Close Open Privacy Scan

link https://github.com/milvus-io/milvus
bolt Snapshot: commit 6ca0350
science engine v1.5
schedule 2026-07-15T05:13:06.393461+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code. Dependency data flows are listed separately and do not affect this verdict.

App Privacy Score

97 /100
Low privacy risk

Low risk · 1148 finding(s)

Dependency score: 57 (Medium risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 2 medium 1146 low
First-party packages: 5
Dependency packages: 57
Ecosystem: go

swap_horiz Application data flows

No application data flows were found. See dependency data flows below.

hub Dependency data flows (1)
medium google.golang.org/protobuf dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520 → pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:523

</> First-Party Code

first-party (go)

go first-party
expand_more 47 low-confidence finding(s)
low env_fs production #6cddc36c173efa25 — Filesystem access.
repo/cmd/components/util.go:125 
		f, err := os.Create(p.filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df087541ec5cc900 — Filesystem access.
repo/cmd/milvus/stop.go:64 
	fd, err := os.OpenFile(path.Join(runtimeDir, filename), os.O_RDONLY, 0o664)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1c8d577802a0603 — Filesystem access.
repo/cmd/milvus/util.go:79 
	fd, err := os.OpenFile(fileFullName, os.O_CREATE|os.O_RDWR, 0o664)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2696b343fca75e3f — Environment-variable access.
repo/cmd/roles/roles.go:178 
	val, ok := os.LookupEnv(LDPreLoad)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6fb304fc63e015ff — Environment-variable access.
repo/cmd/tools/config-docs-generator/main.go:17 
	outputPath = os.Getenv("PWD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08083f1ef5d1978e — Filesystem access.
repo/cmd/tools/config-docs-generator/main.go:33 
	data, err := os.ReadFile(inputFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d8ab7c06131dcde — Filesystem access.
repo/cmd/tools/config-docs-generator/main.go:177 
		os.WriteFile(filepath.Join(outputPath, sec.fileName()), []byte(sectionFileContent), 0o600)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cc3b19633cf3e78 — Filesystem access.
repo/cmd/tools/config-docs-generator/main.go:179 
	err := os.WriteFile(filepath.Join(outputPath, fileName), []byte(fileContent), 0o600)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cc6028554856f1e — Filesystem access.
repo/cmd/tools/config/main.go:26 
		f, err := os.Create("configs.csv")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64f178764b0ed7ba — Filesystem access.
repo/cmd/tools/config/main.go:34 
		f, err := os.Create("milvus.yaml")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e27ca065a6b406b5 — Filesystem access.
repo/cmd/tools/config/printer.go:15 
	data, err := os.ReadFile(filepath) //nolint:gosec // filepath is from CLI args, not untrusted input

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49dd1295ea231a6c — Environment-variable access.
repo/internal/distributed/proxy/service.go:1121 
	buildTags := os.Getenv(metricsinfo.GitBuildTagsEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee7bbc2917f7b95d — Filesystem access.
repo/internal/distributed/utils/util.go:70 
	b, err := os.ReadFile(caFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7a5852a126af3bf — Environment-variable access.
repo/internal/http/server.go:312 
	port := os.Getenv(ListenPortEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6791057f1e0cf0e — Filesystem access.
repo/internal/proxy/accesslog/chown_linux.go:12 
	f, err := os.OpenFile(name, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, info.Mode())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c564b30fc67ef02 — Filesystem access.
repo/internal/proxy/accesslog/writer.go:273 
	file, err := os.OpenFile(filename, os.O_APPEND|os.O_WRONLY, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8fdc6beef5c7abe — Filesystem access.
repo/internal/proxy/accesslog/writer.go:309 
	f, err := os.OpenFile(name, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #beb46200a5065927 — Environment-variable access.
repo/internal/proxy/impl.go:4531 
		Status: merr.Success(os.Getenv(metricsinfo.DeployModeEnvKey)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b11f87349e24450 — Environment-variable access.
repo/internal/proxy/impl.go:6342 
		BuildTags:  os.Getenv(metricsinfo.GitBuildTagsEnvKey),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dca3c2451b1f471e — Environment-variable access.
repo/internal/proxy/impl.go:6343 
		BuildTime:  os.Getenv(metricsinfo.MilvusBuildTimeEnvKey),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe48ccbce314f858 — Environment-variable access.
repo/internal/proxy/impl.go:6344 
		GitCommit:  os.Getenv(metricsinfo.GitCommitEnvKey),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4007fb96026c4563 — Environment-variable access.
repo/internal/proxy/impl.go:6345 
		GoVersion:  os.Getenv(metricsinfo.MilvusUsedGoVersion),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0f1dbf97adc4428 — Environment-variable access.
repo/internal/proxy/impl.go:6346 
		DeployMode: os.Getenv(metricsinfo.DeployModeEnvKey),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #461da15a27a397d2 — Filesystem access.
repo/internal/querynodev2/delegator/idf_oracle.go:301 
			f, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a4b8ab893618a2b — Filesystem access.
repo/internal/querynodev2/delegator/idf_oracle.go:772 
	f, err := os.Create(localPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd0facc5c6039c78 — Filesystem access.
repo/internal/storage/local_chunk_manager.go:310 
	dstFile, err := os.Create(dstFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f8f8ba06d926226 — Filesystem access.
repo/internal/storage/print_binlog.go:47 
	fd, err := os.OpenFile(filename, os.O_RDONLY, 0o400)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f840924b4702e3a — Filesystem access.
repo/internal/storage/utils.go:55 
	reader, err := os.Open(filepath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5600c752e8a3144 — Filesystem access.
repo/internal/storage/utils.go:69 
	data, err := os.ReadFile(filepath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52c45c94fef918bd — Filesystem access.
repo/internal/storage/utils.go:83 
	err := os.WriteFile(filepath, data, perm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7f0015a14ee0936 — Filesystem access.
repo/internal/util/fileresource/manager.go:200 
			file, err := os.Create(localFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d752aeb487a8393 — Filesystem access.
repo/internal/util/fileresource/manager.go:312 
			file, err := os.Create(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fcf2cdf4d793bf35 — Environment-variable access.
repo/internal/util/function/embedding/bedrock_embedding_provider.go:107 
		awsAccessKeyId = os.Getenv(models.BedrockAccessKeyId)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2654a080dffaae0 — Environment-variable access.
repo/internal/util/function/embedding/bedrock_embedding_provider.go:110 
		awsSecretAccessKey = os.Getenv(models.BedrockSAKEnvStr)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0b6d786f1b14759 — Environment-variable access.
repo/internal/util/function/embedding/openai_embedding_provider.go:68 
			resourceName = os.Getenv(models.AzureOpenaiResourceName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1320f59d35b66b10 — Environment-variable access.
repo/internal/util/function/embedding/vertexai_embedding_provider.go:49 
	jsonKeyPath := os.Getenv(models.VertexServiceAccountJSONEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05a73957f2cf9b1a — Filesystem access.
repo/internal/util/function/embedding/vertexai_embedding_provider.go:57 
	jsonKey, err := os.ReadFile(jsonKeyPath) //nolint:gosec // path is from trusted environment variable

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8368563766cc3a02 — Environment-variable access.
repo/internal/util/function/models/common.go:210 
		apiKey = os.Getenv(apiKeyEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #104c67c7b8ca0c23 — Environment-variable access.
repo/internal/util/function/models/common.go:217 
		apiKey = os.Getenv(newEnvStr)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4f60a6e89b83daa — Filesystem access.
repo/internal/util/metrics/thread.go:190 
		nameBytes, err := os.ReadFile(filepath.Join(taskDir, entry.Name(), "comm"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db74ed3b129fa9fd — Filesystem access.
repo/internal/util/metrics/thread.go:194 
		statBytes, err := os.ReadFile(filepath.Join(taskDir, entry.Name(), "stat"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c32adc8a8d70f6b0 — Environment-variable access.
repo/internal/util/sessionutil/labels.go:69 
	for _, value := range os.Environ() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02e1a9931655da93 — Environment-variable access.
repo/internal/util/sessionutil/session_util.go:423 
	if os.Getenv(MilvusNodeIDForTesting) != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4137b35cee6a9925 — Environment-variable access.
repo/internal/util/sessionutil/session_util.go:424 
		mlog.Info(context.TODO(), "use node id for testing", mlog.String("nodeID", os.Getenv(MilvusNodeIDForTesting)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a173927816e8231c — Environment-variable access.
repo/internal/util/sessionutil/session_util.go:425 
		return strconv.ParseInt(os.Getenv(MilvusNodeIDForTesting), 10, 64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36519cea0b95656f — Filesystem access.
repo/internal/util/sessionutil/session_util.go:1204 
	fd, err := os.OpenFile(fileFullPath, os.O_RDWR|os.O_CREATE|os.O_APPEND, 0o664)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46979911862b835d — Environment-variable access.
repo/internal/util/streamingutil/env.go:12 
	return os.Getenv(MilvusStreamingServiceEnabled) == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (go): client

go first-party
expand_more 1 low-confidence finding(s)
low env_fs production #98d9bab6772a8724 — Filesystem access.
repo/client/milvusclient/tls.go:30 
	caPem, err := os.ReadFile(caPemPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (go): examples/telemetry_demo

go first-party
expand_more 2 low-confidence finding(s)
low env_fs test-only #698d6859b7311def — Environment-variable access.
repo/examples/telemetry_demo/main.go:742 
	if v := os.Getenv(key); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b4c6c94d2b9b2947 — Environment-variable access.
repo/examples/telemetry_demo/multi_database_demo.go:627 
	if v := os.Getenv(key); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (go): examples/telemetry_e2e_test

go first-party
expand_more 1 low-confidence finding(s)
low env_fs test-only #d218744b31ed1491 — Environment-variable access.
repo/examples/telemetry_e2e_test/main.go:45 
	address := os.Getenv("MILVUS_ADDRESS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (go): pkg

go first-party
expand_more 24 low-confidence finding(s)
low env_fs production #0686047b5eb7cb73 — Environment-variable access.
repo/pkg/config/env_source.go:43 
	for _, value := range os.Environ() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ed0d0a98f82bd59 — Filesystem access.
repo/pkg/config/file_source.go:140 
		data, err := os.ReadFile(configFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e1140ccb04edf92 — Environment-variable access.
repo/pkg/objectstorage/huawei/huawei.go:116 
	regionName := os.Getenv("HUAWEICLOUD_SDK_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da17343b759f6bd9 — Environment-variable access.
repo/pkg/objectstorage/util.go:199 
		if os.Getenv("AZURE_FEDERATED_TOKEN_FILE") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4760699159cc8305 — Environment-variable access.
repo/pkg/objectstorage/util.go:201 
				ClientID:      os.Getenv("AZURE_CLIENT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #681b9a2f98222639 — Environment-variable access.
repo/pkg/objectstorage/util.go:202 
				TenantID:      os.Getenv("AZURE_TENANT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28320fd019acf474 — Environment-variable access.
repo/pkg/objectstorage/util.go:203 
				TokenFilePath: os.Getenv("AZURE_FEDERATED_TOKEN_FILE"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98512881b3642836 — Environment-variable access.
repo/pkg/objectstorage/util.go:206 
			clientID := os.Getenv("AZURE_CLIENT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e4b66c475f5dbb6 — Environment-variable access.
repo/pkg/objectstorage/util.go:222 
		connectionString := os.Getenv("AZURE_STORAGE_CONNECTION_STRING")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24011b2c99cd9ef2 — Filesystem access.
repo/pkg/streaming/util/message/codegen/main.go:359 
	jsonData, err := os.ReadFile(reflectInfoFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a74485ddb98e565 — Filesystem access.
repo/pkg/streaming/util/message/codegen/main.go:380 
	err = os.WriteFile(reflectInfoGo, []byte(code), 0o644) // #nosec G306

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ea4114f2b1244b8 — Filesystem access.
repo/pkg/util/etcd/etcd_util.go:174 
	caCert, err := os.ReadFile(caCertFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eba0e0833cb571b5 — Environment-variable access.
repo/pkg/util/gc/gc_tuner.go:110 
		if envGOGC := os.Getenv("GOGC"); envGOGC != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbe5c26fb4c6c4fd — Environment-variable access.
repo/pkg/util/hardware/container_linux.go:63 
	memoryStr := os.Getenv("MEM_LIMIT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a87bcafba6089b78 — Environment-variable access.
repo/pkg/util/hardware/container_test_linux.go:55 
		assert.Equal(t, "", os.Getenv("MEM_LIMIT"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c39be17755c007d — Environment-variable access.
repo/pkg/util/metricsinfo/utils.go:34 
	m.SystemVersion = os.Getenv(GitCommitEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a92335463486d0c5 — Environment-variable access.
repo/pkg/util/metricsinfo/utils.go:35 
	m.DeployMode = os.Getenv(DeployModeEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ab058bf2ca47d47 — Environment-variable access.
repo/pkg/util/metricsinfo/utils.go:36 
	m.BuildVersion = os.Getenv(GitBuildTagsEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbe31bf9010ca6e2 — Environment-variable access.
repo/pkg/util/metricsinfo/utils.go:37 
	m.UsedGoVersion = os.Getenv(MilvusUsedGoVersion)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #937e1d6eccfc0d1b — Environment-variable access.
repo/pkg/util/metricsinfo/utils.go:38 
	m.BuildTime = os.Getenv(MilvusBuildTimeEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08cd3e1bb73aa369 — Environment-variable access.
repo/pkg/util/paramtable/base_table.go:237 
	configDir := os.Getenv("MILVUSCONF")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c76a6217afea52a — Environment-variable access.
repo/pkg/util/paramtable/component_param.go:7123 
	if os.Getenv(metricsinfo.DeployModeEnvKey) == metricsinfo.StandaloneDeployMode {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee2633fc7bce493e — Environment-variable access.
repo/pkg/util/paramtable/runtime.go:47 
		if refreshInterval := os.Getenv(MilvusConfigRefreshIntervalEnvKey); refreshInterval != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #851ef173eb92074b — Environment-variable access.
repo/pkg/util/paramtable/service_param.go:145 
	if p.UseEmbedEtcd.GetAsBool() && (os.Getenv(metricsinfo.DeployModeEnvKey) != metricsinfo.StandaloneDeployMode) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

github.com/cockroachdb/errors

go dependency
medium telemetry dependency Excluded from app score #f1b004f6326f1870 — Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/report/report.go:380 
	res := sentry.CaptureEvent(event)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #5b2a693907c421b6 — Filesystem access.
pkgs/go/[email protected]/testutils/simplecheck.go:208 
		data, err := ioutil.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

google.golang.org/protobuf

go dependency
medium pii_flow dependency Excluded from app score #7054fc2991c8aea0 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:523 · flow /tmp/closeopen-xfnrovz4/pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520 → /tmp/closeopen-xfnrovz4/pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:523 
		fmt.Printf("executing: %v\n%s\n", strings.Join(cmd.Args, " "), out)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
expand_more 22 low-confidence finding(s)
low env_fs dependency Excluded from app score #eab68676ccfd3465 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-corpus/main.go:117 
		if err := os.WriteFile(fmt.Sprintf("internal/fuzz/wirefuzz/corpus/%x", sha1.Sum(wire)), wire, 0777); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24b84375be44ab6e — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-corpus/main.go:125 
		if err := os.WriteFile(fmt.Sprintf("internal/fuzz/textfuzz/corpus/%x", sha1.Sum(text)), text, 0777); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #340b63ada35b1c4c — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-corpus/main.go:133 
		if err := os.WriteFile(fmt.Sprintf("internal/fuzz/jsonfuzz/corpus/%x", sha1.Sum(json)), json, 0777); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3fde7713f2c0d8b — Environment-variable access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:46 
	if plugin := os.Getenv("RUN_AS_PROTOC_PLUGIN"); plugin != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #465a9b02fc259c34 — Environment-variable access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:85 
	flag.StringVar(&protoRoot, "protoroot", os.Getenv("PROTOBUF_ROOT"), "The root of the protobuf source tree.")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c0eb91485b7c87e — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:119 
	out, err := os.Create(outFn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf72df3bf308cb6e — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:124 
	b, err := os.ReadFile(inFn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #707b94acc9f99adb — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:427 
			check(os.WriteFile(filepath.Join(tmpDir, filepath.FromSlash(d.path+"/gen_test.go")), b, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba8c5be5ff22af2b — Environment-variable access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520 
	cmd.Env = append(os.Environ(), "RUN_AS_PROTOC_PLUGIN=1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07cb7c6c3302a2ec — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:721 
	src, err := os.ReadFile(srcPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9db17cce45d78a2f — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:724 
	dst, _ := os.ReadFile(dstPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4524f1738f18403d — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:728 
	check(os.WriteFile(dstPath, src, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5fbc6d16c9e5fca — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-types/main.go:263 
		prev, _ := os.ReadFile(absFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a85f8d3e91cfc8d — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-types/main.go:266 
			check(os.WriteFile(absFile, b, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a3b4177f38d0a40 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-types/main.go:269 
		check(os.WriteFile(absFile+".tmp", b, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62d9165743b87e2d — Filesystem access.
pkgs/go/[email protected]/internal/cmd/pbdump/pbdump.go:121 
		b, err := os.ReadFile(f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b7d7c22b47e4a92 — Filesystem access.
pkgs/go/[email protected]/internal/detrand/rand.go:46 
	f, err := os.Open(s)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2893ac4c9773a91f — Filesystem access.
pkgs/go/[email protected]/internal/fuzztest/fuzztest.go:20 
	dir, err := os.Open(*corpus)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b8bc214ef1ff5db — Filesystem access.
pkgs/go/[email protected]/internal/fuzztest/fuzztest.go:36 
			b, err := os.ReadFile(filepath.Join(*corpus, name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8bcbe7bfc829c078 — Environment-variable access.
pkgs/go/[email protected]/internal/impl/lazy.go:24 
	if os.Getenv("GOPROTODEBUG") == "nolazy" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a424017e0f90626 — Environment-variable access.
pkgs/go/[email protected]/reflect/protoregistry/registry.go:51 
	if v := os.Getenv(env); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae3017d3b8e5ecd6 — Environment-variable access.
pkgs/go/[email protected]/reflect/protoregistry/registry.go:63 
		panic("invalid " + env + " value: " + os.Getenv(env))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

cloud.google.com/go/storage

go dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #1b89db3a41123e1f — Environment-variable access.
pkgs/go/[email protected]/grpc_client.go:93 
	if host := os.Getenv("STORAGE_EMULATOR_HOST_GRPC"); host != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fab24f7acfb5c516 — Environment-variable access.
pkgs/go/[email protected]/http_client.go:76 
	if host := os.Getenv("STORAGE_EMULATOR_HOST"); host == "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #949274fc6ddee865 — Environment-variable access.
pkgs/go/[email protected]/option.go:49 
	increaseRate := os.Getenv(dynamicReadReqIncreaseRateEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5305ea68ce4eaeb0 — Environment-variable access.
pkgs/go/[email protected]/option.go:64 
	initialTimeout := os.Getenv(dynamicReadReqInitialTimeoutEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f0fdef7b4796667 — Environment-variable access.
pkgs/go/[email protected]/storage.go:146 
	if host := os.Getenv("STORAGE_EMULATOR_HOST"); host == "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa493776a0501072 — Environment-variable access.
pkgs/go/[email protected]/storage.go:352 
	if host := os.Getenv("STORAGE_EMULATOR_HOST"); host != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a698ff6ae82edef — Environment-variable access.
pkgs/go/[email protected]/storage.go:364 
	if host := os.Getenv("STORAGE_EMULATOR_HOST"); host != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #316706c5b4db25e6 — Filesystem access.
pkgs/go/[email protected]/transfermanager/downloader.go:202 
		f, fErr := os.Create(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/Azure/azure-sdk-for-go/sdk/azcore

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #5b6f1676b7739545 — Environment-variable access.
pkgs/go/[email protected]/runtime/policy_telemetry.go:78 
		operatingSystem = os.Getenv("OS") // Get more specific OS information

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/Azure/azure-sdk-for-go/sdk/azidentity

go dependency
expand_more 36 low-confidence finding(s)
low env_fs dependency Excluded from app score #9f0a9f053297f5b9 — Environment-variable access.
pkgs/go/[email protected]/azidentity.go:70 
		if envAuthorityHost := os.Getenv(azureAuthorityHost); envAuthorityHost != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #712447a551c77d4d — Environment-variable access.
pkgs/go/[email protected]/azure_cli_credential.go:134 
		dir := os.Getenv("SYSTEMROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc2d2d61751448dd — Environment-variable access.
pkgs/go/[email protected]/azure_cli_credential.go:144 
	cliCmd.Env = os.Environ()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96059199d7cdccc5 — Environment-variable access.
pkgs/go/[email protected]/azure_developer_cli_credential.go:120 
		dir := os.Getenv("SYSTEMROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4301d4f659580ea — Environment-variable access.
pkgs/go/[email protected]/azure_developer_cli_credential.go:130 
	cliCmd.Env = os.Environ()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6ecba97d8500f54 — Environment-variable access.
pkgs/go/[email protected]/azure_pipelines_credential.go:61 
	u := os.Getenv(systemOIDCRequestURI)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fdc73d767ca43b02 — Environment-variable access.
pkgs/go/[email protected]/azure_pipelines_credential.go:65 
	sat := os.Getenv(systemAccessToken)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a37dd8cd898a260b — Environment-variable access.
pkgs/go/[email protected]/confidential_client.go:75 
		region:   os.Getenv(azureRegionalAuthorityName),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #288b280770fb2f70 — Environment-variable access.
pkgs/go/[email protected]/default_azure_credential.go:69 
		if tenants := os.Getenv(azureAdditionallyAllowedTenants); tenants != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca05ec565f9c239e — Environment-variable access.
pkgs/go/[email protected]/default_azure_credential.go:100 
	if ID, ok := os.LookupEnv(azureClientID); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ddfd561d4d51eda — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:87 
	tenantID := os.Getenv(azureTenantID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05afd958d1f271ba — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:91 
	clientID := os.Getenv(azureClientID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d24e9e1d7437f2cc — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:98 
		if tenants := os.Getenv(azureAdditionallyAllowedTenants); tenants != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab73eddc87781eb5 — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:102 
	if clientSecret := os.Getenv(azureClientSecret); clientSecret != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb2b55efc49e2062 — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:115 
	if certPath := os.Getenv(azureClientCertificatePath); certPath != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cdb1f033dde24cb — Filesystem access.
pkgs/go/[email protected]/environment_credential.go:117 
		certData, err := os.ReadFile(certPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5faa3a83a9dc1155 — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:122 
		if v := os.Getenv(azureClientCertificatePassword); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b05f3b0afef07830 — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:134 
		if v, ok := os.LookupEnv(envVarSendCertChain); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #454e7368ae1c17ad — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:143 
	if username := os.Getenv(azureUsername); username != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6918e5cdc4f2dbc — Environment-variable access.
pkgs/go/[email protected]/environment_credential.go:144 
		if password := os.Getenv(azurePassword); password != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c254137a0d31ac2 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:76 
		pd := os.Getenv("ProgramData")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a5b056a82538ef1 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:143 
	if endpoint, ok := os.LookupEnv(identityEndpoint); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13decc92388a6de0 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:144 
		if _, ok := os.LookupEnv(identityHeader); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48d2e291bc115bd1 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:145 
			if _, ok := os.LookupEnv(identityServerThumbprint); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c91473b83adda00e — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:154 
		} else if _, ok := os.LookupEnv(arcIMDSEndpoint); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae3d23d746be9a26 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:159 
	} else if endpoint, ok := os.LookupEnv(msiEndpoint); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd58637f4b76bbba — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:161 
		if _, ok := os.LookupEnv(msiSecret); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da49740711322d8a — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:344 
	request.Raw().Header.Set("X-IDENTITY-HEADER", os.Getenv(identityHeader))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fc317e7aad1ed38 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:364 
	request.Raw().Header.Set("secret", os.Getenv(msiSecret))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d329679db372dab9 — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:368 
	q.Add("clientid", os.Getenv(defaultIdentityClientID))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44ffe11db256147b — Environment-variable access.
pkgs/go/[email protected]/managed_identity_client.go:389 
	request.Raw().Header.Set("Secret", os.Getenv(identityHeader))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #831d4cb70d5ea068 — Filesystem access.
pkgs/go/[email protected]/managed_identity_client.go:449 
	key, err := os.ReadFile(p)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c7d84243b135a2d — Environment-variable access.
pkgs/go/[email protected]/workload_identity.go:65 
		if clientID, ok = os.LookupEnv(azureClientID); !ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40b50c7965dd0eea — Environment-variable access.
pkgs/go/[email protected]/workload_identity.go:71 
		if file, ok = os.LookupEnv(azureFederatedTokenFile); !ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fac852382d8a2f8d — Environment-variable access.
pkgs/go/[email protected]/workload_identity.go:77 
		if tenantID, ok = os.LookupEnv(azureTenantID); !ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ff7b678f45b6ed2 — Filesystem access.
pkgs/go/[email protected]/workload_identity.go:117 
			content, err := os.ReadFile(w.file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/Azure/azure-sdk-for-go/sdk/storage/azblob

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #e7a5a6d08344594e — Environment-variable access.
pkgs/go/[email protected]/internal/testcommon/common.go:179 
	env, ok := os.LookupEnv(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/aliyun/credentials-go

go dependency
expand_more 16 low-confidence finding(s)
low env_fs dependency Excluded from app score #376dea9f9177c731 — Environment-variable access.
pkgs/go/[email protected]/credentials/credential.go:166 
		v = os.Getenv("ALIBABA_CLOUD_CREDENTIALS_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eeec5adb6e474616 — Filesystem access.
pkgs/go/[email protected]/credentials/credential.go:243 
		file, err1 := os.Open(tea.StringValue(config.PrivateKeyFile))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3515a8e57030d53a — Environment-variable access.
pkgs/go/[email protected]/credentials/env_provider.go:27 
	accessKeyId, ok1 := os.LookupEnv(EnvVarAccessKeyIdNew)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95da136fb9bff099 — Environment-variable access.
pkgs/go/[email protected]/credentials/env_provider.go:29 
		accessKeyId, ok1 = os.LookupEnv(EnvVarAccessKeyId)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7ffbf0353719f61 — Environment-variable access.
pkgs/go/[email protected]/credentials/env_provider.go:31 
	accessKeySecret, ok2 := os.LookupEnv(EnvVarAccessKeySecret)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae72d06a94e79b87 — Environment-variable access.
pkgs/go/[email protected]/credentials/instance_provider.go:18 
	roleName, ok := os.LookupEnv(ENVEcsMetadata)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07776624f6258259 — Environment-variable access.
pkgs/go/[email protected]/credentials/oidc_credential.go:108 
		tokenPath = os.Getenv("ALIBABA_CLOUD_OIDC_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a16b8c6923de932 — Filesystem access.
pkgs/go/[email protected]/credentials/oidc_credential.go:113 
	byt, err := ioutil.ReadFile(tokenPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c36958c460b7480c — Environment-variable access.
pkgs/go/[email protected]/credentials/oidc_credential_provider.go:18 
	roleArn, ok1 := os.LookupEnv(ENVRoleArn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #543ab0c5cb97c8e4 — Environment-variable access.
pkgs/go/[email protected]/credentials/oidc_credential_provider.go:19 
	oidcProviderArn, ok2 := os.LookupEnv(ENVOIDCProviderArn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e19ef0e437ad817 — Environment-variable access.
pkgs/go/[email protected]/credentials/oidc_credential_provider.go:20 
	oidcTokenFilePath, ok3 := os.LookupEnv(ENVOIDCTokenFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #078939191797372e — Environment-variable access.
pkgs/go/[email protected]/credentials/oidc_credential_provider.go:32 
	roleSessionName, ok := os.LookupEnv(ENVRoleSessionName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fce5a72dd6f1573 — Environment-variable access.
pkgs/go/[email protected]/credentials/profile_provider.go:47 
	path, ok := os.LookupEnv(ENVCredentialFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a646494b93ed3e74 — Environment-variable access.
pkgs/go/[email protected]/credentials/profile_provider.go:299 
		path, ok := os.LookupEnv("USERPROFILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00382955a68cd936 — Environment-variable access.
pkgs/go/[email protected]/credentials/profile_provider.go:305 
	path, ok := os.LookupEnv("HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe022e5975434fe5 — Environment-variable access.
pkgs/go/[email protected]/credentials/uri_credential.go:32 
		URL = os.Getenv("ALIBABA_CLOUD_CREDENTIALS_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/antlr4-go/antlr/v4

go dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #a6a120ffa9cfb978 — Filesystem access.
pkgs/go/[email protected]/file_stream.go:23 
	f, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9d869244f2e2599 — Filesystem access.
pkgs/go/[email protected]/statistics.go:158 
	f, err := os.OpenFile(cname, os.O_APPEND|os.O_CREATE|os.O_WRONLY, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #493b9d446bb7c659 — Filesystem access.
pkgs/go/[email protected]/statistics.go:175 
	f, err = os.OpenFile(fname, os.O_APPEND|os.O_CREATE|os.O_WRONLY, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/apache/arrow/go/v17

go dependency
expand_more 26 low-confidence finding(s)
low env_fs dependency Excluded from app score #ebe8545676263886 — Filesystem access.
pkgs/go/[email protected]/arrow/_tools/tmpl/main.go:124 
	data, err := ioutil.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7c2ea6412a8403c — Filesystem access.
pkgs/go/[email protected]/arrow/_tools/tmpl/main.go:184 
		os.WriteFile(spec.out, generated, fileMode(spec.in))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad40c5efbf6fc009 — Filesystem access.
pkgs/go/[email protected]/arrow/avro/avro2parquet/main.go:43 
		f, err := os.Create(*cpuprofile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f1054ad0995458f — Filesystem access.
pkgs/go/[email protected]/arrow/avro/avro2parquet/main.go:65 
	data, err := os.ReadFile(*filepath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #719254b7513de1c5 — Filesystem access.
pkgs/go/[email protected]/arrow/avro/avro2parquet/main.go:79 
	fp, err := os.OpenFile(*filepath+".parquet", os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0171bf14a3e50825 — Filesystem access.
pkgs/go/[email protected]/arrow/gen-flatbuffers.go:78 
	raw, err := ioutil.ReadFile(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed5c735f42e3d778 — Filesystem access.
pkgs/go/[email protected]/arrow/gen-flatbuffers.go:83 
	f, err := os.Create(dst)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97ee4a1683e7ec26 — Filesystem access.
pkgs/go/[email protected]/arrow/internal/cdata_integration/entrypoints.go:70 
	f, err := os.Open(jsonPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #504f0f040674e50e — Filesystem access.
pkgs/go/[email protected]/arrow/internal/flight_integration/scenario.go:173 
	r, err := os.Open(s.path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d9f0087ef2d0a5f — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-cat/main.go:125 
	f, err := os.Open(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #145fadea98aad9a4 — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-file-to-stream/main.go:50 
	r, err := os.Open(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fa3db6494b2ad42 — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-json-integration-test/main.go:76 
	r, err := os.Open(arrowName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #904c4fd17aea2b77 — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-json-integration-test/main.go:82 
	w, err := os.Create(jsonName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed17ab8ca1b1d310 — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-json-integration-test/main.go:127 
	r, err := os.Open(jsonName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a5328adb16a9363 — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-json-integration-test/main.go:133 
	w, err := os.Create(arrowName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08506ad02a3eb569 — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-json-integration-test/main.go:177 
	jr, err := os.Open(jsonName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52bb4eb0d009b1d6 — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-json-integration-test/main.go:188 
	ar, err := os.Open(arrowName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb21d2371dcb75da — Filesystem access.
pkgs/go/[email protected]/arrow/ipc/cmd/arrow-ls/main.go:122 
	f, err := os.Open(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86abc6cac8e10552 — Environment-variable access.
pkgs/go/[email protected]/arrow/memory/checked_allocator.go:123 
	if val, ok := os.LookupEnv("ARROW_CHECKED_ALLOC_FRAMES"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32136c77fd543e41 — Environment-variable access.
pkgs/go/[email protected]/arrow/memory/checked_allocator.go:129 
	if val, ok := os.LookupEnv("ARROW_CHECKED_REALLOC_FRAMES"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f78e03726aa07f40 — Environment-variable access.
pkgs/go/[email protected]/arrow/memory/checked_allocator.go:135 
	if val, ok := os.LookupEnv("ARROW_CHECKED_MAX_RETAINED_FRAMES"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e082ffcac0ee8ca — Environment-variable access.
pkgs/go/[email protected]/internal/utils/min_max_arm64.go:31 
	if ext, ok := os.LookupEnv("ARM_ENABLE_EXT"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #413b5c00945cba57 — Filesystem access.
pkgs/go/[email protected]/parquet/cmd/parquet_reader/main.go:77 
		fileOut, err := os.Create(config.Output)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69c1c1e5b59b9041 — Filesystem access.
pkgs/go/[email protected]/parquet/file/file_reader.go:89 
		source, err = os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61e7fa94a804ed7e — Environment-variable access.
pkgs/go/[email protected]/parquet/internal/bmi/bmi_arm64.go:33 
	if ext, ok := os.LookupEnv("ARM_ENABLE_EXT"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d76c91e26c9653f4 — Environment-variable access.
pkgs/go/[email protected]/parquet/internal/utils/unpack_bool_arm64.go:34 
	if ext, ok := os.LookupEnv("ARM_ENABLE_EXT"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/apache/pulsar-client-go

go dependency
expand_more 30 low-confidence finding(s)
low env_fs dependency Excluded from app score #7f64b3f23a945c69 — Filesystem access.
pkgs/go/[email protected]/oauth2/client_credentials_provider.go:58 
		keyFile, err = os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03b3ad4db2eecb24 — Filesystem access.
pkgs/go/[email protected]/oauth2/client_credentials_provider.go:68 
		keyFile, err = os.ReadFile(k.KeyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6599c2c81b25584 — Filesystem access.
pkgs/go/[email protected]/perf/pulsar-perf-go.go:61 
		tokenBytes, err := os.ReadFile(clientArgs.TokenFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbd8e8a6f912d9b5 — Filesystem access.
pkgs/go/[email protected]/pulsar/auth/athenz.go:247 
		pem, err := os.ReadFile(uriSt.Path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22e991a8660627fc — Filesystem access.
pkgs/go/[email protected]/pulsar/auth/token.go:71 
			data, err := os.ReadFile(tokenFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b626e86d9773ae99 — Filesystem access.
pkgs/go/[email protected]/pulsar/crypto/default_crypto_Key_reader.go:46 
	key, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c2589627ef90361 — Filesystem access.
pkgs/go/[email protected]/pulsar/internal/connection.go:1124 
		caCerts, err := os.ReadFile(c.tlsOptions.TrustCertsFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66d85a3c72f7c9db — Filesystem access.
pkgs/go/[email protected]/pulsar/internal/http_client.go:353 
				rootCA, err := os.ReadFile(tlsConfig.TrustCertsFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2353e70077c71fe — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/auth/token.go:57 
	data, err := os.ReadFile(tokenFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c12ef4ee8d62c36 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/auth/transport.go:50 
		rootCA, err := os.ReadFile(config.TLSTrustCertsFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49dd1c70436e9c50 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:322 
		file, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #826ac7c3caa45257 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:450 
	_, err := os.Open(destinationFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6689f3c24adf1365 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:457 
	file, err := os.Create(destinationFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14864cfcaab051bb — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:484 
	_, err := os.Open(destinationFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31dece05219350ee — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:491 
	file, err := os.Create(destinationFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37a56b645babaf06 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:634 
		file, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2c7128b879fc069 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:892 
		file, err := os.Open(triggerFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1188072579d0db2 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/functions.go:959 
	file, err := os.Open(sourceFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e73b9aac160d2cdb — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/packages.go:168 
	_, err = os.Open(destinationFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee07355f0171aa10 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/packages.go:175 
	file, err := os.Create(destinationFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #288e1e0008177381 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/packages.go:236 
	file, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad950509a851df7a — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/sinks.go:236 
		file, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26803aaa46ebde26 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/sinks.go:369 
		file, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1d0e773797a2b33 — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/sources.go:240 
		file, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6a9995f167f7fff — Filesystem access.
pkgs/go/[email protected]/pulsaradmin/pkg/admin/sources.go:373 
		file, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8203da4c89f60ed3 — Environment-variable access.
pkgs/go/[email protected]/pulsaradmin/pkg/utils/home_dir.go:38 
		home := os.Getenv("HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b2b2fb743cb64ce — Environment-variable access.
pkgs/go/[email protected]/pulsaradmin/pkg/utils/home_dir.go:40 
		if homeDrive, homePath := os.Getenv("HOMEDRIVE"), os.Getenv("HOMEPATH"); len(homeDrive) > 0 && len(homePath) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #155a97b95ac6b447 — Environment-variable access.
pkgs/go/[email protected]/pulsaradmin/pkg/utils/home_dir.go:43 
		userProfile := os.Getenv("USERPROFILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5fcc98526cbe3ed — Environment-variable access.
pkgs/go/[email protected]/pulsaradmin/pkg/utils/home_dir.go:96 
	return os.Getenv("HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa8895c52a5e0e01 — Environment-variable access.
pkgs/go/[email protected]/pulsaradmin/pkg/utils/utils.go:44 
	if envConf, ok := os.LookupEnv("PULSAR_CLIENT_CONF_PATH"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/aws/aws-sdk-go-v2

go dependency
expand_more 9 low-confidence finding(s)
low env_fs dependency Excluded from app score #10e10fce62244d65 — Filesystem access.
pkgs/go/[email protected]/aws/generate.go:29 
	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebf711d58d9e513a — Filesystem access.
pkgs/go/[email protected]/aws/logging_generate.go:85 
	file, err := os.Create("logging.go")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d163cc2bb825e70 — Environment-variable access.
pkgs/go/[email protected]/aws/middleware/recursion_detection.go:40 
	_, hasLambdaEnv := os.LookupEnv(envAwsLambdaFunctionName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b755ec7dc3bf696 — Environment-variable access.
pkgs/go/[email protected]/aws/middleware/recursion_detection.go:41 
	xAmznTraceID, hasTraceID := os.LookupEnv(envAmznTraceID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bad9d5b14e36ea32 — Environment-variable access.
pkgs/go/[email protected]/aws/middleware/user_agent.go:201 
	if ev := os.Getenv(execEnvVar); len(ev) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78c473ef0365c64a — Environment-variable access.
pkgs/go/[email protected]/internal/awstesting/util.go:106 
	originalEnv := os.Environ()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1704717f2fb3a2ec — Environment-variable access.
pkgs/go/[email protected]/internal/awstesting/util.go:150 
		if val, ok := os.LookupEnv(env); ok && len(val) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4fe36fcd1d37690 — Filesystem access.
pkgs/go/[email protected]/internal/endpoints/awsrulesfn/internal/partition/codegen.go:90 
	modelFile, err := os.Open(modelFilename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37467350da5f4225 — Filesystem access.
pkgs/go/[email protected]/internal/endpoints/awsrulesfn/internal/partition/codegen.go:101 
	file, err := os.Create(outputFilename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/aws/aws-sdk-go-v2/config

go dependency
expand_more 35 low-confidence finding(s)
low env_fs dependency Excluded from app score #5ff32c990830c520 — Filesystem access.
pkgs/go/[email protected]/codegen/main.go:94 
	file, err := os.OpenFile(config.OutputPath, os.O_CREATE|os.O_TRUNC|os.O_WRONLY, 0744)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a65ad853d41bdba1 — Environment-variable access.
pkgs/go/[email protected]/config.go:221 
	if os.Getenv(awsProfileEnv) != "" || options.SharedConfigProfile != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42bfb2ed575e4a5b — Environment-variable access.
pkgs/go/[email protected]/defaultsmode.go:43 
		EnvironmentIdentifier:     aws.ExecutionEnvironmentID(os.Getenv(execEnvVar)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26d2365799654d23 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:326 
		creds.AccountID = os.Getenv(awsAccountIDEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ac80430edafdc6a — Environment-variable access.
pkgs/go/[email protected]/env_config.go:327 
		creds.SessionToken = os.Getenv(awsSessionTokenEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #706325a25b65c238 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:331 
	cfg.ContainerCredentialsEndpoint = os.Getenv(awsContainerCredentialsFullURIEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28dfa65df9397da4 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:332 
	cfg.ContainerCredentialsRelativePath = os.Getenv(awsContainerCredentialsRelativeURIEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2dcd182c3521c68f — Environment-variable access.
pkgs/go/[email protected]/env_config.go:333 
	cfg.ContainerAuthorizationToken = os.Getenv(awsContainerAuthorizationTokenEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f92df109207bcb6 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:338 
	cfg.SharedCredentialsFile = os.Getenv(awsSharedCredentialsFileEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7df317fa04d73a9 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:339 
	cfg.SharedConfigFile = os.Getenv(awsConfigFileEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00d8823582b41acf — Environment-variable access.
pkgs/go/[email protected]/env_config.go:341 
	cfg.CustomCABundle = os.Getenv(awsCABundleEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7ff4ef1e3782ba5 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:343 
	cfg.WebIdentityTokenFilePath = os.Getenv(awsWebIdentityTokenFileEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c46d49f7b914e55 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:345 
	cfg.RoleARN = os.Getenv(awsRoleARNEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eed2c5e1465cc8c9 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:346 
	cfg.RoleSessionName = os.Getenv(awsRoleSessionNameEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7c64d595d9379a2 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:348 
	cfg.AppID = os.Getenv(awsSdkUaAppIDEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #094312bace1e4c5c — Environment-variable access.
pkgs/go/[email protected]/env_config.go:369 
	cfg.EC2IMDSEndpoint = os.Getenv(awsEc2MetadataServiceEndpointEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7100f495912166d4 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:478 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f119e12bb4e0e3d — Environment-variable access.
pkgs/go/[email protected]/env_config.go:496 
		if value := os.Getenv(k); len(value) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af23e44b06921e7d — Environment-variable access.
pkgs/go/[email protected]/env_config.go:508 
		if value := os.Getenv(k); len(value) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bfb00c89ecac0118 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:521 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #660f82ae3df635c2 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:534 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4bca192ab6e74fbc — Environment-variable access.
pkgs/go/[email protected]/env_config.go:556 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3eaa5a4b9c3e264f — Environment-variable access.
pkgs/go/[email protected]/env_config.go:575 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4dd6f4ba096b674a — Filesystem access.
pkgs/go/[email protected]/env_config.go:649 
	b, err := os.ReadFile(c.CustomCABundle)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a46209208b35a758 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:673 
	if endpt := os.Getenv(fmt.Sprintf("%s_%s", awsEndpointURLEnv, normalizeEnv(sdkID))); endpt != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b4ed2144f0ac9d0 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:726 
		if v := os.Getenv(k); len(v) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad3fe91747b6ec80 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:735 
		if v := os.Getenv(k); len(v) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3b9e4a7ff5db6b2 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:750 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e12985be03a5d569 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:777 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17b505474dce67dd — Environment-variable access.
pkgs/go/[email protected]/env_config.go:801 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a927ff1479fb47f2 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:824 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9de23442a9194831 — Environment-variable access.
pkgs/go/[email protected]/env_config.go:845 
		value := os.Getenv(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #228865da0f292d73 — Environment-variable access.
pkgs/go/[email protected]/resolve_credentials.go:340 
			if authFilePath := os.Getenv(httpProviderAuthFileEnvVar); authFilePath != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acc582dbbc14341d — Filesystem access.
pkgs/go/[email protected]/resolve_credentials.go:344 
					if contents, err = ioutil.ReadFile(authFilePath); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9875e11ff5b3192 — Filesystem access.
pkgs/go/[email protected]/shared_config.go:495 
	b, err := ioutil.ReadFile(c.CustomCABundle)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/aws/aws-sdk-go-v2/credentials

go dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #1aaed332d42bbcf6 — Environment-variable access.
pkgs/go/[email protected]/processcreds/provider.go:107 
	cmd.Env = os.Environ()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #facfc55a8f64580f — Filesystem access.
pkgs/go/[email protected]/ssocreds/sso_cached_token.go:148 
	fileBytes, err := ioutil.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #221a15cce50bf779 — Filesystem access.
pkgs/go/[email protected]/ssocreds/sso_cached_token.go:181 
	f, err = os.OpenFile(filename, os.O_CREATE|os.O_TRUNC|os.O_RDWR, fileMode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25768a83ef9e5930 — Filesystem access.
pkgs/go/[email protected]/stscreds/web_identity_provider.go:83 
	b, err := ioutil.ReadFile(string(j))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/aws/aws-sdk-go-v2/service/bedrockruntime

go dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #9243d2d05ef8b32f — Environment-variable access.
pkgs/go/[email protected]/endpoints.go:207 
	_, g := os.LookupEnv("AWS_ENDPOINT_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b74ca1104f4ea296 — Environment-variable access.
pkgs/go/[email protected]/endpoints.go:208 
	_, s := os.LookupEnv("AWS_ENDPOINT_URL_BEDROCK_RUNTIME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/bytedance/mockey

go dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #3b05c245ec7cd729 — Environment-variable access.
pkgs/go/[email protected]/internal/tool/check_gcflags.go:29 
	if flag := os.Getenv("MOCKEY_CHECK_GCFLAGS"); flag != "false" && !IsGCFlagsSet() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74ea84fb9e2d495b — Environment-variable access.
pkgs/go/[email protected]/internal/tool/debug.go:27 
	if flag := os.Getenv("MOCKEY_DEBUG"); flag == "true" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/bytedance/sonic

go dependency
expand_more 12 low-confidence finding(s)
low env_fs dependency Excluded from app score #bf42983a7dc8d1fc — Environment-variable access.
pkgs/go/[email protected]/internal/cpu/features.go:32 
	switch v := os.Getenv("SONIC_MODE"); v {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b84de3c4d1a5da41 — Environment-variable access.
pkgs/go/[email protected]/internal/decoder/jitdec/debug.go:29 
	debugSyncGC  = os.Getenv("SONIC_SYNC_GC") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4528bb4f957c0f0a — Environment-variable access.
pkgs/go/[email protected]/internal/decoder/jitdec/debug.go:30 
	debugAsyncGC = os.Getenv("SONIC_NO_ASYNC_GC") == ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b2a030ccfced20a — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/vars/const.go:37 
	DebugSyncGC   = os.Getenv("SONIC_SYNC_GC") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #583e6b410a8c6b06 — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/vars/const.go:38 
	DebugAsyncGC  = os.Getenv("SONIC_NO_ASYNC_GC") == ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24aeb06e2423ee90 — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/vars/const.go:39 
	DebugCheckPtr = os.Getenv("SONIC_CHECK_POINTER") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d26b42bf54c3ead0 — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/vars/const.go:42 
var UseVM = os.Getenv("SONIC_ENCODER_USE_VM") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa6a4ca548da09c6 — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/vars/errors.go:86 
	if v := os.Getenv("SONIC_PANIC_MAX_JSON_LENGTH"); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b5cada93e1b5e4b — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/x86/debug_go116.go:32 
	debugSyncGC  = os.Getenv("SONIC_SYNC_GC") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46ca9d8be631f63c — Environment-variable access.
pkgs/go/[email protected]/internal/encoder/x86/debug_go116.go:33 
	debugAsyncGC = os.Getenv("SONIC_NO_ASYNC_GC") == ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84b2612336316de7 — Environment-variable access.
pkgs/go/[email protected]/internal/envs/decode.go:7 
var UseOptDec = os.Getenv("SONIC_USE_OPTDEC") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b320c86fc00c7ba — Environment-variable access.
pkgs/go/[email protected]/internal/envs/decode.go:8 
var UseFastMap = os.Getenv("SONIC_USE_FASTMAP") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/casbin/casbin/v2

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #a844eb902a96a2f5 — Filesystem access.
pkgs/go/[email protected]/config/config.go:91 
	f, err := os.Open(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3d604a79bbf2808 — Filesystem access.
pkgs/go/[email protected]/persist/file-adapter/adapter.go:89 
	f, err := os.Open(a.filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0982c5ab61406e6 — Filesystem access.
pkgs/go/[email protected]/persist/file-adapter/adapter.go:107 
	f, err := os.Create(a.filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9441a6707b6002e — Filesystem access.
pkgs/go/[email protected]/persist/file-adapter/adapter_filtered.go:81 
	f, err := os.Open(a.filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08a58470a60643ac — Filesystem access.
pkgs/go/[email protected]/persist/file-adapter/adapter_mock.go:54 
	f, err := os.Open(a.filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/confluentinc/confluent-kafka-go

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #a839c5af3acc0016 — Filesystem access.
pkgs/go/[email protected]/kafka/go_rdkafka_generr/go_rdkafka_generr.go:30 
	f, err := os.Create(outfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e61c34541889419 — Filesystem access.
pkgs/go/[email protected]/kafka/testhelpers.go:49 
	cf, err := os.Open("testconf.json")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1933979900ab1f60 — Environment-variable access.
pkgs/go/[email protected]/kafka/testhelpers.go:70 
		testconf.Brokers = os.Getenv(testconf.Brokers[1:])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0301b8ae1083ded — Filesystem access.
pkgs/go/[email protected]/schemaregistry/rest_service.go:171 
		caCert, err := ioutil.ReadFile(caFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86b60d02e1e288c3 — Filesystem access.
pkgs/go/[email protected]/schemaregistry/testhelpers.go:40 
	cf, err := os.Open("../kafka/testconf.json")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/containerd/cgroups/v3

go dependency
expand_more 48 low-confidence finding(s)
low env_fs dependency Excluded from app score #9cff1adcd4be0092 — Filesystem access.
pkgs/go/[email protected]/cgroup1/blkio.go:75 
			if err := os.WriteFile(
				filepath.Join(b.Path(path), "blkio."+t.name),
				t.format(t.value),
				defaultFilePerm,
			); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c21292767156d351 — Filesystem access.
pkgs/go/[email protected]/cgroup1/blkio.go:134 
	f, err := os.Open(filepath.Join(b.procRoot, "partitions"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a1dd857f31da826 — Filesystem access.
pkgs/go/[email protected]/cgroup1/blkio.go:177 
	f, err := os.Open(filepath.Join(b.Path(path), "blkio."+name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b63f9a9b1fdb0d71 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cgroup.go:201 
	f, err := os.OpenFile(path, os.O_CREATE|os.O_WRONLY, perm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a350a1258486c8f3 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpu.go:85 
				if err := os.WriteFile(
					filepath.Join(c.Path(path), "cpu."+t.name),
					value,
					defaultFilePerm,
				); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #deb471f7e5907eb6 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpu.go:103 
	f, err := os.Open(filepath.Join(c.Path(path), "cpu.stat"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df3b07152dee8322 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuacct.go:74 
	data, err := os.ReadFile(filepath.Join(c.Path(path), "cpuacct.usage_percpu"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0cd916a2833ccbb5 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuacct.go:90 
	f, err := os.Open(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ae00cbc37748f40 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuset.go:71 
				if err := os.WriteFile(
					filepath.Join(c.Path(path), "cpuset."+t.name),
					[]byte(t.value),
					defaultFilePerm,
				); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f753c0bf1b108098 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuset.go:89 
	if cpus, err = os.ReadFile(filepath.Join(path, "cpuset.cpus")); err != nil && !os.IsNotExist(err) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f71c779b05818ae6 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuset.go:92 
	if mems, err = os.ReadFile(filepath.Join(path, "cpuset.mems")); err != nil && !os.IsNotExist(err) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf890bad2f36980d — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuset.go:136 
		if err := os.WriteFile(
			filepath.Join(current, "cpuset.cpus"),
			parentCpus,
			defaultFilePerm,
		); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #830fa8b5c1e3e321 — Filesystem access.
pkgs/go/[email protected]/cgroup1/cpuset.go:145 
		if err := os.WriteFile(
			filepath.Join(current, "cpuset.mems"),
			parentMems,
			defaultFilePerm,
		); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7cd97ebc0e9cd612 — Filesystem access.
pkgs/go/[email protected]/cgroup1/devices.go:63 
		if err := os.WriteFile(
			filepath.Join(d.Path(path), file),
			[]byte(deviceString(device)),
			defaultFilePerm,
		); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6122e33dbb338117 — Filesystem access.
pkgs/go/[email protected]/cgroup1/freezer.go:53 
	return os.WriteFile(
		filepath.Join(f.root, path, "freezer.state"),
		[]byte(strings.ToUpper(string(state))),
		defaultFilePerm,
	)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #442c6e900d8d986c — Filesystem access.
pkgs/go/[email protected]/cgroup1/freezer.go:61 
	current, err := os.ReadFile(filepath.Join(f.root, path, "freezer.state"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31b846e0be8e76bc — Filesystem access.
pkgs/go/[email protected]/cgroup1/hugetlb.go:59 
		if err := os.WriteFile(
			filepath.Join(h.Path(path), strings.Join([]string{"hugetlb", limit.Pagesize, "limit_in_bytes"}, ".")),
			[]byte(strconv.FormatUint(limit.Limit, 10)),
			defaultFilePerm,
		); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #806f5aba16b2ba4a — Filesystem access.
pkgs/go/[email protected]/cgroup1/memory.go:235 
	fMemStat, err := os.Open(filepath.Join(m.Path(path), "memory.stat"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc200ba3c6f77b0f — Filesystem access.
pkgs/go/[email protected]/cgroup1/memory.go:250 
	fMemOomControl, err := os.Open(filepath.Join(m.Path(path), "memory.oom_control"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b110d291f1ea90fd — Filesystem access.
pkgs/go/[email protected]/cgroup1/memory.go:397 
			if err := os.WriteFile(
				filepath.Join(m.Path(path), "memory."+t.name),
				[]byte(strconv.FormatInt(*t.value, 10)),
				defaultFilePerm,
			); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bdb9760c134e61be — Filesystem access.
pkgs/go/[email protected]/cgroup1/memory.go:470 
	evtFile, err := os.Open(filepath.Join(root, event.EventFile()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #890ce63bcf3e2254 — Filesystem access.
pkgs/go/[email protected]/cgroup1/memory.go:478 
	if err := os.WriteFile(evctlPath, []byte(data), 0o700); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c1b80a5c5c08996 — Filesystem access.
pkgs/go/[email protected]/cgroup1/net_cls.go:50 
		return os.WriteFile(
			filepath.Join(n.Path(path), "net_cls.classid"),
			[]byte(strconv.FormatUint(uint64(*resources.Network.ClassID), 10)),
			defaultFilePerm,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42f942a06e89ce11 — Filesystem access.
pkgs/go/[email protected]/cgroup1/net_prio.go:51 
			if err := os.WriteFile(
				filepath.Join(n.Path(path), "net_prio.ifpriomap"),
				formatPrio(prio.Name, prio.Priority),
				defaultFilePerm,
			); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c375e4a6380ee09 — Filesystem access.
pkgs/go/[email protected]/cgroup1/pids.go:51 
		return os.WriteFile(
			filepath.Join(p.Path(path), "pids.max"),
			[]byte(strconv.FormatInt(resources.Pids.Limit, 10)),
			defaultFilePerm,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee55704e83da3c2c — Filesystem access.
pkgs/go/[email protected]/cgroup1/rdma.go:70 
			return os.WriteFile(
				filepath.Join(p.Path(path), "rdma.max"),
				[]byte(createCmdString(device, &limit)),
				defaultFilePerm,
			)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05186bfe8b9f27b3 — Filesystem access.
pkgs/go/[email protected]/cgroup1/rdma.go:127 
	currentData, err := os.ReadFile(filepath.Join(p.Path(path), "rdma.current"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1e7ec5093295807 — Filesystem access.
pkgs/go/[email protected]/cgroup1/rdma.go:133 
	maxData, err := os.ReadFile(filepath.Join(p.Path(path), "rdma.max"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e78c73b1b095f74 — Filesystem access.
pkgs/go/[email protected]/cgroup1/utils.go:85 
	f, err := os.Open(filepath.Join(path, pType))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32fecdc8d1b16f27 — Filesystem access.
pkgs/go/[email protected]/cgroup1/utils.go:135 
	f, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27d914a59687a5cf — Filesystem access.
pkgs/go/[email protected]/cgroup1/utils.go:212 
	f, err := os.Open("/proc/self/mountinfo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #898fcb8515b8fdab — Filesystem access.
pkgs/go/[email protected]/cgroup1/v1.go:50 
	f, err := os.Open("/proc/self/mountinfo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a460527299dddca — Filesystem access.
pkgs/go/[email protected]/cgroup2/manager.go:148 
	return os.WriteFile(
		filepath.Join(path, c.filename),
		data,
		perm,
	)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e7d06ab901dfba2 — Filesystem access.
pkgs/go/[email protected]/cgroup2/manager.go:250 
	val, err := os.ReadFile(filepath.Join(c.path, typeFile))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #968ac93700e52129 — Filesystem access.
pkgs/go/[email protected]/cgroup2/manager.go:271 
	b, err := os.ReadFile(filepath.Join(c.unifiedMountpoint, controllersFile))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71dafd47123afffe — Filesystem access.
pkgs/go/[email protected]/cgroup2/manager.go:279 
	b, err := os.ReadFile(filepath.Join(c.path, controllersFile))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f818d55e7b068a63 — Filesystem access.
pkgs/go/[email protected]/cgroup2/manager.go:332 
	f, err := os.OpenFile(filePath, os.O_WRONLY, 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a5bbcc56570b8cb — Filesystem access.
pkgs/go/[email protected]/cgroup2/manager.go:636 
	f, err := os.Open(filepath.Join(path, file))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cdfc91dcb4c80307 — Filesystem access.
pkgs/go/[email protected]/cgroup2/state.go:53 
	current, err := os.ReadFile(filepath.Join(path, cgroupFreeze))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7893e909f4e843e — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:74 
	f, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2baa819304a33c5e — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:127 
	f, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d1ddfe2ee807782 — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:246 
	f, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5239776ea57389e1 — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:278 
	currentData, err := os.ReadFile(fpath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #134d9a4df47ae2bc — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:332 
	currentData, err := os.ReadFile(filepath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c82f64d07d7efcd — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:423 
		dir, err := os.OpenFile("/sys/kernel/mm/hugepages", unix.O_DIRECTORY|unix.O_RDONLY, 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19ae6fae406596b7 — Filesystem access.
pkgs/go/[email protected]/cgroup2/utils.go:488 
	f, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61b8dfb7836ed77e — Filesystem access.
pkgs/go/[email protected]/utils.go:82 
		file, err := os.Open("/proc/self/uid_map")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2bfc61812f9635ce — Filesystem access.
pkgs/go/[email protected]/utils.go:114 
	f, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/dave/jennifer

go dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #e4a35a2cd3071ca3 — Filesystem access.
pkgs/go/[email protected]/genjen/main.go:14 
	if err := os.WriteFile("./jen/generated.go", buf.Bytes(), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f717a586d2f3c57 — Filesystem access.
pkgs/go/[email protected]/gennames/main.go:26 
	if err := os.WriteFile(*out, buf.Bytes(), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b1fc63e5772f895 — Filesystem access.
pkgs/go/[email protected]/jen/jen.go:27 
	if err := os.WriteFile(filename, buf.Bytes(), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/gin-gonic/gin

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #a3867ca8b06ff8c4 — Filesystem access.
pkgs/go/[email protected]/context.go:718 
	out, err := os.Create(dst)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa4b0d92492ca2ca — Environment-variable access.
pkgs/go/[email protected]/logger.go:227 
	if w, ok := out.(*os.File); !ok || os.Getenv("TERM") == "dumb" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46df9ad1a99b1d59 — Environment-variable access.
pkgs/go/[email protected]/mode.go:53 
	mode := os.Getenv(EnvGinMode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71050c45f3cc359a — Filesystem access.
pkgs/go/[email protected]/recovery.go:130 
			data, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fa3f780e3bb87c6 — Environment-variable access.
pkgs/go/[email protected]/utils.go:143 
		if port := os.Getenv("PORT"); port != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/go-playground/validator/v10

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #fab960ecdd2f94ac — Filesystem access.
pkgs/go/[email protected]/baked_in.go:1592 
		file, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/gofrs/flock

go dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #e812060ae5164d17 — Filesystem access.
pkgs/go/[email protected]/flock.go:128 
	fh, err := os.OpenFile(f.path, flags, os.FileMode(0600))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a83ce5a8a02e2e7f — Filesystem access.
pkgs/go/[email protected]/flock_unix.go:187 
			fh, err := os.OpenFile(f.path, os.O_CREATE|os.O_RDWR, os.FileMode(0600))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/hamba/avro/v2

go dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #32f9ee7a5fe35694 — Filesystem access.
pkgs/go/[email protected]/cmd/avrogen/main.go:142 
		file, err := os.Create(filepath.Clean(filename))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da24a74ecc4ea30f — Filesystem access.
pkgs/go/[email protected]/cmd/avrogen/main.go:224 
	return os.ReadFile(filepath.Clean(templateFileName))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #535a9245947ceecb — Filesystem access.
pkgs/go/[email protected]/protocol.go:206 
	s, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f779d8793a07271f — Filesystem access.
pkgs/go/[email protected]/schema_parse.go:51 
		s, err := os.ReadFile(filepath.Clean(path))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/magiconair/properties

go dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #3d20b81b880d6a3c — Filesystem access.
pkgs/go/[email protected]/load.go:94 
	data, err := ioutil.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #883acd8e1a5bceea — Environment-variable access.
pkgs/go/[email protected]/properties.go:776 
			val = os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/minio/minio-go/v7

go dependency
expand_more 376 low-confidence finding(s)
low env_fs dependency Excluded from app score #bdb6c51210e6e81e — Filesystem access.
pkgs/go/[email protected]/api-get-object-file.go:75 
	filePart, err := os.OpenFile(filePartPath, os.O_CREATE|os.O_APPEND|os.O_WRONLY, 0o600)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8b89f9650b1196d — Filesystem access.
pkgs/go/[email protected]/api-put-object-file-context.go:40 
	fileReader, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1f91f9e4a99ce1d — Filesystem access.
pkgs/go/[email protected]/api-putobject-snowball.go:138 
			f, err := os.Open(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e15bb538fd3a6a0f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:80 
	transport, err = minio.DefaultTransport(mustParseBool(os.Getenv(enableHTTPS)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72c0ad9671aefc95 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:86 
	if mustParseBool(os.Getenv(skipCERTValidation)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d89f6ebd21cf2a53 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:266 
	return os.Getenv("RUN_ON_FAIL") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6485e1a0c052153b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:272 
	if os.Getenv(serverEndpoint) == "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a700f01278a3310d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:280 
var mintDataDir = os.Getenv("MINT_DATA_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a322684ca1550bd2 — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:338 
	reader, _ := os.Open(getMintDataDirFilePath(fileName))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #170edd5ecf183232 — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:342 
		reader, _ = os.Open(getMintDataDirFilePath(fileName))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #923285aa5beaaa04 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:384 
	return os.Getenv("MINT_MODE") == "full"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d636452b87e946a0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:414 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #559f356f0cb5230b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:416 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f6d741ddb7e6628 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:417 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77e2cf93835c925a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:468 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fb7c03ec7125858 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:470 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32c45874ab446650 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:471 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5a76c903134e6be — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:538 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4115d9c07c0ec13f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:540 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #889940604a791aed — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:542 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #face753a7e9068b1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:605 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #131ac9f3c5128c3f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:607 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a2816aded6eb5ca — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:609 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e672021995e366ef — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:704 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b974afbc76e91125 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:706 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bddf10854586b6d2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:708 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d467452b6d0d1c1b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:824 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1028627a21ef4fd3 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:826 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51b15c399ef7c9c5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:828 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b32346154e242803 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:942 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8dc4a472035f4dbc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:944 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bec8f261bfda85b7 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:946 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29f7936858abc17d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1082 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01cad234d8caa2b3 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1084 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f1b6b0c96ccf636 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1086 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee4ba870f3472186 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1228 
		Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24569c8a4262ed73 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1230 
		Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61402f8241b50ba9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1232 
	c, err := minio.New(os.Getenv(serverEndpoint), opts)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4178dc6f97e8fde — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1237 
	core, err := minio.NewCore(os.Getenv(serverEndpoint), opts)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bf2648071dfe39d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1354 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad0922f17c08303f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1356 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9072d7bcc83d2cfc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1358 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9ec5e24f2935009 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1492 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3c419b3e4fdc0fd — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1494 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5c58f08e03c89ce — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1496 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae7902c526033b0b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1653 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7a4defe44bb106b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1655 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #662e16df0910e618 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1657 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac62461e4fbac77e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1794 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1215f93b50721b67 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1796 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c28f9277a3a91b2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1798 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0aed41f468e9c31 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1907 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5a6f35107f31207 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1909 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76a4a57530be9790 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:1911 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #997dcc73e6320003 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2003 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4dbb7fe5d2c3829 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2005 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5eb500f4eaf727f5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2007 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0a787c186081797 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2171 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fac6efb935865b6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2173 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b235a99395d5942 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2175 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d4cb4fa7ad6cb91 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2366 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7059a0cc006d3ec6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2368 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a47a89b3efda3f3 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2370 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #209d81bcafaa1273 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2536 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #676a9cab0d92e3d8 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2538 
			Creds:           credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c2db5565ac4945d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2540 
			Secure:          mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e09ec16a7ad04efc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2750 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc4b19bd3a3e9f24 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2752 
			Creds:           credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #698093ab5143afe8 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2754 
			Secure:          mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70e7bb49ce51c2d7 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2856 
		if mustParseBool(os.Getenv(enableHTTPS)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f333900dedbbf8c0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2902 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #720f5311bb689629 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2905 
			Creds:           credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6667b58e8f237884 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:2907 
			Secure:          mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d66ba2f3b59c61f5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3109 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76e884bfdd88b26c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3112 
			Creds:           credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7322c1831234779c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3113 
			Secure:          mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed05eb03cc9ca2c7 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3194 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32af36d03fda12bd — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3197 
			Creds:           credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c32bdebdc0069e42 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3199 
			Secure:          mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee31ca5d43d9f865 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3460 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ceb7b2ed0b3ba28 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3462 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cdbcd26e9b0ee2b0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3464 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #382f66ab75f5ab2b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3567 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b903db8c3e5cc551 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3569 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89bd57eb3684c10c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3571 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea2024a6f50394f6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3637 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd66c9ced23f201e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3639 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ca64bd7920c3ad0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3641 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83e42531f7608be5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3709 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #489773df5e154ab6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3711 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d2610d0860e424e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3713 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24e7afef97118d53 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3832 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #519b9bb1374ba35b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3834 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90b077dd683e8786 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3836 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76caacb690bb5207 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3923 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a02dba407491138 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3925 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8448b2e16df3589 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:3927 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0b6f3d7efb363ec — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4020 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c38fd6c338dd29e0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4022 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0c90694c027b1a8 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4024 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09e5f281aef2674a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4104 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #046982ac37f5c853 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4106 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f3de77aab55b7b3 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4108 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef4db8259213b66d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4240 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #545fc71e290073ad — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4242 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e111887098ed680f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4244 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22377582b88f03a3 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4346 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #deb34f18184c613e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4348 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b17324e66c2bb04 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4350 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bdfe1661e4a3f5c6 — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:4431 
	srcFile, err := os.Open(fName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9881d8de8063e02a — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:4438 
	tmpFile, err := os.Create(fName + ".gtar")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17310481321cd805 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4516 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2c6d82c8a120e1d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4518 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce9f06e862b47ab6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4520 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba322b77fdfcce41 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4617 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #482f3a058f5f3922 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4619 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cfc62009f9d748e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4621 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68c68e6a50061f40 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4719 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #746142aaa74daf63 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4721 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbc7b0485be2b2ce — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4723 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41fbba16f0bf13d6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4792 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd694c59fb44c3f1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4794 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2b26758efacb999 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4796 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53cc839f1f800886 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4976 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #761a6b38cfec8e82 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4978 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b57a5edfd73b76ac — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:4980 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b51796d317c56a75 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5146 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #549af633d929ee45 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5148 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1209ffddeb161e8e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5150 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efa1772a8f47e55c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5324 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #653b523a722720a9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5326 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df6465ea2cb1d1be — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5328 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29a1304e05052bbe — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5444 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e619a8be9db581fc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5446 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #454bba94fec9059a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5448 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25a85cc5bd4eacd3 — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:5568 
	f, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7a8eb64245d6efc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5587 
	transport, err := minio.DefaultTransport(mustParseBool(os.Getenv(enableHTTPS)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93e7f9f77ba823d6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5624 
	if mustParseBool(os.Getenv(enableHTTPS)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d41bd2c2bbb1e631 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5630 
	expectedLocation := scheme + os.Getenv(serverEndpoint) + "/" + bucketName + "/" + objectName

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14c2a1f8eeb6cb18 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5631 
	expectedLocationBucketDNS := scheme + bucketName + "." + os.Getenv(serverEndpoint) + "/" + objectName

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c5d024f22ceeab9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5666 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bddcf62b5cb1844d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5668 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0dfda00d8e69a472 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5670 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d83acbc67e864818 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5861 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e74d722b13796c6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5863 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74615bfe7da9cd89 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:5865 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c7d32bfbecc76c7 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6044 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30cc6c4af1a777d1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6046 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbc8135874256462 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6048 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9474b9ff6fcf5bd1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6225 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02cb0bdff0267fab — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6227 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20d34f02b01a1f3b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6229 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b3486e5622e755f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6409 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d381413fb58c09d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6411 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #376ce130afc6c4a7 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6413 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #548d5856d95abdeb — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6594 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad84585fe0b34ca1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6596 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3884087b932f11a3 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6598 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1f6f174f37cd031 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6704 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #074835016db880f9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6706 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #722935e535c86068 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6708 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f783e898ebb5496 — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:6766 
		file, err := os.Create(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #461eb557bb2e2878 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6827 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88980d6599d3353a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6829 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e28add2cfa17e64d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6831 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #216dcf883cfa1798 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6935 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd9619e6d4d0a3f6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6937 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad84c3ccaa60a1fa — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:6939 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7161debf7f854bd — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:6996 
		file, err := os.Create(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d4d81db8b8b293a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7051 
	if os.Getenv("NOTIFY_BUCKET") == "" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a0fc245a8e65e7b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7052 
		os.Getenv("NOTIFY_SERVICE") == "" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #906bafda5c9284d7 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7053 
		os.Getenv("NOTIFY_REGION") == "" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53dd438f3c839dea — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7054 
		os.Getenv("NOTIFY_ACCOUNTID") == "" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1efc10f19e7af37a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7055 
		os.Getenv("NOTIFY_RESOURCE") == "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0939c4ff1ed14fb1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7063 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1dec6ab332d9047 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7065 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #221d53da4db2b393 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7067 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7620183d7cb45883 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7080 
	bucketName := os.Getenv("NOTIFY_BUCKET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4cf51268924d0c65 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7083 
	topicArn := notification.NewArn("aws", os.Getenv("NOTIFY_SERVICE"), os.Getenv("NOTIFY_REGION"), os.Getenv("NOTIFY_ACCOUNTID"), os.Getenv("NOTIFY_RESOURCE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da00cec8b069bc08 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7158 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #750a136c1012d7d4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7160 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa0fe6f7bc325caf — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7162 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c21eb94f141cfbf — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:7192 
	file, err := os.Create(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e5d0f3c58b4a3ee — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7516 
	transport, err := minio.DefaultTransport(mustParseBool(os.Getenv(enableHTTPS)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7a25faece3b0a39 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7846 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22fcd3412103d8b8 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7848 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60ffd192d8c2cb33 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7850 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3b4ea0d79d4bb00 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7942 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64113c5f4c579f4e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7944 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45180cf6ce1c0751 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:7946 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c538c18fcb3d8e1 — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:7973 
		tempfile, err = os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02ef4e5da557747b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8065 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6cc272fe121e9dd1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8067 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f49d38b79ffce0b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8069 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3c5eab9c3f976e4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8125 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70ff6a0bf9cf60e6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8127 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7aad05d8990c72dc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8129 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7803fba38e5acc9e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8216 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99428c293bb1fdef — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8218 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #feb1ca4042db7403 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8220 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ece1b194e333f70d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8377 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #424e4b10968874e6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8379 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45b829c7957beb56 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8381 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8722883b9e816e89 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8440 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d08dfff22fc3560 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8442 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c85da0d4e7d00d3 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8444 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9762dcf88ee8bd83 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8595 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8089456dbbdfbf0f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8597 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47534d6703f81754 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8599 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f798158522029493 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8757 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ba8e3da8a839b5a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8759 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ca43e2d086b0ed1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8761 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91f7bbc696f1332a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8973 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b0f66e10f0a2c6f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8975 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96504914b2f74831 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:8977 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6574bfbd1777e0ec — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9071 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28a614fed51a40ee — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9073 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42840c02fbb1bbe5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9075 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17ef464e83c154f2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9093 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e357c9cf6de81957 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9095 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10e77675934956b9 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9097 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60899c5c45c3e7ab — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9354 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dab6da3dce3433b3 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9356 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9628773ce6600a8e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9358 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #908d394d19a43222 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9381 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #028a714a4294b9a6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9383 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab64f6373d714186 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9385 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ec195ef21d7d49a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9409 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c5611e819bcdd54 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9411 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06a106c2691ad346 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9413 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ac884012f52a4ee — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9436 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae7d98275bf3a617 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9438 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec64a97e4a7424fb — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9440 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f194f7802647db7b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9464 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebd97c828bfa8523 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9466 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32532f14cdedd83b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9468 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6959cfb538b247e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9492 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b8a53613f96a95c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9494 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8192f64f7977d8e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9496 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #433f3f9d4cd957c4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9520 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1760add993b89ee4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9522 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab64a74e2e94238d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9524 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9ede2652f0387ab — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9548 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0963a992b93ef314 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9550 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5a876690c0005a0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9552 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf660579d5eca591 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9576 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03a54ee5629df7c8 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9578 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6713a7bc569d7a27 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9580 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb56ec88f0cb6c54 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9604 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #888ee92b576c8870 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9606 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a83769672996318 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9608 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1ac6dd67fb10a65 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9631 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82a266fb272c3c6a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9633 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e08f9302b8b8fcd — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9635 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb625dd513aa2298 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9691 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29d3ac152a6d37d0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9693 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #662bdd50d0a9436a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9695 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c132b617a4e9ccba — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9889 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f046146a1440c1a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9891 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1dfba6072f812575 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:9893 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3791b8760cb3c2e4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10067 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51400a7d23975da3 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10069 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71e879f655272402 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10071 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc3dc63b0ac92226 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10244 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3463163316e5148 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10246 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67f9f46316986509 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10248 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb823830798b97ea — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10424 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #486d966da4266d04 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10426 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b0da3347a4dcd1d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10428 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29bbd744f817e03b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10599 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8a780ee011ac4c3 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10601 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d2e9cc98808e0fe — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10603 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69fc051a066850ac — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10770 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2b97cf2001e9be4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10772 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba12891f2a28d8dc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10774 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #126f293d897d8789 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10943 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88e417bab2e55583 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10945 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e3de89059330a1b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:10947 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #823ed6e2491173a0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11119 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a50f1ec6691ea51 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11121 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f47501b51281888 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11123 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7adc48a6c0591750 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11291 
	client, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27208131a5bf9353 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11293 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e30e4c1e1824e723 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11295 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c946954cd95559a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11465 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba8a7a191bfe0c06 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11467 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2e94d86f8cbaa6d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11469 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d11a3cb396538a8b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11642 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a88bd9e126532055 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11644 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd81f8e905f2696d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11646 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #626f519deb7aa436 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11665 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54a73f01dadffbf2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11667 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8cacb16af2f865a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11669 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a246be2e6b632364 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11753 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #063bd78d2b0fd443 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11755 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2e03935a5046dff — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11757 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81831937ed378156 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11796 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a5dcb51d105e913 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11798 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #730922ca2f98fca1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11799 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #684ce9cf34da6c40 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11926 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be27c38845d0c6e5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11928 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7ba66b44fbb7afe — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:11930 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c54211783a6f34e2 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12002 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42a1e462cf380f89 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12004 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #363b2b6a1bda4ed8 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12006 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #936efb17c4317eed — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12093 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3ab689ec4e5d23c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12095 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81ccc3a753dce6f4 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12097 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50467684d9952082 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12155 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #227abb7a84e6cc0c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12157 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9de3593db17b3a34 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12159 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05f216b71e2541ee — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12178 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78071e6d4cb2d55e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12180 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #035741332b7549e7 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12182 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11da60f8c14d97db — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12204 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b06335989ab1f942 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12206 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42d898e1c7cd1cad — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12207 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0ac0da7da7eb9f6 — Filesystem access.
pkgs/go/[email protected]/functional_tests.go:12241 
	file, err := os.Create(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2e2ded110b99bf1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12455 
	transport, err := minio.DefaultTransport(mustParseBool(os.Getenv(enableHTTPS)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #810c9d1fe59e6127 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12665 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e332c8c9c4ac45b1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12667 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63187f86e61a0373 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12669 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c3bcd7ed4ca7657 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12768 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c31150c377e71b55 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12770 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58baa9ef6b9c062e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12772 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15faedea8fccf49b — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12857 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #549420319b11a3ca — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12859 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87c2d9684aff437f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12861 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c11dab9e948f068e — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12967 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01d4f150b86b16e5 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12969 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb5a86069d3c8c4d — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:12971 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd0a92b1eece95a6 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13044 
	if os.Getenv(serverEndpoint) != "s3.amazonaws.com" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2a7bbb25e46de11 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13143 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ea0ce950fa12db0 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13145 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a05a8a7960e35d1 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13147 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #092ccb115fc61378 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13218 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b948ca335f827e9f — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13220 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e61a851e9785717c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13222 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #987d8bc0b479e690 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13319 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a64602d3d151e046 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13321 
			Creds:     credentials.NewStaticV2(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca7887769537059c — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13323 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a3cb2eeac45e7fc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13408 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8796d01d5c90a835 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13410 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac0bf5dd35424dbe — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13412 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9da5f453e2783fc — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13509 
	c, err := minio.New(os.Getenv(serverEndpoint),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6562ac51c6b7d23 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13511 
			Creds:     credentials.NewStaticV4(os.Getenv(accessKey), os.Getenv(secretKey), ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #871409ed553cc267 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13513 
			Secure:    mustParseBool(os.Getenv(enableHTTPS)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2bffecbef001840a — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13654 
	tls := mustParseBool(os.Getenv(enableHTTPS))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de7e67c95579e189 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13655 
	kms := mustParseBool(os.Getenv(enableKMS))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #872c2b8b70243482 — Environment-variable access.
pkgs/go/[email protected]/functional_tests.go:13656 
	if os.Getenv(enableKMS) == "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d1c226a7b85fa6b — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_aws.go:44 
	id := os.Getenv("AWS_ACCESS_KEY_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c286bc36eb80a9f — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_aws.go:46 
		id = os.Getenv("AWS_ACCESS_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85ea2cc00c48b442 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_aws.go:49 
	secret := os.Getenv("AWS_SECRET_ACCESS_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23af7260043ddcfa — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_aws.go:51 
		secret = os.Getenv("AWS_SECRET_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #423346f8aea0d896 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_aws.go:63 
		SessionToken:    os.Getenv("AWS_SESSION_TOKEN"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c0ed981d5b6a59f — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_minio.go:45 
	id := os.Getenv("MINIO_ROOT_USER")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b61105ada322baff — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_minio.go:46 
	secret := os.Getenv("MINIO_ROOT_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ec5e47126ef9a5b — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_minio.go:50 
		id = os.Getenv("MINIO_ACCESS_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3e49e7eb9c7e957 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/env_minio.go:51 
		secret = os.Getenv("MINIO_SECRET_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #911158d65b210e83 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/file_aws_credentials.go:78 
		p.Filename = os.Getenv("AWS_SHARED_CREDENTIALS_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d02b9eb89c93711f — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/file_aws_credentials.go:88 
		p.Profile = os.Getenv("AWS_PROFILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecbca26e761dadba — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/file_minio_client.go:63 
		if value, ok := os.LookupEnv("MINIO_SHARED_CREDENTIALS_FILE"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa125b94a9565846 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/file_minio_client.go:78 
		p.Alias = os.Getenv("MINIO_ALIAS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b53a315f34f66c3 — Filesystem access.
pkgs/go/[email protected]/pkg/credentials/file_minio_client.go:124 
	configBytes, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8de0d1576463773f — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:104 
	token := os.Getenv("AWS_CONTAINER_AUTHORIZATION_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3c3c3ebb9dfabb7 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:109 
	tokenFile := os.Getenv("AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6118ccd976100ce — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:114 
	relativeURI := os.Getenv("AWS_CONTAINER_CREDENTIALS_RELATIVE_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ae1486fbd9d4bcf — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:119 
	fullURI := os.Getenv("AWS_CONTAINER_CREDENTIALS_FULL_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bcea71da637f61ee — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:124 
	identityFile := os.Getenv("AWS_WEB_IDENTITY_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2839f9949ca7bbf6 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:129 
	roleArn := os.Getenv("AWS_ROLE_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13e849094e367c96 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:134 
	roleSessionName := os.Getenv("AWS_ROLE_SESSION_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32766b51767bb0c9 — Environment-variable access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:139 
	region := os.Getenv("AWS_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80eb9bafc87d086c — Filesystem access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:166 
				token, err := os.ReadFile(identityFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b14c4941591bfee — Filesystem access.
pkgs/go/[email protected]/pkg/credentials/iam_aws.go:320 
		bytes, err := os.ReadFile(tokenFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58e32a3b982a8cee — Environment-variable access.
pkgs/go/[email protected]/transport.go:73 
		if f := os.Getenv("SSL_CERT_FILE"); f != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbbe8cd503196b89 — Filesystem access.
pkgs/go/[email protected]/transport.go:75 
			data, err := os.ReadFile(f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/peterstace/simplefeatures

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #fcce877ee95b020a — Filesystem access.
pkgs/go/[email protected]/internal/benchmarkreport/main.go:17 
	buf, err := os.ReadFile(os.Args[1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/prometheus/client_golang

go dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #8a099a56f75e2d93 — Filesystem access.
pkgs/go/[email protected]/prometheus/collectors/gen_go_collector_set.go:105 
	if err := os.WriteFile(fname, result, 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8582302302b00c15 — Filesystem access.
pkgs/go/[email protected]/prometheus/gen_go_collector_metrics_set.go:102 
	if err := os.WriteFile(fname, result, 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88a24ea2f5a72e65 — Filesystem access.
pkgs/go/[email protected]/prometheus/process_collector.go:166 
		content, err := os.ReadFile(pidFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/prometheus/common

go dependency
expand_more 7 low-confidence finding(s)
low env_fs dependency Excluded from app score #200cd3a8e7925ba2 — Filesystem access.
pkgs/go/[email protected]/config/generate.go:172 
	if err := os.WriteFile(fmt.Sprintf("%s.crt", path), b.Bytes(), 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #098b8369f83efed6 — Filesystem access.
pkgs/go/[email protected]/config/generate.go:181 
	if err := os.WriteFile(fmt.Sprintf("%s.key", path), b.Bytes(), 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bea5f30dccd92bdb — Filesystem access.
pkgs/go/[email protected]/config/generate.go:241 
	if err := os.WriteFile("testdata/tls-ca-chain.pem", b.Bytes(), 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4481a6140158b801 — Filesystem access.
pkgs/go/[email protected]/config/headers.go:87 
			_, err := os.ReadFile(f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa7f2e6770db2fac — Filesystem access.
pkgs/go/[email protected]/config/headers.go:125 
			b, err := os.ReadFile(f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc987694e4ccb0a7 — Filesystem access.
pkgs/go/[email protected]/config/http_config.go:286 
	content, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93d6be9b6de96473 — Filesystem access.
pkgs/go/[email protected]/config/http_config.go:730 
	fileBytes, err := os.ReadFile(s.file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/sbinet/npyio

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #decc0095b75888ba — Filesystem access.
pkgs/go/[email protected]/ci/run-tests.go:45 
	f, err := os.Create("coverage.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86950560e1c6e99e — Filesystem access.
pkgs/go/[email protected]/ci/run-tests.go:81 
			profile, err := ioutil.ReadFile("profile.out")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f296fa021254332 — Filesystem access.
pkgs/go/[email protected]/cmd/npyio-ls/main.go:33 
		f, err := os.Open(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cedf54fdf8cb2f39 — Filesystem access.
pkgs/go/[email protected]/npz/reader.go:47 
	r, err := os.Open(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42b62708c2b14262 — Filesystem access.
pkgs/go/[email protected]/npz/writer.go:57 
	w, err := os.Create(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/shirou/gopsutil/v4

go dependency
expand_more 59 low-confidence finding(s)
low env_fs dependency Excluded from app score #4506c20961978349 — Environment-variable access.
pkgs/go/[email protected]/cpu/cpu_plan9.go:22 
	root := os.Getenv("HOST_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9822167acd05a9f — Filesystem access.
pkgs/go/[email protected]/disk/disk_linux.go:512 
	if f, err := os.Open(udevDataPath); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0b4cbcfffc6999b — Filesystem access.
pkgs/go/[email protected]/disk/disk_linux.go:544 
	model, _ := os.ReadFile(filepath.Join(devicePath, "model"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f778d89f7b834d5 — Filesystem access.
pkgs/go/[email protected]/disk/disk_linux.go:545 
	serial, _ := os.ReadFile(filepath.Join(devicePath, "serial"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6461733c41cac441 — Filesystem access.
pkgs/go/[email protected]/disk/disk_linux.go:557 
		dmname, err := os.ReadFile(dmnameFilename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0fcb42bbd214cd5 — Filesystem access.
pkgs/go/[email protected]/disk/disk_solaris.go:51 
	f, err := os.Open(_MNTTAB)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60ff222d2207cb88 — Filesystem access.
pkgs/go/[email protected]/host/host_darwin.go:56 
	file, err := os.Open(utmpfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c922f2e80c44ca68 — Filesystem access.
pkgs/go/[email protected]/host/host_freebsd.go:52 
	file, err := os.Open(utmpfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f97045cbdb2bd521 — Filesystem access.
pkgs/go/[email protected]/host/host_freebsd.go:109 
	file, err := os.Open(utmpfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fa5b34a95a26d96 — Filesystem access.
pkgs/go/[email protected]/host/host_linux.go:84 
	file, err := os.Open(utmpfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10ed753587246cd7 — Filesystem access.
pkgs/go/[email protected]/host/host_openbsd.go:63 
	file, err := os.Open(utmpfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b50eb9f0ecb14e1 — Filesystem access.
pkgs/go/[email protected]/host/host_solaris.go:104 
	b, err := os.ReadFile("/etc/release")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5047554185e6fc7f — Filesystem access.
pkgs/go/[email protected]/internal/common/common.go:93 
		return os.ReadFile(fpath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d05ec1bd9c776e0 — Filesystem access.
pkgs/go/[email protected]/internal/common/common.go:104 
	content, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16db783af45acbbc — Filesystem access.
pkgs/go/[email protected]/internal/common/common.go:120 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d29ff1e792f0e1b — Filesystem access.
pkgs/go/[email protected]/internal/common/common.go:148 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecdbf4cf1a25240c — Filesystem access.
pkgs/go/[email protected]/internal/common/common.go:233 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c74118c59598d31e — Environment-variable access.
pkgs/go/[email protected]/internal/common/common.go:351 
		value = os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ebb596c13103848 — Environment-variable access.
pkgs/go/[email protected]/internal/common/common.go:362 
	value := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7f9010e49107b7f — Filesystem access.
pkgs/go/[email protected]/internal/common/common_linux.go:27 
	f, err := os.Open(HostProcWithContext(ctx))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed61d7c9dbea0dd5 — Filesystem access.
pkgs/go/[email protected]/load/load_linux.go:79 
	out, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b408b93e6facd08 — Filesystem access.
pkgs/go/[email protected]/load/load_linux.go:121 
	line, err := os.ReadFile(loadavgFilename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2c3d950e425fbb8 — Filesystem access.
pkgs/go/[email protected]/mem/mem_linux.go:464 
	f, err := os.Open(swapsFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #952bfd31c8fc9e26 — Environment-variable access.
pkgs/go/[email protected]/mem/mem_plan9.go:20 
	root := os.Getenv("HOST_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e03614350e259b2 — Environment-variable access.
pkgs/go/[email protected]/mem/mem_plan9.go:42 
	root := os.Getenv("HOST_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c231abd9d225ee57 — Filesystem access.
pkgs/go/[email protected]/net/net_linux.go:475 
	f, err := os.Open(dir)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b25d989f447cbe2a — Filesystem access.
pkgs/go/[email protected]/net/net_linux.go:518 
	d, err := os.Open(common.HostProcWithContext(ctx))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1153a2aaef213d04 — Filesystem access.
pkgs/go/[email protected]/net/net_linux.go:562 
	contents, err := os.ReadFile(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c0c02bde71757e8 — Filesystem access.
pkgs/go/[email protected]/net/net_linux.go:681 
	contents, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b164cc11b09abba7 — Filesystem access.
pkgs/go/[email protected]/net/net_linux.go:742 
	contents, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #542144a8a7a19b1f — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:139 
	contents, err := os.ReadFile(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0035e963188940b2 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:348 
		statContents, err := os.ReadFile(statFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6304f6ae0d8fba2f — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:399 
	contents, err := os.ReadFile(smapsPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32028cf6c484448e — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:494 
	environContent, err := os.ReadFile(environPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c28aded2ec894b9 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:521 
	d, err := os.Open(limitsFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6b89d8c91845567 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:614 
	d, err := os.Open(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cb649544a4a5ec3 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:678 
	cmdline, err := os.ReadFile(cmdPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f9f6b5b3b0e3113 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:692 
	cmdline, err := os.ReadFile(cmdPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6768f5a835f344b — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:715 
	ioline, err := os.ReadFile(ioPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bfbe72faa5ed54e1 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:755 
	contents, err := os.ReadFile(memPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e1e12df990b5963 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:816 
	contents, err := os.ReadFile(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f348f2861a366a16 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:833 
	contents, err := os.ReadFile(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7df0e94cae2a0f42 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:1040 
	contents, err := os.ReadFile(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #251dfde563b7e4a0 — Filesystem access.
pkgs/go/[email protected]/process/process_linux.go:1165 
	d, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e08232a7504d2eb9 — Filesystem access.
pkgs/go/[email protected]/process/process_posix.go:29 
	d, err := os.Open("/dev")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81ee1f8aecca5775 — Filesystem access.
pkgs/go/[email protected]/process/process_posix.go:46 
	ptsd, err := os.Open("/dev/pts")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e72c3ba7cd37bf3 — Filesystem access.
pkgs/go/[email protected]/process/process_solaris.go:203 
	d, err := os.Open(statPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1e08c7177464b55 — Filesystem access.
pkgs/go/[email protected]/process/process_solaris.go:235 
	exe, err := os.ReadFile(execNamePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #317a3fe32eee46e0 — Filesystem access.
pkgs/go/[email protected]/process/process_solaris.go:245 
	cmdline, err := os.ReadFile(cmdPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73806442ae53a848 — Filesystem access.
pkgs/go/[email protected]/process/process_solaris.go:259 
	cmdline, err := os.ReadFile(cmdPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02ce19c216dcbab7 — Filesystem access.
pkgs/go/[email protected]/process/process_solaris.go:281 
	d, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70806f4959c390f1 — Filesystem access.
pkgs/go/[email protected]/sensors/ex_linux.go:52 
		if raw, _ = os.ReadFile(basepath + "_label"); len(raw) != 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5ad2eb30ea95144 — Filesystem access.
pkgs/go/[email protected]/sensors/ex_linux.go:58 
		if raw, err = os.ReadFile(filepath.Join(directory, "name")); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91c48801421f8825 — Filesystem access.
pkgs/go/[email protected]/sensors/sensors_linux.go:39 
			name, err := os.ReadFile(filepath.Join(file, "type"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d43b85f56c76f3c8 — Filesystem access.
pkgs/go/[email protected]/sensors/sensors_linux.go:45 
			current, err := os.ReadFile(filepath.Join(file, "temp"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4706cbd1fe671065 — Filesystem access.
pkgs/go/[email protected]/sensors/sensors_linux.go:89 
		if raw, _ = os.ReadFile(basepath + "_label"); len(raw) != 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb25a9a5f0c29058 — Filesystem access.
pkgs/go/[email protected]/sensors/sensors_linux.go:95 
		if raw, err = os.ReadFile(filepath.Join(directory, "name")); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a3be7c27ba9887e — Filesystem access.
pkgs/go/[email protected]/sensors/sensors_linux.go:107 
		if raw, err = os.ReadFile(file); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ad7eceea93ae437 — Filesystem access.
pkgs/go/[email protected]/sensors/sensors_linux.go:163 
	if raw, err = os.ReadFile(filename); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/sirupsen/logrus

go dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #31c57825b394a03c — Environment-variable access.
pkgs/go/[email protected]/text_formatter.go:121 
		switch force, ok := os.LookupEnv("CLICOLOR_FORCE"); {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33ce83ef5bb1f77e — Environment-variable access.
pkgs/go/[email protected]/text_formatter.go:124 
		case ok && force == "0", os.Getenv("CLICOLOR") == "0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common

go dependency
expand_more 11 low-confidence finding(s)
low env_fs dependency Excluded from app score #b757d7371cdad810 — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/env_provider.go:31 
	secretId, ok1 := os.LookupEnv(p.secretIdENV)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #776c331bef1c147d — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/env_provider.go:32 
	secretKey, ok2 := os.LookupEnv(p.secretKeyENV)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0074c18e9f572aaa — Filesystem access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/ini.go:17 
	data, err = ioutil.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3402b08999cbaa72 — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/oidc_role_arn_provider.go:59 
		reg := os.Getenv("TKE_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bdbd9caf3cf96a62 — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/oidc_role_arn_provider.go:64 
		providerId := os.Getenv("TKE_PROVIDER_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab0d040aceefa842 — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/oidc_role_arn_provider.go:69 
		tokenFile := os.Getenv("TKE_WEB_IDENTITY_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #954630b911af701f — Filesystem access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/oidc_role_arn_provider.go:73 
		tokenBytes, err := ioutil.ReadFile(tokenFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51107b013d7641a3 — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/oidc_role_arn_provider.go:78 
		roleArn := os.Getenv("TKE_ROLE_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31849bafd01f72a4 — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/profile_provider.go:32 
		return os.Getenv("USERPROFILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77f615518ed62eb4 — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/profile_provider.go:35 
	return os.Getenv("HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49511820125437ae — Environment-variable access.
pkgs/go/github.com_tencentcloud_tencentcloud-sdk-go_tencentcloud_common@v1.0.865/profile_provider.go:62 
	path, ok := os.LookupEnv(EnvCredentialFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/tikv/client-go/v2

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #b149e1dc60395ed3 — Filesystem access.
pkgs/go/github.com_tikv_client-go_v2@v2.0.8-0.20260610031342-e999c1f9c7c3/config/security.go:69 
		ca, err = os.ReadFile(s.ClusterSSLCA)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/twpayne/go-geom

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #5885218509223a64 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/parse-igc/main.go:14 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/zilliztech/woodpecker

go dependency
expand_more 39 low-confidence finding(s)
low env_fs dependency Excluded from app score #5a5b674425c63361 — Filesystem access.
pkgs/go/[email protected]/cmd/external/user_config.go:81 
		data, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0003c32e9564395 — Environment-variable access.
pkgs/go/[email protected]/cmd/main.go:185 
			"admin_port": os.Getenv("METRICS_PORT"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3128bc5c198932b9 — Filesystem access.
pkgs/go/[email protected]/cmd/wpcli/cmd/ctx.go:81 
			if err := os.WriteFile(path, data, 0o600); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7866254af9c65ab — Filesystem access.
pkgs/go/[email protected]/cmd/wpcli/cmd/profile.go:57 
			f, err := os.Create(outputFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55838ce791325146 — Environment-variable access.
pkgs/go/[email protected]/cmd/wpcli/cmd/resolver.go:39 
	ctx.Endpoint = resolveEndpoint(Globals.Endpoint, os.Getenv("WOODPECKER_ENDPOINT"), ctx.Endpoint)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c735488161d70ca — Filesystem access.
pkgs/go/[email protected]/cmd/wpcli/config/cli_config.go:47 
	data, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1d85a38197e5732 — Environment-variable access.
pkgs/go/[email protected]/cmd/wpcli/config/cli_config.go:87 
	if p := os.Getenv("WOODPECKER_CLI_CONFIG"); p != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79f85824bd1548f3 — Environment-variable access.
pkgs/go/[email protected]/cmd/wpcli/config/cli_config.go:90 
	if p := os.Getenv("XDG_CONFIG_HOME"); p != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d4139cdee351875 — Filesystem access.
pkgs/go/[email protected]/common/config/configuration.go:436 
		data, err := os.ReadFile(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e9444879e5e131a — Filesystem access.
pkgs/go/[email protected]/common/etcd/etcd_util.go:88 
	caCert, err := os.ReadFile(caCertFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1dc970c8c81c6485 — Environment-variable access.
pkgs/go/[email protected]/common/hardware/container_linux.go:62 
	memoryStr := os.Getenv("MEM_LIMIT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #343fbe3a8a2d0fab — Environment-variable access.
pkgs/go/[email protected]/common/http/management/env_handler.go:47 
		for _, kv := range os.Environ() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #337047e8ad36b463 — Environment-variable access.
pkgs/go/[email protected]/common/http/management/env_handler.go:65 
				GOGC:         os.Getenv("GOGC"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0aa52f15ff65c634 — Environment-variable access.
pkgs/go/[email protected]/common/http/server.go:100 
		pprofEnableKey := os.Getenv(PprofEnableEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26ba6376d4f8c8fc — Environment-variable access.
pkgs/go/[email protected]/common/http/server.go:277 
	port := os.Getenv(ListenPortEnvKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3785758b6fa8f3db — Environment-variable access.
pkgs/go/[email protected]/common/metrics/service_metrics.go:36 
	if v := os.Getenv("NODE_NAME"); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f2f27ccf7117ca2 — Environment-variable access.
pkgs/go/[email protected]/common/objectstorage/azure_object_storage.go:212 
		if os.Getenv("AZURE_FEDERATED_TOKEN_FILE") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f82bf19fbf8cbb61 — Environment-variable access.
pkgs/go/[email protected]/common/objectstorage/azure_object_storage.go:214 
				ClientID:      os.Getenv("AZURE_CLIENT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d3c039692dbb0c9 — Environment-variable access.
pkgs/go/[email protected]/common/objectstorage/azure_object_storage.go:215 
				TenantID:      os.Getenv("AZURE_TENANT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5a78ce60b32c2e7 — Environment-variable access.
pkgs/go/[email protected]/common/objectstorage/azure_object_storage.go:216 
				TokenFilePath: os.Getenv("AZURE_FEDERATED_TOKEN_FILE"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e93514c57cc4c8c7 — Environment-variable access.
pkgs/go/[email protected]/common/objectstorage/azure_object_storage.go:219 
			clientID := os.Getenv("AZURE_CLIENT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11d0477435d2efd3 — Environment-variable access.
pkgs/go/[email protected]/common/objectstorage/azure_object_storage.go:235 
		connectionString := os.Getenv("AZURE_STORAGE_CONNECTION_STRING")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb0f1b686f53cc75 — Environment-variable access.
pkgs/go/[email protected]/common/topology/topology_utils.go:13 
	if v := os.Getenv(key); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #751f9627953e9c02 — Filesystem access.
pkgs/go/[email protected]/server/delete_marker.go:71 
	f, err := os.OpenFile(tmp, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #675248d277450a49 — Filesystem access.
pkgs/go/[email protected]/server/delete_marker.go:92 
	dir, err := os.Open(filepath.Dir(p))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a93364454715197 — Filesystem access.
pkgs/go/[email protected]/server/delete_marker.go:130 
		data, rerr := os.ReadFile(path) //nolint:gosec

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed4dd772428a7a0f — Filesystem access.
pkgs/go/[email protected]/server/lifecycle.go:181 
	data, err := os.ReadFile(m.stateFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7dbe29d04d526480 — Filesystem access.
pkgs/go/[email protected]/server/lifecycle.go:221 
	if err := os.WriteFile(tmpPath, data, 0o600); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99e7999963bc35e2 — Filesystem access.
pkgs/go/[email protected]/server/storage/disk/reader_impl.go:89 
	file, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2bd38840ed980a4 — Filesystem access.
pkgs/go/[email protected]/server/storage/disk/writer_impl.go:216 
		file, err = os.OpenFile(filePath, os.O_CREATE|os.O_WRONLY|os.O_APPEND, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ae046a9c9394e87 — Filesystem access.
pkgs/go/[email protected]/server/storage/disk/writer_impl.go:230 
		file, err = os.OpenFile(filePath, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1bc642fdf49710ec — Filesystem access.
pkgs/go/[email protected]/server/storage/disk/writer_impl.go:1074 
	fenceFile, err := os.Create(fenceFlagPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #832e3e076d4456cd — Filesystem access.
pkgs/go/[email protected]/server/storage/disk/writer_impl.go:1140 
	file, err := os.Open(w.segmentFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9d6cba09deca696 — Filesystem access.
pkgs/go/[email protected]/server/storage/disk/writer_impl.go:1461 
	if infoFile, err := os.OpenFile(s.lockFilePath, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0o644); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01af297c6f53bada — Filesystem access.
pkgs/go/[email protected]/server/storage/stagedstorage/reader_impl.go:110 
	file, err := os.Open(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df528fb6f318c2bf — Filesystem access.
pkgs/go/[email protected]/server/storage/stagedstorage/writer_impl.go:256 
		file, err = os.OpenFile(filePath, os.O_CREATE|os.O_WRONLY|os.O_APPEND, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9972484616f52dbc — Filesystem access.
pkgs/go/[email protected]/server/storage/stagedstorage/writer_impl.go:260 
		file, err = os.OpenFile(filePath, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #984c207cd1e1d461 — Filesystem access.
pkgs/go/[email protected]/server/storage/stagedstorage/writer_impl.go:1607 
	file, err := os.Open(w.segmentFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c43ae58b7119e081 — Filesystem access.
pkgs/go/[email protected]/server/storage/stagedstorage/writer_impl.go:1765 
	file, err := os.Open(w.segmentFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.etcd.io/etcd/client/v3

go dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #848d87cf0674cf51 — Environment-variable access.
pkgs/go/[email protected]/logger.go:30 
	if os.Getenv("ETCD_CLIENT_DEBUG") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd6d2929e9ed58af — Environment-variable access.
pkgs/go/[email protected]/logger.go:49 
	envLevel := os.Getenv("ETCD_CLIENT_DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e587cbacccee4a8 — Filesystem access.
pkgs/go/[email protected]/snapshot/v3_snapshot.go:61 
	f, err = os.OpenFile(partpath, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, fileutil.PrivateFileMode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8252ec65d231a1ab — Filesystem access.
pkgs/go/[email protected]/yaml/config.go:45 
	b, err := ioutil.ReadFile(fpath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.etcd.io/etcd/server/v3

go dependency
expand_more 18 low-confidence finding(s)
low env_fs dependency Excluded from app score #76ad43696b782b60 — Filesystem access.
pkgs/go/[email protected]/auth/options.go:73 
		opts.PublicKey, err = ioutil.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c01d2b8002feef46 — Filesystem access.
pkgs/go/[email protected]/auth/options.go:80 
		opts.PrivateKey, err = ioutil.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5cbdbfba045a2b7 — Filesystem access.
pkgs/go/[email protected]/embed/config.go:545 
	b, err := ioutil.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0872c6553e8fc798 — Environment-variable access.
pkgs/go/[email protected]/etcdmain/config.go:361 
		cfg.configFile = os.Getenv(flags.FlagToEnv("ETCD", "config-file"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e487abcbc4dbe3f6 — Environment-variable access.
pkgs/go/[email protected]/etcdmain/config.go:405 
	if verVal := os.Getenv(verKey); verVal != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0901749240025be4 — Filesystem access.
pkgs/go/[email protected]/etcdmain/config.go:478 
	b, rerr := ioutil.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e993392ac0055e1a — Filesystem access.
pkgs/go/[email protected]/etcdmain/etcd.go:287 
	b, err := ioutil.ReadFile(clusterfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba1d0a7b89129815 — Environment-variable access.
pkgs/go/[email protected]/etcdmain/etcd.go:481 
	if env, ok := os.LookupEnv("ETCD_UNSUPPORTED_ARCH"); ok && env == runtime.GOARCH {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b148bf38963fc8ff — Filesystem access.
pkgs/go/[email protected]/etcdmain/grpc_proxy.go:579 
		caCert, err := ioutil.ReadFile(ca)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a46ccca3f99e54ae — Filesystem access.
pkgs/go/[email protected]/etcdserver/api/snap/snapshotter.go:163 
	b, err := ioutil.ReadFile(snapname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #410b8b8b91f441c3 — Filesystem access.
pkgs/go/[email protected]/etcdserver/api/snap/snapshotter.go:218 
	dir, err := os.Open(s.dir)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4820f593ee4d5026 — Filesystem access.
pkgs/go/[email protected]/etcdserver/api/snap/snapshotter.go:275 
	dir, err := os.Open(s.dir)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1019bc7c422a449 — Environment-variable access.
pkgs/go/[email protected]/mvcc/backend/verify.go:59 
	return os.Getenv(ENV_VERIFY) == ENV_VERIFY_ALL_VALUE || os.Getenv(ENV_VERIFY) == ENV_VERIFY_LOCK

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3255bd19d222dc78 — Environment-variable access.
pkgs/go/[email protected]/verify/verify.go:101 
	return os.Getenv(ENV_VERIFY) == ENV_VERIFY_ALL_VALUE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db967754362dbcf7 — Environment-variable access.
pkgs/go/[email protected]/verify/verify.go:107 
	previousEnv := os.Getenv(ENV_VERIFY)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68ecead23c43fb1b — Environment-variable access.
pkgs/go/[email protected]/verify/verify.go:117 
	previousEnv := os.Getenv(ENV_VERIFY)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20a53d0c56f28c05 — Filesystem access.
pkgs/go/[email protected]/wal/repair.go:68 
			bf, bferr := os.Create(f.Name() + ".broken")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e029c9d389a3831b — Filesystem access.
pkgs/go/[email protected]/wal/wal.go:397 
			rf, err := os.OpenFile(p, os.O_RDONLY, fileutil.PrivateFileMode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/exporters/jaeger

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #89c35087e5c6c107 — Environment-variable access.
pkgs/go/[email protected]/env.go:40 
	if v, ok := os.LookupEnv(key); ok && v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #89ca73348dc041ec — Environment-variable access.
pkgs/go/go.opentelemetry.io_otel_exporters_otlp_otlptrace_otlptracegrpc@v1.42.0/internal/x/x.go:46 
		vRaw := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #1e512d205201d3ef — Environment-variable access.
pkgs/go/go.opentelemetry.io_otel_exporters_otlp_otlptrace_otlptracehttp@v1.43.0/internal/x/x.go:46 
		vRaw := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/exporters/stdout/stdouttrace

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #991e356a106e9e79 — Environment-variable access.
pkgs/go/[email protected]/internal/x/x.go:46 
		vRaw := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/sdk

go dependency
expand_more 10 low-confidence finding(s)
low env_fs dependency Excluded from app score #599a94c1b9262d46 — Environment-variable access.
pkgs/go/[email protected]/internal/x/x.go:46 
		vRaw := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e72fb25c069e133 — Filesystem access.
pkgs/go/[email protected]/resource/container.go:47 
		return os.Open(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9032bbfaed1ae83 — Environment-variable access.
pkgs/go/[email protected]/resource/env.go:39 
	attrs := strings.TrimSpace(os.Getenv(resourceAttrKey))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3976942d959644c1 — Environment-variable access.
pkgs/go/[email protected]/resource/env.go:40 
	svcName := strings.TrimSpace(os.Getenv(svcNameKey))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9cbd0477d07e19a3 — Filesystem access.
pkgs/go/[email protected]/resource/host_id_readfile.go:11 
	b, err := os.ReadFile(filename) // nolint:gosec // false positive

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3902816963b32971 — Filesystem access.
pkgs/go/[email protected]/resource/os_unix.go:71 
		file, err := os.Open(c)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42431422fdf253ba — Environment-variable access.
pkgs/go/[email protected]/trace/internal/env/env.go:64 
		value := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69a0e3026214ba82 — Environment-variable access.
pkgs/go/[email protected]/trace/internal/env/env.go:84 
	value := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c62d1bfaef409b8 — Environment-variable access.
pkgs/go/[email protected]/trace/sampler_env.go:49 
	sampler, ok := os.LookupEnv(tracesSamplerKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1dfe137becf665fb — Environment-variable access.
pkgs/go/[email protected]/trace/sampler_env.go:55 
	samplerArg, hasSamplerArg := os.LookupEnv(tracesSamplerArgKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/trace

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #440910b8d1a6c101 — Environment-variable access.
pkgs/go/[email protected]/auto.go:649 
		strV := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.uber.org/atomic

go dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #48f0aa0568d5a31c — Filesystem access.
pkgs/go/[email protected]/internal/gen-atomicint/main.go:75 
		f, err := os.Create(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d4687781d458251 — Filesystem access.
pkgs/go/[email protected]/internal/gen-atomicwrapper/main.go:157 
		f, err := os.Create(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.uber.org/automaxprocs

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #7c8cce037f3a6f37 — Filesystem access.
pkgs/go/[email protected]/internal/cgroups/cgroup.go:56 
	paramFile, err := os.Open(cg.ParamPath(param))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9fe2fcce971c973 — Filesystem access.
pkgs/go/[email protected]/internal/cgroups/cgroups2.go:129 
	cpuMaxParams, err := os.Open(path.Join(cg.mountPoint, cg.groupPath, cg.cpuMaxFile))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0922f725b4fa6bd4 — Filesystem access.
pkgs/go/[email protected]/internal/cgroups/mountpoint.go:152 
	mountInfoFile, err := os.Open(procPathMountInfo)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #418d25d44ae22402 — Filesystem access.
pkgs/go/[email protected]/internal/cgroups/subsys.go:79 
	cgroupFile, err := os.Open(procPathCGroup)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84f3503b26b4fa72 — Environment-variable access.
pkgs/go/[email protected]/maxprocs/maxprocs.go:100 
	if max, exists := os.LookupEnv(_maxProcsKey); exists {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.uber.org/zap

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #eb92b68fce341cd9 — Environment-variable access.
pkgs/go/[email protected]/internal/ztest/timeout.go:55 
	if v := os.Getenv("TEST_TIMEOUT_SCALE"); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/crypto

go dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #bdb18dfad9e61873 — Filesystem access.
pkgs/go/[email protected]/acme/autocert/cache.go:50 
		data, err = os.ReadFile(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f78dab7ead8e7e4b — Environment-variable access.
pkgs/go/[email protected]/internal/testenv/exec.go:41 
			if s := os.Getenv("GO_TEST_TIMEOUT_SCALE"); s != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ae889b609550f95 — Filesystem access.
pkgs/go/[email protected]/ssh/knownhosts/knownhosts.go:411 
		f, err := os.Open(fn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df456a8c9fb7db39 — Filesystem access.
pkgs/go/[email protected]/x509roots/gen_fallback_bundle.go:48 
		f, err := os.Open(*certDataPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6dc5d7551202a8fb — Filesystem access.
pkgs/go/[email protected]/x509roots/gen_fallback_bundle.go:136 
	if err := os.WriteFile(*output, formatted, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f382e84fc0d5553 — Filesystem access.
pkgs/go/[email protected]/x509roots/gen_fallback_bundle.go:140 
	if err := os.WriteFile(*derOutput, rawCertsData.Bytes(), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/exp

go dependency
expand_more 24 low-confidence finding(s)
low env_fs dependency Excluded from app score #d3eabe7c085ad1b7 — Filesystem access.
pkgs/go/[email protected]/cmd/apidiff/main.go:194 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db0ea75c93aff837 — Filesystem access.
pkgs/go/[email protected]/cmd/apidiff/main.go:215 
	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5adc5e8a85c92b88 — Filesystem access.
pkgs/go/[email protected]/cmd/apidiff/main.go:228 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2f173c0c3860433 — Filesystem access.
pkgs/go/[email protected]/cmd/apidiff/main.go:244 
	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0566886cf350170d — Environment-variable access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:145 
	ctx := context.WithValue(context.Background(), "env", append(os.Environ(), "GO111MODULE=on"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f5c0d392b329b5e — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:311 
	m.goModData, err = os.ReadFile(m.goModPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #902e8af9ba5569c3 — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:373 
				if data, err := os.ReadFile(altGoModPath); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db5ec33762c97750 — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:513 
	if m.goModData, err = os.ReadFile(m.goModPath); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d12cbb69be7f3492 — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:1099 
	if err := os.WriteFile(filepath.Join(dir, "go.mod"), goModData, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #311a3a69efdffff4 — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:1103 
	goSumData, err = os.ReadFile(filepath.Join(modRoot, "go.sum"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3abd55b601300b2 — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:1107 
	if err := os.WriteFile(filepath.Join(dir, "go.sum"), goSumData, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cda674f34b3ae56b — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:1122 
	if err := os.WriteFile(filepath.Join(dir, "tmp.go"), []byte(fakeImports.String()), 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a7a824d7fe4e5d4 — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:1151 
	newGoModData, err := os.ReadFile(goModPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83cef9d4a3b0ee2b — Filesystem access.
pkgs/go/[email protected]/cmd/gorelease/gorelease.go:1190 
		newGoSumData, err := os.ReadFile(goSumPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01391fceb1bd32e2 — Filesystem access.
pkgs/go/[email protected]/cmd/txtar/txtar.go:129 
		if err := os.WriteFile(fileName, f.Data, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca6cf5db794591bf — Filesystem access.
pkgs/go/[email protected]/cmd/txtar/txtar.go:171 
			data, err := os.ReadFile(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3867b08171e5fb04 — Environment-variable access.
pkgs/go/[email protected]/cmd/txtar/txtar.go:215 
		v, ok := os.LookupEnv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d03f3b9af65825b — Filesystem access.
pkgs/go/[email protected]/ebnflint/ebnflint.go:99 
		f, err := os.Open(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e210ed8654c14e63 — Filesystem access.
pkgs/go/[email protected]/io/i2c/devfs.go:33 
	f, err := os.OpenFile(d.Dev, os.O_RDWR, os.ModeDevice)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #485aac59853063ee — Filesystem access.
pkgs/go/[email protected]/io/spi/devfs.go:71 
	f, err := os.OpenFile(d.Dev, os.O_RDWR, os.ModeDevice)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2bbb025bd343019c — Filesystem access.
pkgs/go/[email protected]/mmap/mmap_other.go:51 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e40741cb9a7e7a4e — Filesystem access.
pkgs/go/[email protected]/mmap/mmap_unix.go:84 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0b87a2b0d3f0130 — Filesystem access.
pkgs/go/[email protected]/mmap/mmap_windows.go:83 
	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1926749dfd1db83 — Filesystem access.
pkgs/go/[email protected]/trace/internal/testgen/go122/trace.go:29 
	out, err := os.Create(os.Args[1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/net

go dependency
expand_more 28 low-confidence finding(s)
low env_fs dependency Excluded from app score #b60d16c98c499cbb — Filesystem access.
pkgs/go/[email protected]/html/atom/gen.go:50 
	if err := os.WriteFile(name, b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #059e2b3ee6a0a245 — Environment-variable access.
pkgs/go/[email protected]/http/httpproxy/proxy.go:95 
		CGI:        os.Getenv("REQUEST_METHOD") != "",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a9aa6bdc86ef732 — Environment-variable access.
pkgs/go/[email protected]/http/httpproxy/proxy.go:101 
		if val := os.Getenv(n); val != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c9a685a5271544c — Environment-variable access.
pkgs/go/[email protected]/http2/gotrack.go:21 
var DebugGoroutines = os.Getenv("DEBUG_HTTP2_GOROUTINES") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16660f773bbca0ce — Environment-variable access.
pkgs/go/[email protected]/http2/h2c/h2c.go:52 
	e := os.Getenv("GODEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a11a1611cae6f65 — Filesystem access.
pkgs/go/[email protected]/http2/hpack/gen.go:178 
	if err := os.WriteFile(name, b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cbee6dc749a98ef — Environment-variable access.
pkgs/go/[email protected]/http2/http2.go:53 
	e := os.Getenv("GODEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5dedcccc0c6d21b5 — Filesystem access.
pkgs/go/[email protected]/internal/iana/gen.go:71 
	if err := os.WriteFile("const.go", b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #885a3977077d35f1 — Environment-variable access.
pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:67 
	if keylog := os.Getenv("SSLKEYLOGFILE"); keylog != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8c5abaf61b7f930 — Filesystem access.
pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:68 
		f, err := os.Create(keylog)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6850be6c1766dd2 — Environment-variable access.
pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:76 
	testcase := os.Getenv("TESTCASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec2143cb2a4dfaa3 — Filesystem access.
pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:216 
	f, err := os.Open(filepath.Join(*root, string(req)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16b8721d583d1203 — Filesystem access.
pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:267 
	file, err := os.Create(filepath.Join(*output, u.Path[1:]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #374d21807e642f99 — Filesystem access.
pkgs/go/[email protected]/ipv4/gen.go:41 
	f, err := os.Open(defs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2a47e6badd2cd31 — Filesystem access.
pkgs/go/[email protected]/ipv4/gen.go:63 
	if err := os.WriteFile(zsys, b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f656f1d65b415425 — Filesystem access.
pkgs/go/[email protected]/ipv4/gen.go:102 
	if err := os.WriteFile("iana.go", b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86250aa9c771d333 — Filesystem access.
pkgs/go/[email protected]/ipv6/gen.go:41 
	f, err := os.Open(defs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccb54a0f13c1e12c — Filesystem access.
pkgs/go/[email protected]/ipv6/gen.go:63 
	if err := os.WriteFile(zsys, b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e3ced5d5b3ac15d — Filesystem access.
pkgs/go/[email protected]/ipv6/gen.go:102 
	if err := os.WriteFile("iana.go", b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0146bbe507178ef7 — Environment-variable access.
pkgs/go/[email protected]/proxy/proxy.go:138 
		e.val = os.Getenv(n)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fcb458535e37a80 — Filesystem access.
pkgs/go/[email protected]/publicsuffix/gen.go:275 
	return os.WriteFile(filename, b, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #3c871fce7a311f63 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/go/[email protected]/publicsuffix/gen.go:279 
	res, err := http.Get(gitCommitURL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #4c4aac92395f0296 — Filesystem access.
pkgs/go/[email protected]/publicsuffix/gen.go:320 
	if err := os.WriteFile("data/text", []byte(combinedText), 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7d339d7db1ebec2 — Filesystem access.
pkgs/go/[email protected]/publicsuffix/gen.go:333 
	if err := os.WriteFile("data/nodes", nodes, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b11524a1d669b20 — Filesystem access.
pkgs/go/[email protected]/publicsuffix/gen.go:341 
	if err := os.WriteFile("data/children", children, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3319fb8dfacbca9 — Environment-variable access.
pkgs/go/[email protected]/quic/log.go:19 
	s := os.Getenv("GODEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c99ca3a011bb10cf — Filesystem access.
pkgs/go/[email protected]/quic/qlog/qlog.go:181 
		w, err = os.OpenFile(filepath.Join(opts.Dir, filename), os.O_CREATE|os.O_EXCL|os.O_WRONLY, 0666)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31c7f73e81185710 — Filesystem access.
pkgs/go/[email protected]/webdav/file.go:95 
	f, err := os.OpenFile(name, flag, perm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/oauth2

go dependency
expand_more 12 low-confidence finding(s)
low env_fs dependency Excluded from app score #1a8d646cd1f143a5 — Environment-variable access.
pkgs/go/[email protected]/google/default.go:237 
	if filename := os.Getenv(envVar); filename != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b47a1c37809f668 — Filesystem access.
pkgs/go/[email protected]/google/default.go:247 
	if b, err := os.ReadFile(filename); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a2e62ccd3d2be3b — Environment-variable access.
pkgs/go/[email protected]/google/default.go:429 
		return filepath.Join(os.Getenv("APPDATA"), "gcloud", f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae90654dd1640e00 — Filesystem access.
pkgs/go/[email protected]/google/default.go:435 
	b, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d9f3499be6f8185 — Environment-variable access.
pkgs/go/[email protected]/google/externalaccount/executablecredsource.go:98 
	return os.Environ()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bdda5a22b227564 — Environment-variable access.
pkgs/go/[email protected]/google/externalaccount/executablecredsource.go:102 
	return os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1f7df8f03806bf7 — Filesystem access.
pkgs/go/[email protected]/google/externalaccount/executablecredsource.go:253 
	file, err := os.Open(cs.OutputFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e13615d2771617d7 — Filesystem access.
pkgs/go/[email protected]/google/externalaccount/filecredsource.go:26 
	tokenFile, err := os.Open(cs.File)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d68fa8df262dd1d5 — Filesystem access.
pkgs/go/[email protected]/google/sdk.go:60 
	f, err := os.Open(credentialsPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e4cc20db09cf6e3 — Filesystem access.
pkgs/go/[email protected]/google/sdk.go:75 
		f, err := os.Open(propertiesPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a77f327341969ac — Environment-variable access.
pkgs/go/[email protected]/google/sdk.go:182 
		return filepath.Join(os.Getenv("APPDATA"), "gcloud"), nil

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db453efbe996208d — Environment-variable access.
pkgs/go/[email protected]/google/sdk.go:193 
	if v := os.Getenv("HOME"); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/sys

go dependency
expand_more 59 low-confidence finding(s)
low env_fs dependency Excluded from app score #99c480d1dd08bd32 — Environment-variable access.
pkgs/go/[email protected]/cpu/cpu.go:276 
	env := os.Getenv("GODEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49657de633a8990d — Filesystem access.
pkgs/go/[email protected]/cpu/hwcap_linux.go:42 
	buf, err := os.ReadFile(procAuxv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd35b87fb01d69c6 — Filesystem access.
pkgs/go/[email protected]/cpu/proc_cpuinfo_linux.go:17 
	f, err := os.Open("/proc/cpuinfo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69680374a73bab16 — Environment-variable access.
pkgs/go/[email protected]/plan9/mksyscall.go:90 
	goos := os.Getenv("GOOS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbee6a1a22b161fe — Environment-variable access.
pkgs/go/[email protected]/plan9/mksyscall.go:91 
	goarch := os.Getenv("GOARCH_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60762fdafc7acc8b — Environment-variable access.
pkgs/go/[email protected]/plan9/mksyscall.go:93 
		goarch = os.Getenv("GOARCH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a7e5f3fabbd04fb — Environment-variable access.
pkgs/go/[email protected]/plan9/mksyscall.go:98 
		if os.Getenv("GOLANG_SYS_BUILD") != "docker" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56b09bd821a3c877 — Filesystem access.
pkgs/go/[email protected]/plan9/mksyscall.go:127 
		file, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7080698ab205724 — Filesystem access.
pkgs/go/[email protected]/unix/internal/mkmerge/mkmerge.go:443 
		src, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04de8409f36ce0a2 — Filesystem access.
pkgs/go/[email protected]/unix/internal/mkmerge/mkmerge.go:467 
	f, err := os.Create(mergedFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f44750c97e8f15f — Filesystem access.
pkgs/go/[email protected]/unix/internal/mkmerge/mkmerge.go:494 
		err = os.WriteFile(inFile.name, src, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93e1dc4df6553f78 — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mkall.go:182 
	if os.Getenv("GOLANG_SYS_BUILD") != "docker" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9f548e69bfd5ba3 — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:317 
	if fmtCmd.Stdout, err = os.Create(outputFile); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bb6b9e0ea819676 — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mkall.go:337 
	t.env = append(os.Environ(), fmt.Sprintf("%s=%s", "GOOS", GOOS))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d1c7ab747d392f0 — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:447 
	if file, err := os.Create(stubsFile); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fab7a7fb99af4ef — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:482 
	abiFile, err := os.Create(filepath.Join(abiDir, "abi.h"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc2ed2bef8373b2c — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:631 
	f, err := os.Open(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25a332188b40d8bf — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:756 
	f, err := os.Create(fmt.Sprintf("zptrace_%s_linux.go", archName))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac6bd95681cb94c2 — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:784 
	f, err := os.Create(fmt.Sprintf("zptrace_linux_%s.go", arch))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fa19b46d245e8e3 — Filesystem access.
pkgs/go/[email protected]/unix/linux/mkall.go:819 
	data, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bfe6d6866e46e8c — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mksysnum.go:100 
	goos = os.Getenv("GOOS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b7a3619871efe72 — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mksysnum.go:101 
	goarch = os.Getenv("GOARCH_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e38d9d49a31d7d99 — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mksysnum.go:103 
		goarch = os.Getenv("GOARCH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2cfd9c0c2bb40be — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mksysnum.go:111 
	if os.Getenv("GOLANG_SYS_BUILD") != "docker" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbf890dacc4d6eda — Environment-variable access.
pkgs/go/[email protected]/unix/linux/mksysnum.go:117 
	cc := os.Getenv("CC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee242e27c7ba95b6 — Filesystem access.
pkgs/go/[email protected]/unix/mkasm.go:36 
		in, err := os.ReadFile(inFileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4961a667130c839 — Filesystem access.
pkgs/go/[email protected]/unix/mkasm.go:73 
	if err := os.WriteFile(outFileName, out.Bytes(), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b89eb6f34d13545d — Filesystem access.
pkgs/go/[email protected]/unix/mkasm.go:110 
	if err := os.WriteFile(fileName, out.Bytes(), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c565a52294ee9d28 — Environment-variable access.
pkgs/go/[email protected]/unix/mkpost.go:26 
	goos := os.Getenv("GOOS_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2be2ffca1c6f5ff2 — Environment-variable access.
pkgs/go/[email protected]/unix/mkpost.go:28 
		goos = os.Getenv("GOOS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #392a9e9e862274d0 — Environment-variable access.
pkgs/go/[email protected]/unix/mkpost.go:30 
	goarch := os.Getenv("GOARCH_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0a03a6e880d7733 — Environment-variable access.
pkgs/go/[email protected]/unix/mkpost.go:32 
		goarch = os.Getenv("GOARCH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4309f5b95167c70 — Environment-variable access.
pkgs/go/[email protected]/unix/mkpost.go:36 
		if os.Getenv("GOLANG_SYS_BUILD") != "docker" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4df137526dd1476f — Environment-variable access.
pkgs/go/[email protected]/unix/mksyscall.go:104 
	goos := os.Getenv("GOOS_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87550eaec2dc086b — Environment-variable access.
pkgs/go/[email protected]/unix/mksyscall.go:106 
		goos = os.Getenv("GOOS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a92bc9a1d8f43f3b — Environment-variable access.
pkgs/go/[email protected]/unix/mksyscall.go:115 
		if os.Getenv("GOLANG_SYS_BUILD") != "docker" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7873e8f828631513 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall.go:145 
		file, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13e8001f17696692 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_aix_ppc.go:100 
		file, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8069e5fc9b0e7e14 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_aix_ppc64.go:148 
		file, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c51f31e1acd0cef — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_aix_ppc64.go:521 
	err := os.WriteFile("zsyscall_aix_ppc64.go",
		[]byte(fmt.Sprintf(srcTemplate1, cmdLine(), goBuildTags(), pack, imp, textcommon)),
		0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #305037c3eb05c8d1 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_aix_ppc64.go:532 
	err = os.WriteFile("zsyscall_aix_ppc64_gc.go",
		[]byte(fmt.Sprintf(srcTemplate2, cmdLine(), goBuildTags(), pack, imp, dynimports, linknames, vardecls, textgc)),
		0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1cbec1519220399 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_aix_ppc64.go:541 
	err = os.WriteFile("zsyscall_aix_ppc64_gccgo.go",
		[]byte(fmt.Sprintf(srcTemplate3, cmdLine(), goBuildTags(), pack, cExtern, imp, textgccgo)),
		0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c615775b2ba1e53 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_solaris.go:103 
		file, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a044bab23553dc3 — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_zos_s390x.go:208 
	f, err := os.Open(*inputgo)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3108a52d6405bfec — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_zos_s390x.go:216 
	fasm, asmerr := os.Create(*outasm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33dbe812bd2dd61c — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_zos_s390x.go:230 
	fgo, goerr := os.Create(*outputgo)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #094abb533602e63c — Filesystem access.
pkgs/go/[email protected]/unix/mksyscall_zos_s390x.go:272 
	f, err := os.Create(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78a5da1e9f0c553a — Environment-variable access.
pkgs/go/[email protected]/unix/mksysctl_openbsd.go:122 
	goos = os.Getenv("GOOS_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04a06fe62565bee6 — Environment-variable access.
pkgs/go/[email protected]/unix/mksysctl_openbsd.go:124 
		goos = os.Getenv("GOOS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c28375fb519f4454 — Environment-variable access.
pkgs/go/[email protected]/unix/mksysctl_openbsd.go:127 
	goarch = os.Getenv("GOARCH_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ddd2320f079fb118 — Environment-variable access.
pkgs/go/[email protected]/unix/mksysctl_openbsd.go:129 
		goarch = os.Getenv("GOARCH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96808548799105a9 — Filesystem access.
pkgs/go/[email protected]/unix/mksysctl_openbsd.go:259 
		file, err := os.Open(filepath.Join("/usr/include", header))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e1cda5927374b7c — Filesystem access.
pkgs/go/[email protected]/unix/mksysnum.go:70 
	file, err := os.Open(os.Args[1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3888f0cf56dde5b0 — Environment-variable access.
pkgs/go/[email protected]/unix/mksysnum.go:90 
	goos = os.Getenv("GOOS_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d50d703acbfaa981 — Environment-variable access.
pkgs/go/[email protected]/unix/mksysnum.go:92 
		goos = os.Getenv("GOOS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a2ad9384e31979c — Environment-variable access.
pkgs/go/[email protected]/unix/mksysnum.go:95 
	goarch = os.Getenv("GOARCH_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d5976699393a047 — Environment-variable access.
pkgs/go/[email protected]/unix/mksysnum.go:97 
		goarch = os.Getenv("GOARCH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79569a589a30fe08 — Filesystem access.
pkgs/go/[email protected]/windows/mkwinsyscall/mkwinsyscall.go:710 
	file, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fab0678def72db8e — Filesystem access.
pkgs/go/[email protected]/windows/mkwinsyscall/mkwinsyscall.go:894 
		err = os.WriteFile(*filename, data, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/text

go dependency
expand_more 31 low-confidence finding(s)
low env_fs dependency Excluded from app score #04c8fb2eceff755f — Filesystem access.
pkgs/go/[email protected]/cmd/gotext/main.go:328 
			if err := os.WriteFile("doc.go", b, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ea79301d78cb83f6 — Filesystem access.
pkgs/go/[email protected]/collate/tools/colcmp/colcmp.go:122 
		f, err := os.Create(*cpuprofile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34f0ccfe186aae52 — Filesystem access.
pkgs/go/[email protected]/encoding/internal/enctest/enctest.go:160 
	dst, err := os.ReadFile(dstFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ffe7151c8b0eb04c — Filesystem access.
pkgs/go/[email protected]/encoding/internal/enctest/enctest.go:162 
		if dst, err = os.ReadFile("../" + dstFile); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc1d39cadf712e1c — Filesystem access.
pkgs/go/[email protected]/encoding/internal/enctest/enctest.go:166 
	src, err := os.ReadFile(srcFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3b0c830dad9ab90 — Filesystem access.
pkgs/go/[email protected]/encoding/internal/enctest/enctest.go:168 
		if src, err = os.ReadFile("../" + srcFile); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #d077e931776616b2 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/go/[email protected]/encoding/korean/maketables.go:26 
	res, err := http.Get("http://encoding.spec.whatwg.org/index-euc-kr.txt")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3668178e96af0546 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/go/[email protected]/encoding/simplifiedchinese/maketables.go:31 
	res, err := http.Get("http://encoding.spec.whatwg.org/index-gb18030.txt")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c93f62e9e2d65507 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/go/[email protected]/encoding/simplifiedchinese/maketables.go:57 
	res, err := http.Get("http://encoding.spec.whatwg.org/index-gbk.txt")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #15378127803964a9 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/go/[email protected]/encoding/traditionalchinese/maketables.go:26 
	res, err := http.Get("http://encoding.spec.whatwg.org/index-big5.txt")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #e7734570872d4c61 — Environment-variable access.
pkgs/go/[email protected]/gen.go:81 
		goroot := os.Getenv("GOROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25efdb7c547fa885 — Filesystem access.
pkgs/go/[email protected]/gen.go:150 
	w, err := os.OpenFile(file, os.O_APPEND|os.O_WRONLY, 0600)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #061ffb968160dcf4 — Filesystem access.
pkgs/go/[email protected]/gen.go:257 
		b, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cba6e1493a602f0c — Filesystem access.
pkgs/go/[email protected]/gen.go:276 
		return os.WriteFile(file, b, 0666)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75e786809192a38b — Environment-variable access.
pkgs/go/[email protected]/internal/export/unicode/gen.go:45 
	if v := os.Getenv("UNICODE_VERSION"); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be84c1801514fece — Filesystem access.
pkgs/go/[email protected]/internal/gen/code.go:53 
	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c06c2cbfcb2633a1 — Filesystem access.
pkgs/go/[email protected]/internal/gen/code.go:73 
	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60e7394743bee248 — Environment-variable access.
pkgs/go/[email protected]/internal/gen/gen.go:57 
	if v := os.Getenv(name); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9f03a8a828d802a — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:174 
		os.WriteFile(readme, []byte(readmeTxt), permissions)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fba8b4c40f00c6f — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:207 
	if f, err := os.Open(file); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9cd762da8dc22c1d — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:217 
	if err := os.WriteFile(file, b, permissions); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd4f57b088dd8fd8 — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:257 
	w, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fbe26b8c180b5a4 — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:284 
		b, err := os.ReadFile(oldFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8d00a72d6d603fc — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:289 
		err = os.WriteFile(oldFile, b, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97a3f34428e3bfa5 — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:305 
	w, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c6fd20a7dadf199 — Filesystem access.
pkgs/go/[email protected]/internal/gen/gen.go:338 
	src, err := os.ReadFile(inFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #763f0ea3bb2da908 — Filesystem access.
pkgs/go/[email protected]/internal/testtext/codesize.go:34 
	if err := os.WriteFile(filename, []byte(s), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b456b01aa864fb99 — Filesystem access.
pkgs/go/[email protected]/message/pipeline/pipeline.go:231 
		b, err := ioutil.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84ad0e27033d21fa — Filesystem access.
pkgs/go/[email protected]/message/pipeline/pipeline.go:362 
		if err := ioutil.WriteFile(file, data, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bcb37de81fcb014e — Filesystem access.
pkgs/go/[email protected]/message/pipeline/rewrite.go:53 
				if w, err = os.Create(conf.Fset.File(f.Pos()).Name()); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7129774111827a36 — Filesystem access.
pkgs/go/[email protected]/unicode/cldr/decode.go:132 
	return os.Open(pl[i])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

google.golang.org/grpc

go dependency
expand_more 49 low-confidence finding(s)
low env_fs dependency Excluded from app score #79442239b0044f85 — Filesystem access.
pkgs/go/[email protected]/authz/grpc_authz_server_interceptors.go:143 
	policyContents, err := os.ReadFile(i.policyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #dbcabc733f64c647 — Filesystem access.
pkgs/go/[email protected]/benchmark/benchmain/main.go:961 
		f, err := os.Create(opts.cpuProfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #6cbf6e2a4509040a — Filesystem access.
pkgs/go/[email protected]/benchmark/benchmain/main.go:979 
		f, err := os.Create(opts.memProfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #3c5d16fcffcb0c21 — Filesystem access.
pkgs/go/[email protected]/benchmark/benchmain/main.go:992 
		f, err := os.Create(opts.benchmarkResultFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #21214b1d26a49485 — Filesystem access.
pkgs/go/[email protected]/benchmark/benchresult/main.go:44 
	f, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ca705626c40a997d — Filesystem access.
pkgs/go/[email protected]/benchmark/benchresult/main.go:117 
	f, err := os.Open(fileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e7f16c5714e3ab41 — Filesystem access.
pkgs/go/[email protected]/benchmark/client/main.go:104 
	cf, err := os.Create("/tmp/" + *testName + ".cpu")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ccff71fd95482b95 — Filesystem access.
pkgs/go/[email protected]/benchmark/client/main.go:117 
	mf, err := os.Create("/tmp/" + *testName + ".mem")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #05f0dce0b1b12639 — Filesystem access.
pkgs/go/[email protected]/benchmark/server/main.go:66 
	cf, err := os.Create("/tmp/" + *testName + ".cpu")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #86505569af49aa3c — Filesystem access.
pkgs/go/[email protected]/benchmark/server/main.go:85 
	mf, err := os.Create("/tmp/" + *testName + ".mem")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #6b58669b591f3b7b — Filesystem access.
pkgs/go/[email protected]/benchmark/stats/curve.go:83 
	data, err := os.ReadFile(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #c24f2d433567602b — Filesystem access.
pkgs/go/[email protected]/benchmark/stats/curve.go:104 
	f, err := os.Open(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eda0ad14d15575ae — Filesystem access.
pkgs/go/[email protected]/credentials/jwt/file_reader.go:50 
	tokenBytes, err := os.ReadFile(r.tokenFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03691d19d95f7acb — Filesystem access.
pkgs/go/[email protected]/credentials/oauth/oauth.go:76 
	jsonKey, err := os.ReadFile(keyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23ad822a2e9a75a2 — Filesystem access.
pkgs/go/[email protected]/credentials/oauth/oauth.go:195 
	jsonKey, err := os.ReadFile(keyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6293649e25ae57f4 — Filesystem access.
pkgs/go/[email protected]/credentials/tls.go:284 
	b, err := os.ReadFile(certFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6102c07b4b09beb — Filesystem access.
pkgs/go/[email protected]/credentials/tls/certprovider/pemfile/watcher.go:164 
	certFileContents, err := os.ReadFile(w.opts.CertFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #572ba8de1eed7388 — Filesystem access.
pkgs/go/[email protected]/credentials/tls/certprovider/pemfile/watcher.go:169 
	keyFileContents, err := os.ReadFile(w.opts.KeyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04360725502c7aff — Filesystem access.
pkgs/go/[email protected]/credentials/tls/certprovider/pemfile/watcher.go:211 
	spiffeBundleMapContents, err := os.ReadFile(w.opts.SPIFFEBundleMapFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36ce61af54ec036d — Filesystem access.
pkgs/go/[email protected]/credentials/tls/certprovider/pemfile/watcher.go:230 
	rootFileContents, err := os.ReadFile(w.opts.RootFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e21925d7784f2cf6 — Filesystem access.
pkgs/go/[email protected]/experimental/credentials/tls.go:199 
	b, err := os.ReadFile(certFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ff00933914826d1 — Environment-variable access.
pkgs/go/[email protected]/grpclog/loggerv2.go:65 
	logLevel := os.Getenv("GRPC_GO_LOG_SEVERITY_LEVEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e91563ddd88c0fed — Environment-variable access.
pkgs/go/[email protected]/grpclog/loggerv2.go:76 
	vLevel := os.Getenv("GRPC_GO_LOG_VERBOSITY_LEVEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c732a5f797348d4 — Environment-variable access.
pkgs/go/[email protected]/grpclog/loggerv2.go:81 
	jsonFormat := strings.EqualFold(os.Getenv("GRPC_GO_LOG_FORMATTER"), "json")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f9bc5ca63ad5954 — Environment-variable access.
pkgs/go/[email protected]/internal/binarylog/binarylog.go:77 
	configStr := os.Getenv(envStr)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bdf9e39e2b65fea — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/envconfig.go:134 
		return !strings.EqualFold(os.Getenv(envVar), "false")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9997e81c7731ad22 — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/envconfig.go:137 
	return strings.EqualFold(os.Getenv(envVar), "true")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d19f7d206cebbf14 — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/envconfig.go:141 
	v, err := strconv.ParseUint(os.Getenv(envVar), 10, 64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f155b983736ad54c — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/observability.go:34 
	ObservabilityConfig = os.Getenv(envObservabilityConfig)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec79b7f026e90644 — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/observability.go:41 
	ObservabilityConfigFile = os.Getenv(envObservabilityConfigFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e7f228dd2033fa7 — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/xds.go:46 
	XDSBootstrapFileName = os.Getenv(XDSBootstrapFileNameEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42c0658240044568 — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/xds.go:52 
	XDSBootstrapFileContent = os.Getenv(XDSBootstrapFileContentEnv)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e28ede50edec624d — Environment-variable access.
pkgs/go/[email protected]/internal/envconfig/xds.go:55 
	C2PResolverTestOnlyTrafficDirectorURI = os.Getenv("GRPC_TEST_ONLY_GOOGLE_C2P_RESOLVER_TRAFFIC_DIRECTOR_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1013136a6b0c5c27 — Filesystem access.
pkgs/go/[email protected]/internal/googlecloud/manufacturer_linux.go:26 
	return os.ReadFile(linuxProductNameFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d11a27ac3f7d4b3 — Environment-variable access.
pkgs/go/[email protected]/internal/grpctest/tlogger.go:78 
	if vLevelEnv, found := os.LookupEnv("GRPC_GO_LOG_VERBOSITY_LEVEL"); found {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d22f27b2cd6d487b — Filesystem access.
pkgs/go/[email protected]/internal/testutils/tls_creds.go:39 
	b, err := os.ReadFile(testdata.Path("x509/server_ca_cert.pem"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e60eeb2becbdcb40 — Filesystem access.
pkgs/go/[email protected]/internal/testutils/tls_creds.go:63 
	b, err := os.ReadFile(testdata.Path("x509/client_ca_cert.pem"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f360c875ac2627e — Filesystem access.
pkgs/go/[email protected]/internal/testutils/tls_creds.go:89 
	b, err := os.ReadFile(testdata.Path("spiffe_end2end/ca.pem"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f52539c47d4d128c — Filesystem access.
pkgs/go/[email protected]/internal/testutils/tls_creds.go:115 
	b, err := os.ReadFile(testdata.Path("spiffe_end2end/ca.pem"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0996c2775a4def47 — Filesystem access.
pkgs/go/[email protected]/internal/testutils/tls_creds.go:143 
	b, err := os.ReadFile(testdata.Path("spiffe_end2end/ca.pem"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3bc0e136f9f85a6 — Filesystem access.
pkgs/go/[email protected]/internal/testutils/xds/e2e/bootstrap.go:158 
	data, err := os.ReadFile(src)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #680ba509a0b1dcbd — Filesystem access.
pkgs/go/[email protected]/internal/testutils/xds/e2e/bootstrap.go:162 
	if err := os.WriteFile(dst, data, os.ModePerm); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #970bc0b90cc86126 — Filesystem access.
pkgs/go/[email protected]/internal/testutils/xds_bootstrap.go:42 
	if err := os.WriteFile(f.Name(), bootstrapContents, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15b0a899823d90f4 — Filesystem access.
pkgs/go/[email protected]/interop/client/client.go:222 
			b, err := os.ReadFile(*caFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b52e1b7de43959d6 — Filesystem access.
pkgs/go/[email protected]/interop/test_utils.go:285 
	jsonKey, err := os.ReadFile(keyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fbf18ee536ae5ff — Filesystem access.
pkgs/go/[email protected]/profiling/cmd/catapult.go:378 
	streamStatsCatapultJSONFile, err := os.Create(streamStatsCatapultJSONFileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62f697d692b90e2c — Filesystem access.
pkgs/go/[email protected]/profiling/cmd/local.go:29 
	snapshotFile, err := os.Open(snapshotFileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d55145615342d04c — Filesystem access.
pkgs/go/[email protected]/profiling/cmd/remote.go:54 
	file, err := os.Create(f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cffd5ac393a94b75 — Environment-variable access.
pkgs/go/[email protected]/stats/opentelemetry/csm/pluginoption.go:168 
	if val, ok := os.LookupEnv(name); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

gopkg.in/natefinch/lumberjack.v2

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #85d639995f05c259 — Filesystem access.
pkgs/go/[email protected]/chown_linux.go:12 
	f, err := os.OpenFile(name, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, info.Mode())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9287cdc55476772b — Filesystem access.
pkgs/go/[email protected]/lumberjack.go:235 
	f, err := os.OpenFile(name, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ca294401dbccd54 — Filesystem access.
pkgs/go/[email protected]/lumberjack.go:280 
	file, err := os.OpenFile(filename, os.O_APPEND|os.O_WRONLY, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aaeeb17419c6a737 — Filesystem access.
pkgs/go/[email protected]/lumberjack.go:469 
	f, err := os.Open(src)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #744bdd7cd0de4212 — Filesystem access.
pkgs/go/[email protected]/lumberjack.go:486 
	gzf, err := os.OpenFile(dst, os.O_CREATE|os.O_TRUNC|os.O_WRONLY, fi.Mode())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

k8s.io/apimachinery

go dependency
expand_more 19 low-confidence finding(s)
low env_fs dependency Excluded from app score #3d7488ed72105a7e — Environment-variable access.
pkgs/go/[email protected]/pkg/api/apitesting/codec.go:73 
	if apiMediaType := os.Getenv("KUBE_TEST_API_TYPE"); len(apiMediaType) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f931b67f0c549dee — Environment-variable access.
pkgs/go/[email protected]/pkg/api/apitesting/codec.go:80 
	if storageMediaType := os.Getenv("KUBE_TEST_API_STORAGE_TYPE"); len(storageMediaType) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c2380b79c41c6f6 — Environment-variable access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/compatibility.go:268 
		if os.Getenv(updateEnvVar) == "true" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59b17a81d9e98087 — Filesystem access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/compatibility.go:336 
	actualJSON, jsonErr := ioutil.ReadFile(filepath.Join(dir, jsonFilename))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29e561c03a815348 — Filesystem access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/compatibility.go:338 
	actualYAML, yamlErr := ioutil.ReadFile(filepath.Join(dir, yamlFilename))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #344abd4691158ffb — Filesystem access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/compatibility.go:340 
	actualProto, protoErr := ioutil.ReadFile(filepath.Join(dir, protoFilename))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df5a7dc387a5b311 — Filesystem access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/compatibility.go:362 
	if err := ioutil.WriteFile(filepath.Join(dir, makeName(gvk)+suffix+"."+extension), data, os.FileMode(0644)); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95d5a3c86c15581f — Environment-variable access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/compatibility.go:480 
		if os.Getenv(updateEnvVar) == "true" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #483d5c8cab32659f — Environment-variable access.
pkgs/go/[email protected]/pkg/api/apitesting/roundtrip/unstructured.go:55 
	if override := os.Getenv("TEST_RAND_SEED"); len(override) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d676f1e3fecbd2db — Environment-variable access.
pkgs/go/[email protected]/pkg/runtime/converter.go:78 
		mismatchDetection: parseBool(os.Getenv("KUBE_PATCH_CONVERSION_DETECTOR")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c441a0d41892db1 — Environment-variable access.
pkgs/go/[email protected]/pkg/util/net/http.go:134 
	if s := os.Getenv("DISABLE_HTTP2"); len(s) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #377b3f147a8b8ebe — Environment-variable access.
pkgs/go/[email protected]/pkg/util/net/http.go:148 
	if s := os.Getenv("HTTP2_READ_IDLE_TIMEOUT_SECONDS"); len(s) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a9126f8d2d41b6f — Environment-variable access.
pkgs/go/[email protected]/pkg/util/net/http.go:162 
	if s := os.Getenv("HTTP2_PING_TIMEOUT_SECONDS"); len(s) > 0 {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1dcd50dd669b6b5e — Environment-variable access.
pkgs/go/[email protected]/pkg/util/net/http.go:400 
	noProxyEnv := os.Getenv("NO_PROXY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #356edaccfac622fc — Environment-variable access.
pkgs/go/[email protected]/pkg/util/net/http.go:402 
		noProxyEnv = os.Getenv("no_proxy")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0f734279d323d78 — Filesystem access.
pkgs/go/[email protected]/pkg/util/net/interface.go:97 
	file, err := os.Open(rf.name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e5e72c348d37f70 — Filesystem access.
pkgs/go/[email protected]/pkg/util/strategicpatch/testing/openapi.go:45 
		spec, err := os.ReadFile(f.Path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c4d921767d8256e — Filesystem access.
pkgs/go/[email protected]/pkg/util/strategicpatch/testing/openapi3.go:39 
		spec, err := os.ReadFile(f.Path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba48c3b1378ae865 — Filesystem access.
pkgs/go/[email protected]/pkg/util/strategicpatch/testing/openapi3.go:54 
		spec, err := os.ReadFile(f.Path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

mosn.io/holmes

go dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #48c957639587909f — Filesystem access.
pkgs/go/[email protected]/holmes.go:619 
		bfCpy, err = ioutil.ReadFile(binFileName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cc061cb804226d5 — Filesystem access.
pkgs/go/[email protected]/reporters/http_reporter/http_reporter.go:57 
	data, err := ioutil.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96ff95c2d189c96a — Filesystem access.
pkgs/go/[email protected]/util.go:58 
	v, err := ioutil.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ab2483cc2a7bd2a — Filesystem access.
pkgs/go/[email protected]/util.go:209 
	f, err := os.OpenFile(filepath, defaultLoggerFlags, defaultLoggerPerm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3f41e3ff224dd49 — Filesystem access.
pkgs/go/[email protected]/util.go:214 
		f, err = os.OpenFile(filepath, defaultLoggerFlags, defaultLoggerPerm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • github.com/klauspost/compress prod — module zip exceeds byte cap
  • github.com/greatroar/blobloom prod — proxy 404
  • github.com/milvus-io/milvus/pkg/v3 prod — proxy 404
  • google.golang.org/api prod — module zip exceeds byte cap
  • github.com/huaweicloud/huaweicloud-sdk-go-v3 prod — module zip exceeds byte cap