testutils/tls_creds.go:63 
	b, err := os.ReadFile(testdata.Path("x509/client_ca_cert.pem"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f64a1a9fa4a59da — Filesystem access.
pkgs/go/[email protected]/internal/testutils/tls_creds.go:89 
	b, err := os.ReadFile(testdata.Path("spiffe_end2end/ca.pem"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9adeb3ed247f5629 — Filesystem access.
pkgs/go/[email protected]/internal/testutils/tls_creds.go:115 
	b, err := os.ReadFile(testdata.Path("spiffe_end2end/ca.pem"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5630da173241d43 — Filesystem access.
pkgs/go/[email protected]/internal/testutils/tls_creds.go:143 
	b, err := os.ReadFile(testdata.Path("spiffe_end2end/ca.pem"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2fee27e5f7d5fd52 — Filesystem access.
pkgs/go/[email protected]/internal/testutils/xds/e2e/bootstrap.go:158 
	data, err := os.ReadFile(src)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2fc04e085d47ed2 — Filesystem access.
pkgs/go/[email protected]/internal/testutils/xds/e2e/bootstrap.go:162 
	if err := os.WriteFile(dst, data, os.ModePerm); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea510e9df9738e87 — Filesystem access.
pkgs/go/[email protected]/internal/testutils/xds_bootstrap.go:42 
	if err := os.WriteFile(f.Name(), bootstrapContents, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70a0d917cf927a62 — Filesystem access.
pkgs/go/[email protected]/interop/client/client.go:222 
			b, err := os.ReadFile(*caFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a68573c37aa4c1b1 — Filesystem access.
pkgs/go/[email protected]/interop/test_utils.go:285 
	jsonKey, err := os.ReadFile(keyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #360fe90927f926a1 — Filesystem access.
pkgs/go/[email protected]/profiling/cmd/catapult.go:378 
	streamStatsCatapultJSONFile, err := os.Create(streamStatsCatapultJSONFileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75bba24ad0ced0c4 — Filesystem access.
pkgs/go/[email protected]/profiling/cmd/local.go:29 
	snapshotFile, err := os.Open(snapshotFileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e5b36e89ee6881f — Filesystem access.
pkgs/go/[email protected]/profiling/cmd/remote.go:54 
	file, err := os.Create(f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8df3606445089e4 — Environment-variable access.
pkgs/go/[email protected]/stats/opentelemetry/csm/pluginoption.go:168 
	if val, ok := os.LookupEnv(name); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

gopkg.in/natefinch/lumberjack.v2

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #d7fc22afad57888f — Filesystem access.
pkgs/go/[email protected]/chown_linux.go:12 
	f, err := os.OpenFile(name, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, info.Mode())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d16187c1701adb2 — Filesystem access.
pkgs/go/[email protected]/lumberjack.go:235 
	f, err := os.OpenFile(name, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09218ecc526dbc37 — Filesystem access.
pkgs/go/[email protected]/lumberjack.go:280 
	file, err := os.OpenFile(filename, os.O_APPEND|os.O_WRONLY, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1e5e72a7ec364ec — Filesystem access.
pkgs/go/[email protected]/lumberjack.go:469 
	f, err := os.Open(src)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cbde34b897ac88f — Filesystem access.
pkgs/go/[email protected]/lumberjack.go:486 
	gzf, err := os.OpenFile(dst, os.O_CREATE|os.O_TRUNC|os.O_WRONLY, fi.Mode())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

k8s.io/apimachinery

go dependency
expand_more 19 low-confidence finding(s)
low env_fs dependency Excluded from app score #84a2705cf30a563a — Environment-variable access.
pkgs/go/[email protected]/pkg/api/apitesting/codec.go:73 
	if apiMediaType := os.Getenv("KUBE_TEST_API_TYPE"); len(apiMediaType) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #834001c891685dda — Environment-variable access.
pkgs/go/[email protected]/pkg/api/apitesting/codec.go:80 
	if storageMediaType := os.Getenv("KUBE_TEST_API_STORAGE_TYPE"); len(storageMediaType) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a31c11c04d1f297a — Environment-variable access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/compatibility.go:268 
		if os.Getenv(updateEnvVar) == "true" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da1a63c246711d1e — Filesystem access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/compatibility.go:336 
	actualJSON, jsonErr := ioutil.ReadFile(filepath.Join(dir, jsonFilename))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f100aaf3dad7bc41 — Filesystem access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/compatibility.go:338 
	actualYAML, yamlErr := ioutil.ReadFile(filepath.Join(dir, yamlFilename))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef6c2c74beaf71fd — Filesystem access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/compatibility.go:340 
	actualProto, protoErr := ioutil.ReadFile(filepath.Join(dir, protoFilename))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #646df061af5257e3 — Filesystem access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/compatibility.go:362 
	if err := ioutil.WriteFile(filepath.Join(dir, makeName(gvk)+suffix+"."+extension), data, os.FileMode(0644)); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8313b1c8ee023482 — Environment-variable access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/compatibility.go:480 
		if os.Getenv(updateEnvVar) == "true" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5c9792dc0b77c7c — Environment-variable access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/unstructured.go:55 
	if override := os.Getenv("TEST_RAND_SEED"); len(override) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8985682198fc14f4 — Environment-variable access.
pkgs/go/[email protected]/pkg/runtime/converter.go:78 
		mismatchDetection: parseBool(os.Getenv("KUBE_PATCH_CONVERSION_DETECTOR")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29130c4bab52f763 — Environment-variable access.
pkgs/go/[email protected]/pkg/util/net/http.go:134 
	if s := os.Getenv("DISABLE_HTTP2"); len(s) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66c62015d273a035 — Environment-variable access.
pkgs/go/[email protected]/pkg/util/net/http.go:148 
	if s := os.Getenv("HTTP2_READ_IDLE_TIMEOUT_SECONDS"); len(s) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0daed6d74061fc7 — Environment-variable access.
pkgs/go/[email protected]/pkg/util/net/http.go:162 
	if s := os.Getenv("HTTP2_PING_TIMEOUT_SECONDS"); len(s) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51ded5938ba6738c — Environment-variable access.
pkgs/go/[email protected]/pkg/util/net/http.go:400 
	noProxyEnv := os.Getenv("NO_PROXY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1697fda335cb9364 — Environment-variable access.
pkgs/go/[email protected]/pkg/util/net/http.go:402 
		noProxyEnv = os.Getenv("no_proxy")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0fc9abb9b393d51 — Filesystem access.
pkgs/go/[email protected]/pkg/util/net/interface.go:97 
	file, err := os.Open(rf.name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06bb078872876b6e — Filesystem access.
pkgs/go/[email protected]/pkg/util/strategicpatch/testing/openapi.go:45 
		spec, err := os.ReadFile(f.Path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b96e3b640823912 — Filesystem access.
pkgs/go/[email protected]/pkg/util/strategicpatch/testing/openapi3.go:39 
		spec, err := os.ReadFile(f.Path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20181784460e2537 — Filesystem access.
pkgs/go/[email protected]/pkg/util/strategicpatch/testing/openapi3.go:54 
		spec, err := os.ReadFile(f.Path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

mosn.io/holmes

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #8fd68b2d41e4256c — Filesystem access.
pkgs/go/[email protected]/holmes.go:619 
		bfCpy, err = ioutil.ReadFile(binFileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d78142d9c256843 — Filesystem access.
pkgs/go/[email protected]/reporters/http_reporter/http_reporter.go:57 
	data, err := ioutil.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e31c91cd8ca2377b — Filesystem access.
pkgs/go/[email protected]/util.go:58 
	v, err := ioutil.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8212b2bb87e6c3f5 — Filesystem access.
pkgs/go/[email protected]/util.go:209 
	f, err := os.OpenFile(filepath, defaultLoggerFlags, defaultLoggerPerm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d8edb647e0bad75 — Filesystem access.
pkgs/go/[email protected]/util.go:214 
		f, err = os.OpenFile(filepath, defaultLoggerFlags, defaultLoggerPerm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • github.com/klauspost/compress prod — module zip exceeds byte cap
  • github.com/greatroar/blobloom prod — proxy 404
  • github.com/milvus-io/milvus/pkg/v3 prod — proxy 404
  • google.golang.org/api prod — module zip exceeds byte cap
  • github.com/huaweicloud/huaweicloud-sdk-go-v3 prod — module zip exceeds byte cap