Close Open Privacy Scan

link https://github.com/microsoft/DeepSpeed
bolt Snapshot: commit 000ca19
science engine v1.5
schedule 2026-07-15T23:06:10.331695+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

App Privacy Score

97 /100
Low privacy risk

Low risk · 305 finding(s)

Dependency score: 100 (Low risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 0 medium 305 low
First-party packages: 1
Dependency packages: 0
Ecosystem: python

swap_horiz External domains

arxiv.orgazure.github.iodeepspeed.aideepspeed.readthedocs.iodiscuss.pytorch.orgdocs.nvidia.comdocs.wandb.aidoi.orgdownload.pytorch.orggithub.comhuggingface.cokellerjordan.github.iokexue.fmnedbatchelder.comopenreview.netpytorch.orgstackoverflow.comtridao.mewww.apache.orgwww.comet.comwww.deepspeed.aiwww8.cs.umu.se

</> First-Party Code

first-party (python)

python first-party
expand_more 305 low-confidence finding(s)
low env_fs production #37eda022e917fe82 — Environment-variable access.
repo/accelerator/cpu_accelerator.py:65 
        return os.environ.get('LOCAL_RANK', 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16a5d72da87282c9 — Environment-variable access.
repo/accelerator/cpu_accelerator.py:71 
        device_count = int(os.environ.get('LOCAL_SIZE', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98481402a941e947 — Environment-variable access.
repo/accelerator/cuda_accelerator.py:187 
        if "CUDA_VISIBLE_DEVICES" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6729687884b3965a — Environment-variable access.
repo/accelerator/cuda_accelerator.py:188 
            ids = list(map(int, os.environ.get("CUDA_VISIBLE_DEVICES", "").split(",")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb360281ab182042 — Environment-variable access.
repo/accelerator/cuda_accelerator.py:214 
        allow_deprecated_fp16 = os.environ.get('DS_ALLOW_DEPRECATED_FP16', '0') == '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9b27a9653b791db — Environment-variable access.
repo/accelerator/hpu_accelerator.py:37 
            if key not in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c09f23974df5af9a — Environment-variable access.
repo/accelerator/hpu_accelerator.py:38 
                os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ea3099ec5b71ece — Environment-variable access.
repo/accelerator/real_accelerator.py:59 
    if "DS_ACCELERATOR" in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2783a6158e9211f — Environment-variable access.
repo/accelerator/real_accelerator.py:60 
        accelerator_name = os.environ["DS_ACCELERATOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #030408638f7e45ea — Environment-variable access.
repo/bin/ds_bench:11 
if not all(map(lambda v: v in os.environ, required_env)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4057c262d5121314 — Filesystem access.
repo/bin/ds_elastic:14 
    ds_config = json.load(open(args.config, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd3d25c7d727a30e — Filesystem access.
repo/ci/test_tests_fetcher.py:91 
        p.write_text(content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86f195ea8d903913 — Filesystem access.
repo/ci/tests_fetcher.py:351 
            tree = ast.parse(path.read_text(encoding="utf-8"), filename=str(path))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cee334f1b27dca93 — Environment-variable access.
repo/ci/tests_fetcher.py:622 
    gh_out = os.environ.get("GITHUB_OUTPUT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37c359812f4fbf56 — Filesystem access.
repo/ci/tests_fetcher.py:625 
    with open(gh_out, "a", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06d0a9750bd4bf60 — Environment-variable access.
repo/ci/tests_fetcher.py:633 
    path = os.environ.get("GITHUB_STEP_SUMMARY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39975b0c10c03993 — Filesystem access.
repo/ci/tests_fetcher.py:661 
        with open(path, "a", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd8cdad37b7a85d1 — Filesystem access.
repo/ci/tests_fetcher.py:725 
    out_path.write_text("\n".join(targets) + ("\n" if targets else ""), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #914f5e48ab5a4241 — Environment-variable access.
repo/ci/torch_latest.py:56 
    selected_preset = os.environ.get("MODAL_TORCH_PRESET") or DEFAULT_MODAL_TORCH_PRESET

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45896f98041f92d5 — Environment-variable access.
repo/ci/torch_latest.py:70 
    transformers_source = os.environ.get("MODAL_TRANSFORMERS_SOURCE") or DEFAULT_MODAL_TRANSFORMERS_SOURCE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #176557c9e53dcdff — Environment-variable access.
repo/ci/torch_latest.py:77 
    transformers_ref = os.environ.get("MODAL_TRANSFORMERS_REF") or ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fa79c0add4534fa — Environment-variable access.
repo/ci/torch_latest.py:139 
    env_path = os.environ.get("DS_TEST_LIST_FILE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f7fc58b452c6da3 — Filesystem access.
repo/ci/torch_latest.py:144 
        targets = [line.strip() for line in list_file.read_text().splitlines() if line.strip()]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e29b8125f59cd147 — Environment-variable access.
repo/ci/torch_latest.py:206 
    selected_tests = os.environ.get("DS_SELECTED_TESTS", DEFAULT_TEST_TARGET).split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f77c9ac3b6461108 — Filesystem access.
repo/csrc/aio/py_test/aio_bench_perf_sweep.py:107 
    with open(sweep_config_json) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #074e235b4a7ad55b — Filesystem access.
repo/csrc/aio/py_test/ds_aio_job.py:34 
            self.output_fd = open(self.output_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7aefb7d8ae9ab7a — Filesystem access.
repo/csrc/aio/py_test/parse_aio_stats.py:90 
    with open(file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98a19db2e6fc0531 — Environment-variable access.
repo/deepspeed/__init__.py:14 
os.environ.setdefault("PYTORCH_NVML_BASED_CUDA_CHECK", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #488123b193517e0f — Filesystem access.
repo/deepspeed/__init__.py:386 
        with open(config, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ae6c4923c63c9ce — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:136 
            with open(os.path.join(self.results_dir, 'summary.txt'), 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8154ebe32d91025b — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:152 
            with open(os.path.join(self.results_dir, 'summary.txt'), 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fcfadd9d060aa44 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:184 
                return json.load(open(user_config_file, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0d70a758f8051e8 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:332 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8196d7cb8ba8787 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:337 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18888c4f6dba8018 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:342 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6752edea9a2e6d77 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:347 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c752e19d86836f64 — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:408 
            self.mlflow_parent_id = os.environ['MLFLOW_RUN_ID']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1213c62ae7ed3fc5 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:689 
        with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8cf971d39152863 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:704 
            with open(model_info_path, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d89541255221a03b — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:768 
            with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7995bc0c5200c4e3 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:782 
                    with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f56cff20ae87663a — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:789 
                            os.environ.pop('MLFLOW_RUN_ID')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35a4991b4baaea21 — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:794 
                            os.environ['MLFLOW_RUN_ID'] = self.mlflow_parent_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a35ba6b6afc41b9 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:828 
                with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #136d5a54eedcaa0b — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:832 
                        os.environ.pop('MLFLOW_RUN_ID')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c36818dd77b95256 — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:837 
                        os.environ['MLFLOW_RUN_ID'] = self.mlflow_parent_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ddd93e6fd335ad0 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1065 
        with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fcfabdb6feee01df — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1083 
            with open(os.path.join(exp_dir, "cmd.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #736fc05d26ac67a8 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1086 
            ds_config = hjson.load(open(os.path.join(exp_dir, "ds_config.json"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a26ccd7be89a811 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1090 
            json.dump(ds_config, open(ds_config_path, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba32da3523e3b5e2 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1093 
            with open(cmd_path, "w") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #748ef58ddcdd8ef9 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:64 
                with open(exp_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49bec6a107ddede9 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:207 
            with open(path, 'a') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #020aede852e3c3ee — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:232 
                with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee47b350ac3a2766 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:291 
    if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90bd27db19092ff1 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:292 
        infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91ac4926be7d1b4c — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:293 
    elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49a1b4134e5bf776 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:294 
        infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7919fb8703c9daf4 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:303 
    if "USER" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #acbc1f4811e79385 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:304 
        user = os.environ["USER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1f791e7d01b19cc — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:341 
    with open(exp["ds_config_path"], "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #934262bbdaba1e15 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:348 
    with open(os.path.join(exp_dir, "exp.json"), "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ce39a3971ab74f7 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:374 
    with open(os.path.join(exp_dir, "cmd.txt"), "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6351fcda808287c2 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:384 
    with open(os.path.join(exp_dir, "stdout.log"), "wb") as out, open(os.path.join(exp_dir, "stderr.log"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fcdbdf001404e6f — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:384 
    with open(os.path.join(exp_dir, "stdout.log"), "wb") as out, open(os.path.join(exp_dir, "stderr.log"),
                                                                      "wb") as err:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bf867fd443bfc20 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:402 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63577a37d39064d0 — Filesystem access.
repo/deepspeed/autotuning/tuner/model_based_tuner.py:136 
            with open(p, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #acff1a9dbdbd1e92 — Filesystem access.
repo/deepspeed/autotuning/utils.py:20 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f5b34d3fe1a3fc5 — Filesystem access.
repo/deepspeed/autotuning/utils.py:32 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5770e31895908416 — Filesystem access.
repo/deepspeed/autotuning/utils.py:157 
    with open(hostfile_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a565f5c02ee66313 — Filesystem access.
repo/deepspeed/autotuning/utils.py:409 
        with open(exp_path, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4f8b97d2253cdcf — Filesystem access.
repo/deepspeed/checkpoint/ds_to_universal.py:904 
    with open(latest_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7021e67609fc359d — Environment-variable access.
repo/deepspeed/comm/comm.py:155 
    rank = int(os.getenv('RANK', '-1'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ef3ca77ccb98821 — Environment-variable access.
repo/deepspeed/comm/comm.py:156 
    size = int(os.getenv('WORLD_SIZE', '-1'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d1f85c0ae5360b5 — Environment-variable access.
repo/deepspeed/comm/comm.py:838 
        if auto_mpi_discovery and not all(map(lambda v: v in os.environ, required_env)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c71143413a4b0dd0 — Environment-variable access.
repo/deepspeed/comm/comm.py:849 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #326a20568b8684e7 — Environment-variable access.
repo/deepspeed/comm/comm.py:855 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd1f36ff6f7685f9 — Environment-variable access.
repo/deepspeed/comm/comm.py:888 
    os.environ['RANK'] = str(rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e1cbca9278c32b0 — Environment-variable access.
repo/deepspeed/comm/comm.py:889 
    os.environ['WORLD_SIZE'] = str(world_size)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85f9d13fe2f07d65 — Environment-variable access.
repo/deepspeed/comm/comm.py:890 
    os.environ['LOCAL_RANK'] = str(local_rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56ef55a5e53e7909 — Environment-variable access.
repo/deepspeed/comm/comm.py:891 
    os.environ['MASTER_ADDR'] = master_addr

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b2de7ea067438a7 — Environment-variable access.
repo/deepspeed/comm/comm.py:892 
    os.environ['MASTER_PORT'] = str(distributed_port)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #500c60a0a53cb9ad — Environment-variable access.
repo/deepspeed/comm/comm.py:897 
            format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf906c179cf0b2ae — Environment-variable access.
repo/deepspeed/comm/comm.py:898 
                   os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6629d7ab919691d — Environment-variable access.
repo/deepspeed/comm/comm.py:908 
    return 'AZUREML_EXPERIMENT_ID' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fea16c047b9f6af — Environment-variable access.
repo/deepspeed/comm/comm.py:913 
    return 'SM_TRAINING_ENV' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1c7787a0add5b20 — Environment-variable access.
repo/deepspeed/comm/comm.py:918 
    return 'DLTS_JOB_ID' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1e906a08709d179 — Environment-variable access.
repo/deepspeed/comm/comm.py:926 
    os.environ["RANK"] = os.environ["OMPI_COMM_WORLD_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bcb0e71b78fdf86f — Environment-variable access.
repo/deepspeed/comm/comm.py:927 
    os.environ["WORLD_SIZE"] = os.environ["OMPI_COMM_WORLD_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b4a8969d00a38f3 — Environment-variable access.
repo/deepspeed/comm/comm.py:928 
    single_node = int(os.environ["OMPI_COMM_WORLD_LOCAL_SIZE"]) == int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91a876d1828d32a4 — Environment-variable access.
repo/deepspeed/comm/comm.py:931 
        master_node_params = os.environ["AZ_BATCH_MASTER_NODE"].split(":")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f04a245c20e48cbc — Environment-variable access.
repo/deepspeed/comm/comm.py:932 
        os.environ["MASTER_ADDR"] = master_node_params[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b12595b81ee60b59 — Environment-variable access.
repo/deepspeed/comm/comm.py:934 
        if "MASTER_PORT" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #949b8a3ec987ea86 — Environment-variable access.
repo/deepspeed/comm/comm.py:935 
            os.environ["MASTER_PORT"] = str(master_port)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0ef008ba34e89e8 — Environment-variable access.
repo/deepspeed/comm/comm.py:937 
        os.environ["MASTER_ADDR"] = os.environ["AZ_BATCHAI_MPI_MASTER_NODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e050f65565b5b5b — Environment-variable access.
repo/deepspeed/comm/comm.py:938 
        os.environ["MASTER_PORT"] = DEFAULT_AML_MASTER_PORT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56e768525c935af5 — Environment-variable access.
repo/deepspeed/comm/comm.py:941 
        utils.logger.info("NCCL_SOCKET_IFNAME original value = {}".format(os.environ["NCCL_SOCKET_IFNAME"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6c3e9c8b1190989 — Environment-variable access.
repo/deepspeed/comm/comm.py:943 
    os.environ["NCCL_SOCKET_IFNAME"] = DEFAULT_AML_NCCL_SOCKET_IFNAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bce38865aa6fa37f — Environment-variable access.
repo/deepspeed/comm/comm.py:944 
    os.environ['LOCAL_RANK'] = os.environ["OMPI_COMM_WORLD_LOCAL_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab26d41f80c20c37 — Environment-variable access.
repo/deepspeed/comm/comm.py:949 
            .format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b25b18a15d5133d — Environment-variable access.
repo/deepspeed/comm/comm.py:950 
                    os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f3afe6cd20b6fac — Environment-variable access.
repo/deepspeed/comm/comm.py:956 
    os.environ["RANK"] = os.environ["OMPI_COMM_WORLD_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a340a2dcda93d01e — Environment-variable access.
repo/deepspeed/comm/comm.py:957 
    os.environ['LOCAL_RANK'] = os.environ["OMPI_COMM_WORLD_LOCAL_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #571835269d5a2b62 — Environment-variable access.
repo/deepspeed/comm/comm.py:958 
    os.environ["WORLD_SIZE"] = os.environ["OMPI_COMM_WORLD_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4610e1ff8845ae95 — Environment-variable access.
repo/deepspeed/comm/comm.py:963 
            .format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #533ab3955c44fcac — Environment-variable access.
repo/deepspeed/comm/comm.py:964 
                    os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17e8c2e1048a5fd7 — Environment-variable access.
repo/deepspeed/comm/mori.py:103 
    return os.environ.get("DS_SDMA_ALLGATHER", "0") in _TRUTHY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5fad6c0c21b03a7 — Environment-variable access.
repo/deepspeed/comm/mori.py:107 
    raw = os.environ.get("DS_SDMA_ALLGATHER_MAX_NUMEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0aa4bc7827194fad — Environment-variable access.
repo/deepspeed/comm/mori.py:142 
    os.environ.setdefault("MORI_ENABLE_SDMA", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f76eb3d04ced02ce — Environment-variable access.
repo/deepspeed/comm/torch.py:175 
                local_rank = int(os.environ.get('LOCAL_RANK', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9051e91247d460f3 — Environment-variable access.
repo/deepspeed/comm/torch.py:211 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07cad7fad743b3e2 — Environment-variable access.
repo/deepspeed/comm/torch.py:219 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73b99261097b1f30 — Environment-variable access.
repo/deepspeed/comm/torch.py:232 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b8e4de1c3d33f90 — Environment-variable access.
repo/deepspeed/comm/torch.py:245 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2d353b6527c0574 — Environment-variable access.
repo/deepspeed/comm/torch.py:271 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #add01e2be6202f26 — Environment-variable access.
repo/deepspeed/comm/utils.py:14 
    rank = os.environ.get('LOCAL_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0074260be0e3fe9 — Environment-variable access.
repo/deepspeed/comm/utils.py:17 
        rank = os.environ.get('OMPI_COMM_WORLD_LOCAL_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28dedd410db225c9 — Environment-variable access.
repo/deepspeed/comm/utils.py:29 
    rank = os.environ.get('RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #672e938d6afc1b2f — Environment-variable access.
repo/deepspeed/comm/utils.py:32 
        rank = os.environ.get('OMPI_COMM_WORLD_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30de155413c9cdb6 — Environment-variable access.
repo/deepspeed/comm/utils.py:43 
    size = os.environ.get('WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ded191c41ed905ec — Environment-variable access.
repo/deepspeed/comm/utils.py:44 
    rank = os.environ.get('RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #acf2cc37e05f1de4 — Environment-variable access.
repo/deepspeed/comm/utils.py:47 
        size = os.environ.get('OMPI_COMM_WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22104638899bc47f — Environment-variable access.
repo/deepspeed/compile/profilers/comm_profile.py:157 
    local_rank = int(os.environ['LOCAL_RANK'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cbaa2d3cbfe254a — Filesystem access.
repo/deepspeed/compile/util.py:358 
    with open(csv_filename, mode='w', newline='') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2984266227792d36 — Filesystem access.
repo/deepspeed/compression/compress.py:24 
        return json.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28f00124ab136eaf — Environment-variable access.
repo/deepspeed/constants.py:19 
default_pg_timeout = timedelta(minutes=int(os.getenv("DEEPSPEED_TIMEOUT", default=30)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ab26b2105b1e213 — Environment-variable access.
repo/deepspeed/elasticity/elastic_agent.py:96 
                "NCCL_ASYNC_ERROR_HANDLING": os.getenv("NCCL_ASYNC_ERROR_HANDLING", str(1)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77ac75ff4a969962 — Environment-variable access.
repo/deepspeed/elasticity/elastic_agent.py:99 
            if "OMP_NUM_THREADS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4223c615581b612c — Environment-variable access.
repo/deepspeed/elasticity/elastic_agent.py:100 
                worker_env_ds["OMP_NUM_THREADS"] = os.environ["OMP_NUM_THREADS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ef7202c8e758f82 — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:212 
    if DEEPSPEED_ELASTICITY_CONFIG in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bc1df222da5180a — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:213 
        scheduler_elastic_config_dict = json.loads(os.environ[DEEPSPEED_ELASTICITY_CONFIG])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d747fef3bc70719d — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:319 
            if "WORLD_SIZE" in os.environ and \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8759ec37a2a6fa3f — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:320 
                os.getenv('WORLD_SIZE').isnumeric():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0947f518fb376d26 — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:321 
                current_num_gpus = int(os.getenv('WORLD_SIZE'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5eec85d6f919ccbb — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:323 
                WORLD_SIZE = os.getenv('WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72a8a1241f7cc0ae — Environment-variable access.
repo/deepspeed/env_report.py:78 
    if "ASCEND_HOME_PATH" in os.environ or os.path.exists(os.environ["ASCEND_HOME_PATH"]):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fa90ed535ab2e02 — Environment-variable access.
repo/deepspeed/env_report.py:79 
        return os.environ["ASCEND_HOME_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1de4a6d593bbc62 — Filesystem access.
repo/deepspeed/env_report.py:95 
            with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #436e2c65ef87235b — Filesystem access.
repo/deepspeed/git_version_info.py:13 
        version = open('version.txt', 'r').read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1e21354f1e93c85 — Environment-variable access.
repo/deepspeed/inference/engine.py:251 
            local_rank = int(os.getenv('LOCAL_RANK', '0'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2e53a3909f87f35 — Filesystem access.
repo/deepspeed/inference/engine.py:421 
                    with open(latest_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cdbe7b2214833d47 — Filesystem access.
repo/deepspeed/inference/v2/checkpoint/huggingface_engine.py:94 
            param_map = json.load(open(model_param_json, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2e9fa304351301e — Filesystem access.
repo/deepspeed/inference/v2/engine_factory.py:55 
    metadata = json.load(open(metadata_filename, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77bae2bdc10cd038 — Filesystem access.
repo/deepspeed/inference/v2/engine_factory.py:65 
    model_config = pickle.load(open(os.path.join(path, "ds_model_config.pkl"), "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bedb695d2360d887 — Environment-variable access.
repo/deepspeed/inference/v2/engine_v2.py:98 
        local_rank = int(os.getenv("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e26b7721e56dad8 — Filesystem access.
repo/deepspeed/inference/v2/engine_v2.py:265 
        json.dump(self._model.flattened_param_metadata.json(), open(metadata_file_name, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c54f0c2848c351ca — Filesystem access.
repo/deepspeed/inference/v2/engine_v2.py:268 
            pickle.dump(self._model._config, open(os.path.join(save_path, "ds_model_config.pkl"), "wb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d55e7b827f3f31e5 — Filesystem access.
repo/deepspeed/inference/v2/model_implementations/inference_policy_base.py:209 
            metadata = json.load(open(metadata_path, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a07ef1a7c348864 — Filesystem access.
repo/deepspeed/io/fast_file_writer.py:166 
        fp = open(self._file_path, 'ab')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28b820bb240c4116 — Filesystem access.
repo/deepspeed/io/mock_file_writer.py:15 
        self._fp = open(file_path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37742e6a01eaeb7f — Filesystem access.
repo/deepspeed/io/py_file_writer.py:15 
        self._fp = open(file_path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ad20aba1f15c6bc — Environment-variable access.
repo/deepspeed/launcher/launch.py:147 
    current_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe090b6009d57ccf — Filesystem access.
repo/deepspeed/launcher/launch.py:202 
        with open(pid_file, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2cd9b950d35c5cf7 — Filesystem access.
repo/deepspeed/launcher/launch.py:212 
        with open(DLTS_POD_ENV_PATH) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b564bc406f943577 — Filesystem access.
repo/deepspeed/launcher/launch.py:267 
                log_fd = open(log_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2983879be31a19a9 — Environment-variable access.
repo/deepspeed/launcher/launch.py:304 
        run_id = os.environ.get("ELASTIC_RUN_ID", ELASTIC_TRAINING_ID_DEFAULT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f56939e65fdd36b — Environment-variable access.
repo/deepspeed/launcher/launcher_helper.py:84 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46e47b2eeff88cec — Filesystem access.
repo/deepspeed/launcher/multinode_runner.py:453 
        with open(MVAPICH_TMP_HOSTFILE, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce1288e8af2a53e0 — Environment-variable access.
repo/deepspeed/launcher/runner.py:39 
DEEPSPEED_ENVIRONMENT_NAME = os.getenv("DS_ENV_FILE", ".deepspeed_env")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #380b669ccfd634c9 — Filesystem access.
repo/deepspeed/launcher/runner.py:237 
    with open(hostfile_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88d8556cc0dcbece — Environment-variable access.
repo/deepspeed/launcher/runner.py:450 
    visible_devices = os.environ.get(visible_devices_env, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccfd7d7eef9f8f24 — Environment-variable access.
repo/deepspeed/launcher/runner.py:460 
        del os.environ[visible_devices_env]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9645c1ad941f4c7d — Environment-variable access.
repo/deepspeed/launcher/runner.py:480 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e24116ee9d652f8e — Filesystem access.
repo/deepspeed/launcher/runner.py:620 
                with open(environ_file, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68fe5feffc45fb37 — Filesystem access.
repo/deepspeed/module_inject/replace_module.py:542 
            with open(f"{config.save_mp_checkpoint_path}/ds_inference_config.json", "w") as cfg:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fec1390c7ac7b3b — Environment-variable access.
repo/deepspeed/moe/ep_tp_dispatch.py:168 
    if os.environ.get("AUTOEP_FOLDING_DEBUG_PAYLOAD", "0") not in {"1", "true", "TRUE", "yes"}:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a83373f7edcf9b77 — Environment-variable access.
repo/deepspeed/moe/ep_tp_dispatch.py:185 
    sample_limit = int(os.environ.get("AUTOEP_FOLDING_DEBUG_SAMPLE_LIMIT", "12"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6632c692367d0b4 — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:28 
                if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48126065ed9ff289 — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:29 
                    infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29d1f062c4fd80a0 — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:30 
                elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85deaa85a9f3834a — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:31 
                    infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f23422441791720 — Filesystem access.
repo/deepspeed/monitor/csv_monitor.py:62 
                with open(fname, 'a+') as csv_monitor_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d3bfaa7fdf6f271 — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:34 
                if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #caa2935738d31723 — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:35 
                    infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7983de7edbb8a060 — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:36 
                elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5078446da213d355 — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:37 
                    infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de689b717ee54d26 — Filesystem access.
repo/deepspeed/nvme/ds_aio_job.py:34 
            self.output_fd = open(self.output_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cef20e0ea77cc5e6 — Filesystem access.
repo/deepspeed/nvme/parse_nvme_stats.py:90 
    with open(file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d4b0415e179a0db — Filesystem access.
repo/deepspeed/nvme/perf_run_sweep.py:130 
    with open(sweep_config_json) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54b3df660c8ffbe3 — Filesystem access.
repo/deepspeed/ops/sparse_attention/trsrc/__init__.py:36 
    with open(fname, 'r') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9ebe66afb5007ab — Filesystem access.
repo/deepspeed/ops/transformer/inference/config.py:131 
        with open(json_file, "r", encoding='utf-8') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2cb7837da13766bf — Filesystem access.
repo/deepspeed/ops/transformer/inference/moe_inference.py:104 
        with open(json_file, "r", encoding='utf-8') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d2e77f343f8e2bc — Environment-variable access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:64 
        tt_home = os.environ.get('TRITON_HOME') or os.path.join(Path.home(), ".triton")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2577c129807e2383 — Environment-variable access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:98 
        self.cache_dir = os.environ.get('TRITON_CACHE_DIR', TritonCacheDir.default_cache_dir())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47745665a6255f63 — Filesystem access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:112 
                with open(self.file_path + ".tmp", 'wb') as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba1fd30a9ba5a7ec — Filesystem access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:118 
            with open(self.file_path, 'rb') as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b42d3399dfafb6b1 — Filesystem access.
repo/deepspeed/ops/transformer/transformer.py:138 
        with open(json_file, "r", encoding='utf-16') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0026606e9263c577 — Filesystem access.
repo/deepspeed/profiling/flops_profiler/profiler.py:307 
            f = open(output_file, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a582e622708da56 — Filesystem access.
repo/deepspeed/runtime/config.py:669 
        self.data = json.load(open(filename, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1539e43702f23c6 — Filesystem access.
repo/deepspeed/runtime/config.py:672 
        with open(filename, "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2533fbe446f5641 — Filesystem access.
repo/deepspeed/runtime/config.py:683 
            self._param_dict = hjson.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16ed07f641159f92 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:122 
                        with open(f"{metric_fname}_{m_value}.csv", 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #671fcb7eeb467ef5 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:142 
                        with open(f"{metric_fname}_{m_value}.csv", 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6787a810fcbc05ce — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:271 
                        with open(w_metric_to_sample_fname, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ad75fba88ed91d6 — Environment-variable access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:828 
        worker_id=int(os.environ['RANK']),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4598721c1dd7484b — Environment-variable access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:829 
        num_workers=int(os.environ['WORLD_SIZE']),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d70fd049728a741b — Environment-variable access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:838 
        device=f"cuda:{int(os.environ['LOCAL_RANK'])}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c5ab8652ac40d6f — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:865 
            with open(os.path.join(da.save_path, path), 'rb') as f1, \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b29d0e61385c276 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:866 
                open(os.path.join(dda.save_path, path), 'rb') as f2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c25e1bf7ea1a7f2b — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:46 
        with open(index_file_path(path), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd3a6341065efbba — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:150 
        with open(index_file_path(path), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1bc6b286f69e5c6a — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:166 
        self.data_file = open(data_file_path(path), 'rb', buffering=0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62b6ac0ab1f2d5e8 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:275 
        self.out_file = open(out_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5eec9f22473eef24 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:308 
        with open(data_file_path(another_file), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c156c156dcacf04 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:318 
        index = open(index_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a07b8e4bbaa3be9 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:332 
    with open(path, 'rb') as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a557aab16bb5d04 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:380 
                    self._file = open(path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #743870676bee7a0f — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:422 
            with open(path, 'rb') as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #447959a1f6045cf4 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:578 
        self._data_file = open(out_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1325d2859f37c30 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:618 
        with open(data_file_path(another_file), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1bc3ddb89d1992f — Environment-variable access.
repo/deepspeed/runtime/engine.py:1519 
        if "OMPI_COMM_WORLD_LOCAL_RANK" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #955f8abd6c8816a9 — Environment-variable access.
repo/deepspeed/runtime/engine.py:1520 
            ompi_local_rank = os.environ.get("OMPI_COMM_WORLD_LOCAL_RANK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ab658d9dfe81861 — Environment-variable access.
repo/deepspeed/runtime/engine.py:1521 
            local_rank = os.environ.get('LOCAL_RANK', ompi_local_rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67125e787bffc3e6 — Environment-variable access.
repo/deepspeed/runtime/engine.py:1524 
            os.environ['LOCAL_RANK'] = local_rank

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0cd39e707759de2c — Environment-variable access.
repo/deepspeed/runtime/engine.py:1526 
        self.local_rank = int(os.environ['LOCAL_RANK'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6ae76f435555817 — Environment-variable access.
repo/deepspeed/runtime/engine.py:1532 
        assert "LOCAL_RANK" in os.environ or "OMPI_COMM_WORLD_LOCAL_RANK" in os.environ, "DeepSpeed requires the LOCAL_RANK environment " \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #453c1a9f9a4ba552 — Environment-variable access.
repo/deepspeed/runtime/engine.py:1540 
                env_local_rank = int(os.environ.get("LOCAL_RANK"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47d9d503e78faa3f — Filesystem access.
repo/deepspeed/runtime/engine.py:4112 
                with open(latest_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42ff547114106cd9 — Filesystem access.
repo/deepspeed/runtime/engine.py:4646 
                with open(os.path.join(save_dir, 'latest'), 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87c064e83558df29 — Filesystem access.
repo/deepspeed/runtime/engine.py:4664 
            with open(os.path.join(commit_info.save_dir, 'latest'), 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cbd88410891fee1a — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:71 
                                 local_rank=int(os.environ[LOCAL_RANK]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18fb3f9aa3798ad2 — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:76 
                                 num_machines=int(os.environ[CROSS_SIZE]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #481bb3a0728173e1 — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:77 
                                 machine_rank=int(os.environ[CROSS_RANK]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80d293b7e54ea605 — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:78 
                                 num_sockets=int(os.environ[CROSS_SIZE]) * SOCKETS_PER_MACHINE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f1f81036f23e36c — Environment-variable access.
repo/deepspeed/runtime/pipe/module.py:166 
        self.local_rank = int(os.environ.get("LOCAL_RANK", None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9f3ab00792f28ad — Filesystem access.
repo/deepspeed/runtime/state_dict_factory.py:26 
            with open(json_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eeb50d6776c53288 — Filesystem access.
repo/deepspeed/runtime/tensor_parallel/init_utils.py:24 
            return hjson.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a6e28efc8d755d8 — Environment-variable access.
repo/deepspeed/runtime/zenflow/zenflow_utils.py:119 
    os.environ['OMP_NUM_THREADS'] = str(len(zf_affinity))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07660127d6ae6529 — Environment-variable access.
repo/deepspeed/runtime/zenflow/zenflow_utils.py:188 
    os.environ['OMP_NUM_THREADS'] = str(len(pt_affinity))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #540fc06574f29224 — Environment-variable access.
repo/deepspeed/runtime/zero/mics_utils.py:62 
    ndevices_per_node = int(os.environ.get("NDEV_PER_NODE", get_accelerator().device_count()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d62e8565e9f467a8 — Environment-variable access.
repo/deepspeed/runtime/zero/partition_parameters.py:1059 
        self.local_device = torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e220ba25cba7b7c — Environment-variable access.
repo/deepspeed/runtime/zero/utils.py:77 
        device=torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"])),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05c2a163ac3efb15 — Environment-variable access.
repo/deepspeed/runtime/zero/utils.py:97 
        device=torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"])),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4a24d66315ac9c0 — Filesystem access.
repo/deepspeed/utils/debug.py:112 
    with open(__file__, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17c05b21474d31d7 — Filesystem access.
repo/deepspeed/utils/debug.py:149 
        fh = open(f"log_rank_{rank}.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33b6161278829c0f — Environment-variable access.
repo/deepspeed/utils/groups.py:149 
    if os.environ.get("TORCH_DISTRIBUTED_DEBUG", "").upper() == "DETAIL":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f96166ad59722d9 — Environment-variable access.
repo/deepspeed/utils/logging.py:49 
        if required_torch_version(min_version=2.6) and os.getenv("DISABLE_LOGS_WHILE_COMPILING", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #555e7fd058aa6fd1 — Environment-variable access.
repo/deepspeed/utils/logging.py:52 
                for item in os.getenv("LOGGER_METHODS_TO_EXCLUDE_FROM_DISABLE", "").split(",")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff462e6b13855efd — Filesystem access.
repo/deepspeed/utils/logging.py:178 
        with open(path, 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b8f82506602f637 — Environment-variable access.
repo/deepspeed/utils/numa.py:107 
    if 'KMP_AFFINITY' in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #582fe2210520a838 — Filesystem access.
repo/deepspeed/utils/zero_to_fp32.py:611 
            with open(latest_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a62f6f4c7faa6c2 — Filesystem access.
repo/deepspeed/utils/zero_to_fp32.py:708 
        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e80d6d1c583c466d — Filesystem access.
repo/docs/code-docs/source/conf.py:28 
with open("../../../version.txt", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8b86b3bbe924c32c — Environment-variable access.
repo/examples/sdma_allgather/test_sdma_allgather_zero3.py:105 
    parser.add_argument("--local_rank", type=int, default=int(os.environ.get("LOCAL_RANK", 0)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #04ad4c3c58d88992 — Environment-variable access.
repo/examples/sdma_allgather/train_qwen3_zero3.py:123 
    max_chunks = int(os.environ.get("QWEN3_MAX_CHUNKS", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2248cc3735f7bb37 — Environment-variable access.
repo/op_builder/builder.py:102 
        elif os.getenv("DS_SKIP_CUDA_CHECK", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2f393c6595c1671 — Filesystem access.
repo/op_builder/builder.py:231 
                with open(rocm_ver_file, 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d02b878bac0b1a40 — Filesystem access.
repo/op_builder/builder.py:242 
                    with open(rocm_ver_file, 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7cba0e483c50300 — Filesystem access.
repo/op_builder/builder.py:347 
            with open(filename, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #531f596d149f265d — Filesystem access.
repo/op_builder/builder.py:352 
                filestderr = open(os.path.join(tempdir, 'stderr.txt'), 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51b58842b0de32ee — Environment-variable access.
repo/op_builder/builder.py:363 
            cflags = shlex.split(os.environ.get('CFLAGS', ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ef5427c782426bd — Environment-variable access.
repo/op_builder/builder.py:368 
            ldflags = shlex.split(os.environ.get('LDFLAGS', ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #09ee097a1904b409 — Environment-variable access.
repo/op_builder/builder.py:561 
        torch_arch_list_present = "TORCH_CUDA_ARCH_LIST" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e85e0163a4a9b008 — Environment-variable access.
repo/op_builder/builder.py:562 
        torch_arch_list = os.environ.get("TORCH_CUDA_ARCH_LIST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96690e4559430cce — Environment-variable access.
repo/op_builder/builder.py:587 
                os.environ["PYTORCH_ROCM_ARCH"] = self.get_rocm_gpu_arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #182a88a185e255b2 — Environment-variable access.
repo/op_builder/builder.py:608 
                os.environ["TORCH_CUDA_ARCH_LIST"] = torch_arch_list

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25784daaee06f278 — Environment-variable access.
repo/op_builder/builder.py:610 
                os.environ.pop("TORCH_CUDA_ARCH_LIST", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c40bc9a49439cb0e — Environment-variable access.
repo/op_builder/builder.py:668 
                arch_string = os.environ.get('TORCH_CUDA_ARCH_LIST', '').strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #104ca8475e0c351e — Environment-variable access.
repo/op_builder/builder.py:693 
            cross_compile_archs_env = os.environ.get('TORCH_CUDA_ARCH_LIST', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed59ef39348a8151 — Environment-variable access.
repo/op_builder/builder.py:737 
        os.environ["TORCH_CUDA_ARCH_LIST"] = ";".join(arch_tokens)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d09b311e61ddfb94 — Environment-variable access.
repo/op_builder/builder.py:806 
                os.environ["PYTORCH_ROCM_ARCH"] = self.get_rocm_gpu_arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #09f370d2739bcb3c — Environment-variable access.
repo/op_builder/builder.py:863 
                nvcc_threads = int(os.getenv("DS_NVCC_THREADS", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d6ff6a999740f33 — Environment-variable access.
repo/op_builder/builder.py:882 
            if os.environ.get('DS_DEBUG_CUDA_BUILD', '0') == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13438db5bba0117c — Environment-variable access.
repo/op_builder/cpu/comm.py:37 
        ccl_root_path = os.environ.get("CCL_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37f246c1ba497569 — Environment-variable access.
repo/op_builder/evoformer_attn.py:22 
        self.cutlass_path = os.environ.get("CUTLASS_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95da94e3a839421a — Environment-variable access.
repo/op_builder/evoformer_attn.py:39 
        if os.environ.get("DS_EVOFORMER_GPU_ARCH"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d83f9abd23609cf — Filesystem access.
repo/op_builder/evoformer_attn.py:78 
                with open(changelog_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cebef6f0b6fe036f — Environment-variable access.
repo/op_builder/evoformer_attn.py:86 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e8b6e3fcdb726bd — Environment-variable access.
repo/op_builder/evoformer_attn.py:121 
            value = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5e38c4f7a85144d — Environment-variable access.
repo/op_builder/fp_quantizer.py:35 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6563b6351d5fa59d — Environment-variable access.
repo/op_builder/inference_core_ops.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85f4bf3af1bf01fa — Environment-variable access.
repo/op_builder/inference_cutlass_builder.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16b1a759c5cabd88 — Environment-variable access.
repo/op_builder/npu/builder.py:42 
        if "ASCEND_HOME_PATH" in os.environ or os.path.exists(os.environ["ASCEND_HOME_PATH"]):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50df2387e640c8db — Environment-variable access.
repo/op_builder/npu/builder.py:43 
            return os.environ["ASCEND_HOME_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #426309b37bd333dc — Filesystem access.
repo/op_builder/npu/builder.py:56 
                with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b523dfaccad1f6a — Environment-variable access.
repo/op_builder/ragged_ops.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5f2a7900269b862 — Environment-variable access.
repo/op_builder/ragged_utils.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e498d6ecfe031776 — Environment-variable access.
repo/op_builder/spatial_inference.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cda8795aa7dfb183 — Environment-variable access.
repo/op_builder/transformer_inference.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9814055b86160003 — Environment-variable access.
repo/op_builder/xpu/builder.py:89 
        if os.environ.get('USE_MKL_GEMM'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bcdae8666ecd74ba — Environment-variable access.
repo/op_builder/xpu/builder.py:152 
            saved_env[var] = os.environ.get(var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8938afa22c67130 — Environment-variable access.
repo/op_builder/xpu/builder.py:153 
        os.environ['CXX'] = 'icpx'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83197537e3f6eddf — Environment-variable access.
repo/op_builder/xpu/builder.py:159 
            lib_path = os.environ.get('LIBRARY_PATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b53af776eed638e — Environment-variable access.
repo/op_builder/xpu/builder.py:160 
            os.environ['LIBRARY_PATH'] = f'{sycl_lib}:{lib_path}' if lib_path else sycl_lib

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da16b0d246839162 — Environment-variable access.
repo/op_builder/xpu/builder.py:162 
            cpath = os.environ.get('CPATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdd65da6c3f0864b — Environment-variable access.
repo/op_builder/xpu/builder.py:163 
            os.environ['CPATH'] = f'{sycl_inc}:{cpath}' if cpath else sycl_inc

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9d646f67808a621 — Environment-variable access.
repo/op_builder/xpu/builder.py:176 
                    os.environ.pop(var, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa63ec4a90b4f186 — Environment-variable access.
repo/op_builder/xpu/builder.py:178 
                    os.environ[var] = val

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bbeec48e806c2133 — Filesystem access.
repo/release/bump_patch_version.py:19 
with open('./version.txt', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #739852237ff6deaf — Filesystem access.
repo/release/check_release_version.py:17 
with open('./version.txt') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0d32c70b9a3e688 — Filesystem access.
repo/scripts/replace_copyright.py:66 
    with open(fp, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78ac07cd635a9708 — Filesystem access.
repo/scripts/replace_copyright.py:103 
    with open(fp, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa5f9431825ec685 — Filesystem access.
repo/scripts/replace_copyright.py:132 
    with open(fp, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53fe48393ded6e86 — Filesystem access.
repo/scripts/replace_copyright.py:203 
    with open(fp, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d752584c2ab0b2d6 — Filesystem access.
repo/setup.py:61 
    with open(path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63e31fcdbab3aef4 — Environment-variable access.
repo/setup.py:69 
    return bool(os.environ.get(key, None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7970a7589c756b5 — Environment-variable access.
repo/setup.py:78 
    return os.environ.get(key, None) or default

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30c33608008ffc3c — Environment-variable access.
repo/setup.py:148 
        os.environ["TORCH_CUDA_ARCH_LIST"] = get_default_compute_capabilities()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #508e9c8c63722faf — Filesystem access.
repo/setup.py:239 
version_str = open('version.txt', 'r').read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bcee33ac7eb6759e — Filesystem access.
repo/setup.py:247 
    with open('build.txt', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46bab250667ffa33 — Environment-variable access.
repo/setup.py:248 
        fd.write(os.environ['DS_BUILD_STRING'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f250a9efcdf75ac0 — Environment-variable access.
repo/setup.py:249 
    version_str += os.environ['DS_BUILD_STRING']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #541715965afac7a4 — Filesystem access.
repo/setup.py:252 
    with open('build.txt', 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0ccdaf542600d41 — Filesystem access.
repo/setup.py:286 
with open('deepspeed/git_version_info_installed.py', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #923cfc53a3218c01 — Filesystem access.
repo/setup.py:299 
with open(os.path.join(thisdir, 'README.md'), encoding='utf-8') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.