Close Open Privacy Scan

link https://github.com/streamlit/streamlit
bolt Snapshot: commit 44ee7b7
science engine v3
schedule 2026-07-13T00:26:48.355176+00:00

verified_user Application data leak confirmed

High-confidence data exfiltration identified in application code.

App Privacy Score

22 /100
High privacy risk — application leak confirmed

High risk · 934 finding(s)

Dependency score: 37 (High risk)

bar_chart Score Breakdown

pii_flow −60
egress −15
env_fs −3

list Scan Summary

6 high 0 medium 928 low
First-party packages: 2
Dependency packages: 22
Ecosystem: python

swap_horiz Confirmed data exfiltration in application code

External domains: data.streamlit.iodocs.streamlit.io

high pyarrow User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:60 → pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:62
high pyarrow User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:74 → pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:76
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/create_release.py:29 → repo/scripts/create_release.py:38
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/create_release.py:28 → repo/scripts/create_release.py:47
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/create_release.py:28 → repo/scripts/create_release.py:56
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/slack_notifications.py:64 → repo/scripts/slack_notifications.py:252

</> First-Party Code

first-party (python)

python first-party
high pii_flow production #e86de3ab2db55f8c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/create_release.py:38 · flow /tmp/closeopen-7pugiy1o/repo/scripts/create_release.py:29 → /tmp/closeopen-7pugiy1o/repo/scripts/create_release.py:38 
    response = requests.get(f"{url}/latest", headers=header)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #117029c6b4dd01e7 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/create_release.py:47 · flow /tmp/closeopen-7pugiy1o/repo/scripts/create_release.py:28 → /tmp/closeopen-7pugiy1o/repo/scripts/create_release.py:47 
    response = requests.post(f"{url}/generate-notes", json=payload, headers=header)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #ac9ebc22623a980d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/create_release.py:56 · flow /tmp/closeopen-7pugiy1o/repo/scripts/create_release.py:28 → /tmp/closeopen-7pugiy1o/repo/scripts/create_release.py:56 
    response = requests.post(url, json=payload, headers=header)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5030084827016387 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/slack_notifications.py:252 · flow /tmp/closeopen-7pugiy1o/repo/scripts/slack_notifications.py:64 → /tmp/closeopen-7pugiy1o/repo/scripts/slack_notifications.py:252 
        response = requests.post(webhook, json=payload)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 595 low-confidence finding(s)
low env_fs production #d8ac897d89add9f1 — Environment-variable access.
repo/e2e_playwright/config_arrow_truncation_test.py:25 
    os.environ["STREAMLIT_SERVER_ENABLE_ARROW_TRUNCATION"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #412e50562887fba8 — Environment-variable access.
repo/e2e_playwright/config_arrow_truncation_test.py:26 
    os.environ["STREAMLIT_SERVER_MAX_MESSAGE_SIZE"] = "3"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a131069f6398585 — Environment-variable access.
repo/e2e_playwright/config_arrow_truncation_test.py:28 
    del os.environ["STREAMLIT_SERVER_ENABLE_ARROW_TRUNCATION"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9aa61ba01f4cc7f — Environment-variable access.
repo/e2e_playwright/config_arrow_truncation_test.py:29 
    del os.environ["STREAMLIT_SERVER_MAX_MESSAGE_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4da4ffae6abfb21 — Environment-variable access.
repo/e2e_playwright/conftest.py:229 
    env_raw_value = os.getenv(env_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f57d535ddb03b3bf — Environment-variable access.
repo/e2e_playwright/conftest.py:354 
            env={**os.environ.copy(), **self.env},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dab9587dc3ab90a9 — Environment-variable access.
repo/e2e_playwright/conftest.py:1311 
        pytestconfig.getoption("workerinput", None) or os.getenv("PYTEST_XDIST_WORKER"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34a7b747bb2d1c1e — Environment-variable access.
repo/e2e_playwright/conftest.py:1779 
    env = {**os.environ.copy(), **(extra_env or {})}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e800982278251d6 — Filesystem access.
repo/e2e_playwright/hostframe_app_test.py:39 
HOSTFRAME_TEST_HTML: Final[str] = (STATIC_DIR / "hostframe.html").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8773de2a93aa8130 — Filesystem access.
repo/e2e_playwright/iframe_resizer_test.py:36 
IFRAME_RESIZER_SCRIPT: Final[str] = (STATIC_DIR / "iframerResizer.min.js").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7afef9f124cd38c8 — Environment-variable access.
repo/e2e_playwright/load_testing/conftest.py:94 
                "runner": os.environ.get("GITHUB_RUNNER", "local"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #573d68a685b971d7 — Filesystem access.
repo/e2e_playwright/load_testing/conftest.py:102 
        with open(filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #829a0395350ce325 — Environment-variable access.
repo/e2e_playwright/load_testing/conftest.py:202 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2dd22db9eb0078e8 — Filesystem access.
repo/e2e_playwright/load_testing/generate_report.py:46 
        with open(combined_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fd53b7161fc1ebe — Filesystem access.
repo/e2e_playwright/load_testing/generate_report.py:55 
        with open(filepath, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a06ff190d8b1f457 — Filesystem access.
repo/e2e_playwright/load_testing/generate_report.py:76 
            with open(first_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1d4cf6b3e977631 — Filesystem access.
repo/e2e_playwright/load_testing/generate_report.py:248 
    with open(args.output, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #954eabcd9e70175c — Environment-variable access.
repo/e2e_playwright/multipage_apps/mpa_configure_sidebar_test.py:30 
    os.environ["STREAMLIT_CLIENT_SHOW_SIDEBAR_NAVIGATION"] = "False"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82d888270af24f62 — Environment-variable access.
repo/e2e_playwright/multipage_apps/mpa_configure_sidebar_test.py:32 
    del os.environ["STREAMLIT_CLIENT_SHOW_SIDEBAR_NAVIGATION"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #350ddff8833fd98f — Environment-variable access.
repo/e2e_playwright/multipage_apps/mpa_v2_custom_theme_test.py:29 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "#BB1010"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7f7ccd21b0c61ea — Environment-variable access.
repo/e2e_playwright/multipage_apps/mpa_v2_custom_theme_test.py:30 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#0E0E0E"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8843a9e865f714a9 — Environment-variable access.
repo/e2e_playwright/multipage_apps/mpa_v2_custom_theme_test.py:32 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5c10c6571714aa2 — Environment-variable access.
repo/e2e_playwright/multipage_apps/mpa_v2_custom_theme_test.py:33 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf5b3cd9436078e6 — Filesystem access.
repo/e2e_playwright/shared/performance.py:254 
        with open(
            os.path.join(performance_results_dir, f"{timestamp}_{test_name}.json"),
            "w",
            encoding="utf-8",
        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #909b2360d16ea0f4 — Environment-variable access.
repo/e2e_playwright/shared/stats_reporter.py:128 
    return os.getenv("PYTEST_XDIST_WORKER", "primary")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9332609403ce38c — Environment-variable access.
repo/e2e_playwright/shared/stats_reporter.py:416 
            "ci": os.getenv("CI", "false").lower() == "true",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #545c72dae3f6591d — Environment-variable access.
repo/e2e_playwright/shared/stats_reporter.py:417 
            "github_run_id": os.getenv("GITHUB_RUN_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e127f30ac3f58e68 — Environment-variable access.
repo/e2e_playwright/shared/stats_reporter.py:418 
            "github_sha": os.getenv("GITHUB_SHA"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f9d600af29a0c5a — Environment-variable access.
repo/e2e_playwright/shared/stats_reporter.py:419 
            "github_ref": os.getenv("GITHUB_REF"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #614329ac3a0f8bf4 — Filesystem access.
repo/e2e_playwright/shared/stats_reporter.py:569 
            with open(self.output_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a62e32506bc213d5 — Filesystem access.
repo/e2e_playwright/skills_nudge_test.py:65 
    (streamlit_dir / "credentials.toml").write_text('[general]\nemail = ""\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2fa34edc89fac5c0 — Environment-variable access.
repo/e2e_playwright/st_app_advanced_script.py:90 
st.write(f"API Key from environ: {os.environ.get('api_key', 'NOT SET')}")  # noqa: SIM112

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #161d0d0bf3926e17 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/e2e_playwright/st_audio.py:28 
file = requests.get(url1).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #14044a4569714936 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/e2e_playwright/st_cache_data.py:71 
    file = requests.get(url).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #e5fdd41f4ac20d2e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/e2e_playwright/st_cache_data.py:78 
    file = requests.get(url).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7fb0c69b428a76db — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:40 
    os.environ["STREAMLIT_THEME_BASE"] = "dark"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b18f88c95c74689 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:41 
    os.environ["STREAMLIT_THEME_RED_COLOR"] = "#ffb3b3"  # Pale pink-red

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30bd4e3f2abfd7c3 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:42 
    os.environ["STREAMLIT_THEME_ORANGE_COLOR"] = "#ffd9b3"  # Pale peach

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f7ac090e0eac820 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:43 
    os.environ["STREAMLIT_THEME_YELLOW_COLOR"] = "#ffffb3"  # Pale cream

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9bc3cdbc9fa8557 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:44 
    os.environ["STREAMLIT_THEME_GREEN_COLOR"] = "#b3ffb3"  # Pale mint

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bbce127510244d7f — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:45 
    os.environ["STREAMLIT_THEME_BLUE_COLOR"] = "#b3d9ff"  # Pale sky blue

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ea06cab1e760bf9 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:46 
    os.environ["STREAMLIT_THEME_VIOLET_COLOR"] = "#d9b3ff"  # Pale lavender

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00486c5353259286 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:47 
    os.environ["STREAMLIT_THEME_GRAY_COLOR"] = "#d9d9d9"  # Light silver

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47dc459e6edfbe93 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:48 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#ffb3d9"  # Pale pink

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2df215214b39331 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:50 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8156d177574476df — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:51 
    del os.environ["STREAMLIT_THEME_RED_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77fab6eb4010a217 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:52 
    del os.environ["STREAMLIT_THEME_ORANGE_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #517d2042d560d488 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:53 
    del os.environ["STREAMLIT_THEME_YELLOW_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce5403c86934e06d — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:54 
    del os.environ["STREAMLIT_THEME_GREEN_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84563597cbeb5e8e — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:55 
    del os.environ["STREAMLIT_THEME_BLUE_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2a1bcba93211dbd — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:56 
    del os.environ["STREAMLIT_THEME_VIOLET_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0e583eb04cb00e2 — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:57 
    del os.environ["STREAMLIT_THEME_GRAY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a8b85eec8b7fefc — Environment-variable access.
repo/e2e_playwright/st_chart_builtin_colors_test.py:58 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6359f6a322382e59 — Filesystem access.
repo/e2e_playwright/st_dataframe_config.py:38 
    data = file_path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70543d49fa7c6dca — Filesystem access.
repo/e2e_playwright/st_dataframe_interactions_test.py:428 
    with open(download_path, encoding="UTF-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fc36d55c0ccb689 — Filesystem access.
repo/e2e_playwright/st_download_button.py:48 
with open(CAT_IMAGE, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61721e370795de92 — Filesystem access.
repo/e2e_playwright/st_download_button_deferred_test.py:33 
    content = download.path().read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6023809576c01980 — Filesystem access.
repo/e2e_playwright/st_download_button_deferred_test.py:53 
    content = download.path().read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cad581009b69da7c — Filesystem access.
repo/e2e_playwright/st_download_button_deferred_test.py:72 
    content = download.path().read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de7e8ca52ad67244 — Filesystem access.
repo/e2e_playwright/st_download_button_deferred_test.py:103 
    assert download.path().read_text() == "No rerun content"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4979b9e4bdf360c4 — Filesystem access.
repo/e2e_playwright/st_download_button_deferred_test.py:122 
    assert download.path().read_text() == "This is regular string data"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3981615d5e0217e1 — Filesystem access.
repo/e2e_playwright/st_download_button_test.py:152 
    file_text = download.path().read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0affdafcdf4b7280 — Filesystem access.
repo/e2e_playwright/st_download_button_test.py:237 
    file_text = download.path().read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b072d1c6c076ea26 — Filesystem access.
repo/e2e_playwright/st_download_button_test.py:324 
    assert download.path().read_text() == "Updated data"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fd9ff652bbcaa8c — Environment-variable access.
repo/e2e_playwright/st_main_layout.py:20 
test_mode = os.environ.get("STREAMLIT_SIDEBAR_TEST_MODE", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1e87e96c9077461 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:31 
    os.environ["STREAMLIT_THEME_RED_COLOR"] = "#750000"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b14caa91da6a4f8 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:32 
    os.environ["STREAMLIT_THEME_GREEN_COLOR"] = "#008000"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2375b78a2dc380ed — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:33 
    os.environ["STREAMLIT_THEME_GRAY_COLOR"] = "#525252"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af8592b9d4d4e6f0 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:36 
    os.environ["STREAMLIT_THEME_RED_BACKGROUND_COLOR"] = "#ffc7c7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #069a60f3dbc748e7 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:37 
    os.environ["STREAMLIT_THEME_ORANGE_BACKGROUND_COLOR"] = "#fdae44"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4be3331ec375bc06 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:38 
    os.environ["STREAMLIT_THEME_YELLOW_BACKGROUND_COLOR"] = "#fde992"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3132c7f53c3b1ee8 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:39 
    os.environ["STREAMLIT_THEME_BLUE_BACKGROUND_COLOR"] = "#6495ED"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df5f33d57d951a4b — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:40 
    os.environ["STREAMLIT_THEME_GREEN_BACKGROUND_COLOR"] = "#9dc183"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21925ddc964fcb95 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:41 
    os.environ["STREAMLIT_THEME_VIOLET_BACKGROUND_COLOR"] = "#9E7BB5"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b496743dfb4b64fb — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:42 
    os.environ["STREAMLIT_THEME_GRAY_BACKGROUND_COLOR"] = "#A7A6BA"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f69ebc598273f21b — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:43 
    os.environ["STREAMLIT_THEME_SIDEBAR_RED_BACKGROUND_COLOR"] = "#9d2933"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1df9e1f49f1c2d87 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:44 
    os.environ["STREAMLIT_THEME_SIDEBAR_ORANGE_BACKGROUND_COLOR"] = "#fed8b1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a0d7b5e2e199c16 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:45 
    os.environ["STREAMLIT_THEME_SIDEBAR_YELLOW_BACKGROUND_COLOR"] = "#ffffe0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c70c065b3532f67 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:46 
    os.environ["STREAMLIT_THEME_SIDEBAR_BLUE_BACKGROUND_COLOR"] = "#87afc7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b6ba0dffdf72baa — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:47 
    os.environ["STREAMLIT_THEME_SIDEBAR_GREEN_BACKGROUND_COLOR"] = "#d8e4bc"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2cc41ab2b548a130 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:48 
    os.environ["STREAMLIT_THEME_SIDEBAR_VIOLET_BACKGROUND_COLOR"] = "#D8BFD8"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b44506497f48f86d — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:49 
    os.environ["STREAMLIT_THEME_SIDEBAR_GRAY_BACKGROUND_COLOR"] = "#DCDCDC"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8de543dc914b2d5f — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:51 
    del os.environ["STREAMLIT_THEME_RED_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e654ef3e5767a724 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:52 
    del os.environ["STREAMLIT_THEME_GREEN_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #09b9c0f876152ed1 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:53 
    del os.environ["STREAMLIT_THEME_GRAY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdc3906f0fb6b358 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:54 
    del os.environ["STREAMLIT_THEME_RED_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b83c594e32e1ec1d — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:55 
    del os.environ["STREAMLIT_THEME_ORANGE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47e1c45a00cbf224 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:56 
    del os.environ["STREAMLIT_THEME_YELLOW_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ace76b431231d289 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:57 
    del os.environ["STREAMLIT_THEME_BLUE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3569cda00c60a4cd — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:58 
    del os.environ["STREAMLIT_THEME_GREEN_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcfae309e9927f9f — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:59 
    del os.environ["STREAMLIT_THEME_VIOLET_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5edd8c0bcc8bb74 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:60 
    del os.environ["STREAMLIT_THEME_GRAY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07b6e336e277880c — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:61 
    del os.environ["STREAMLIT_THEME_SIDEBAR_RED_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a709f44665e2e836 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:62 
    del os.environ["STREAMLIT_THEME_SIDEBAR_ORANGE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e548839f130ac094 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:63 
    del os.environ["STREAMLIT_THEME_SIDEBAR_YELLOW_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8bc00c6f8eb69b6 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:64 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BLUE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5261bb578716292b — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:65 
    del os.environ["STREAMLIT_THEME_SIDEBAR_GREEN_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37481769889392e6 — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:66 
    del os.environ["STREAMLIT_THEME_SIDEBAR_VIOLET_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02940fb70c4de56e — Environment-variable access.
repo/e2e_playwright/theming/custom_background_colors_test.py:67 
    del os.environ["STREAMLIT_THEME_SIDEBAR_GRAY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc2b833a8fa2ab5b — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:52 
    os.environ["STREAMLIT_THEME_BASE"] = "dark"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #512ac33e83d3b6ea — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:53 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bbbd767384a6cef — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:54 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#004cbe"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f375b1f4b7cf9187 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:55 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "#bdc4d5"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e329d149e2eb19d — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:58 
    os.environ["STREAMLIT_THEME_DARK_BACKGROUND_COLOR"] = "#191e24"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bed8220d5b1ad836 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:59 
    os.environ["STREAMLIT_THEME_DARK_SECONDARY_BACKGROUND_COLOR"] = "#0f161e"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #070cf9dcc2014705 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:60 
    os.environ["STREAMLIT_THEME_DARK_BORDER_COLOR"] = "#293246"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #625543a03c6d3524 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:61 
    os.environ["STREAMLIT_THEME_DARK_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27bd233204d64f0f — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:65 
    os.environ["STREAMLIT_THEME_DARK_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fc18d725a5a4123 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:69 
    os.environ["STREAMLIT_THEME_DARK_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b0aacbad9213c03 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:74 
    os.environ["STREAMLIT_THEME_SIDEBAR_TEXT_COLOR"] = "#091c36"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e29b6cbf7db132b1 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:75 
    os.environ["STREAMLIT_THEME_SIDEBAR_BACKGROUND_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f229e77b807e621 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:78 
    os.environ["STREAMLIT_THEME_SIDEBAR_SECONDARY_BACKGROUND_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af72f7c091c5f0b8 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:81 
    os.environ["STREAMLIT_THEME_SIDEBAR_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed1fa804f47a0fb4 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:85 
    os.environ["STREAMLIT_THEME_SIDEBAR_DATAFRAME_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ec13894b5bbaf55 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:90 
    os.environ["STREAMLIT_THEME_DARK_SIDEBAR_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a19c789a9c94c52 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:93 
    os.environ["STREAMLIT_THEME_DARK_SIDEBAR_LINK_COLOR"] = "#CD1C18"  # chili red

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e3ecf5655c34a08 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:95 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81401dbaa08a2642 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:96 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #03573e989fdd5744 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:97 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58ee7273eddbf9b5 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:98 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2f1c0578df85feb — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:99 
    del os.environ["STREAMLIT_THEME_DARK_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6dbdd16b919eba4 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:100 
    del os.environ["STREAMLIT_THEME_DARK_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #906a96be2d9265d8 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:101 
    del os.environ["STREAMLIT_THEME_DARK_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #960791013df1a598 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:102 
    del os.environ["STREAMLIT_THEME_DARK_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd868ab4b00ae099 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:103 
    del os.environ["STREAMLIT_THEME_DARK_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bdf8f608d4cfc160 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:104 
    del os.environ["STREAMLIT_THEME_DARK_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #771f4f1654043b18 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:105 
    del os.environ["STREAMLIT_THEME_SIDEBAR_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92571db17599a6c3 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:106 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e8d0b733588a697 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:107 
    del os.environ["STREAMLIT_THEME_SIDEBAR_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3dc39324d3929655 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:108 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e7d12c3acc17392 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:109 
    del os.environ["STREAMLIT_THEME_SIDEBAR_DATAFRAME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72b479a28759e704 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:110 
    del os.environ["STREAMLIT_THEME_DARK_SIDEBAR_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64bfce37e6494328 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_sidebar_theme_test.py:111 
    del os.environ["STREAMLIT_THEME_DARK_SIDEBAR_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18d8288499cf8c71 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:53 
    os.environ["STREAMLIT_THEME_BASE"] = "dark"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #480f7fbde6a30c42 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:54 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#004cbe"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #430de378ebec853d — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:55 
    os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"] = "#191e24"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6549acb509021c76 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:56 
    os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"] = "#0f161e"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d3b155a7a2c82b0 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:57 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "#bdc4d5"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #879c4d3ae7cb9b6c — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:58 
    os.environ["STREAMLIT_THEME_BORDER_COLOR"] = "#293246"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40ae8c693fb9e368 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:59 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b503114992097d7 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:60 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7ca9016abd140dd — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:64 
    os.environ["STREAMLIT_THEME_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ca60339c7c2dfa7 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:68 
    os.environ["STREAMLIT_THEME_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f341a404b8dbf83 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:73 
    os.environ["STREAMLIT_THEME_DARK_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52a0184fa8b82bc2 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:76 
    os.environ["STREAMLIT_THEME_DARK_CODE_FONT_SIZE"] = "13px"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3a3d01eeccec8fa — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:77 
    os.environ["STREAMLIT_THEME_DARK_CODE_TEXT_COLOR"] = "#d4c6f5"  # lavender

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f113e33d23479eb — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:78 
    os.environ["STREAMLIT_THEME_DARK_LINK_COLOR"] = "#CD1C18"  # chili red

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5548a7d0bd318e8 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:80 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57ff4039d55badea — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:81 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce9f8c940d2a6354 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:82 
    del os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b181165e1696496 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:83 
    del os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3ee0820e8401c16 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:84 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6a0548f926ffc13 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:85 
    del os.environ["STREAMLIT_THEME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cea4baf7c42bd0b — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:86 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4dc2b5a79a4ad14 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:87 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6dc1209af0be220b — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:88 
    del os.environ["STREAMLIT_THEME_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad2e90b440519bb5 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:89 
    del os.environ["STREAMLIT_THEME_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06f0b2ecd22454db — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:90 
    del os.environ["STREAMLIT_THEME_DARK_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e189cad481313a2 — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:91 
    del os.environ["STREAMLIT_THEME_DARK_CODE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79154f32df0216ef — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:92 
    del os.environ["STREAMLIT_THEME_DARK_CODE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9da5e468c209458a — Environment-variable access.
repo/e2e_playwright/theming/custom_dark_theme_test.py:93 
    del os.environ["STREAMLIT_THEME_DARK_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27ff07e799535078 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:30 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2fb8b4fc37328f71 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:31 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#1a6ce7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98d0d32c23995a08 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:32 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "#1e252f"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adba5ce546d5c143 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:35 
    os.environ["STREAMLIT_THEME_LIGHT_BACKGROUND_COLOR"] = "#ffffff"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1599c05db43e9b59 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:36 
    os.environ["STREAMLIT_THEME_LIGHT_SECONDARY_BACKGROUND_COLOR"] = "#f7f7f7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91986a16f5dc95ae — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:37 
    os.environ["STREAMLIT_THEME_LIGHT_BORDER_COLOR"] = "#d5dae4"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #babbf6d75248a0f3 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:38 
    os.environ["STREAMLIT_THEME_LIGHT_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #facd09f85403cc7d — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:42 
    os.environ["STREAMLIT_THEME_LIGHT_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82f7fac98c39a687 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:46 
    os.environ["STREAMLIT_THEME_LIGHT_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd675cf9deba5a20 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:51 
    os.environ["STREAMLIT_THEME_SIDEBAR_BACKGROUND_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85f92f9b43bf8252 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:54 
    os.environ["STREAMLIT_THEME_SIDEBAR_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a9a0d511f8936ef — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:57 
    os.environ["STREAMLIT_THEME_SIDEBAR_DATAFRAME_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7dba719bf682d934 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:62 
    os.environ["STREAMLIT_THEME_LIGHT_SIDEBAR_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c121ef768eae8355 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:65 
    os.environ["STREAMLIT_THEME_LIGHT_SIDEBAR_LINK_COLOR"] = "#7851A9"  # royal purple

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cdee2a9685affe00 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:67 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9731dc57c583bd7 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:68 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfd94f4b87c024e1 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:69 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fe773ddb63cb9aa — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:70 
    del os.environ["STREAMLIT_THEME_LIGHT_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ca0d202f772c156 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:71 
    del os.environ["STREAMLIT_THEME_LIGHT_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9be3680224bf20cb — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:72 
    del os.environ["STREAMLIT_THEME_LIGHT_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f503c75193bbd06 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:73 
    del os.environ["STREAMLIT_THEME_LIGHT_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a09351e8bff0f886 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:74 
    del os.environ["STREAMLIT_THEME_LIGHT_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #897b5c7a98f2500c — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:75 
    del os.environ["STREAMLIT_THEME_LIGHT_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5117476c2f9171f6 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:76 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #961ef52056951d61 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:77 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b78655b8371ea5ca — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:78 
    del os.environ["STREAMLIT_THEME_SIDEBAR_DATAFRAME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #415915390ca09536 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:79 
    del os.environ["STREAMLIT_THEME_LIGHT_SIDEBAR_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eae3b4ff07d3d7a5 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_sidebar_theme_test.py:80 
    del os.environ["STREAMLIT_THEME_LIGHT_SIDEBAR_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3646e839098fe2e4 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:34 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#1a6ce7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0097bff49979588 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:35 
    os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"] = "#ffffff"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c04e6ee7a3e6fb68 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:36 
    os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"] = "#f7f7f7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ae53c0be3a3e95f — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:37 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "#1e252f"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #361e1eb62ee2297d — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:38 
    os.environ["STREAMLIT_THEME_BORDER_COLOR"] = "#d5dae4"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e9d65057d8007b4 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:39 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e281d7a42f06ddbb — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:40 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a385a55ca28da275 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:44 
    os.environ["STREAMLIT_THEME_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a389a0d9e647d45 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:48 
    os.environ["STREAMLIT_THEME_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f95c3f9beecbe6a — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:53 
    os.environ["STREAMLIT_THEME_LIGHT_BORDER_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd08c4b2b8a6f39c — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:56 
    os.environ["STREAMLIT_THEME_LIGHT_CODE_FONT_SIZE"] = "13px"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5610c20ae225799 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:57 
    os.environ["STREAMLIT_THEME_LIGHT_CODE_TEXT_COLOR"] = "#FF69B4"  # hot pink

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f88a34202c4e66b — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:58 
    os.environ["STREAMLIT_THEME_LIGHT_LINK_COLOR"] = "#89CFF0"  # baby blue

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b42db86ddff5bb2 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:60 
    os.environ["STREAMLIT_THEME_DARK_PRIMARY_COLOR"] = "#228B22"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb756d8537bc9786 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:61 
    os.environ["STREAMLIT_THEME_DARK_BORDER_COLOR"] = "#ff6700"  # hazard orange

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #669c7fc033a1fe57 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:62 
    os.environ["STREAMLIT_THEME_DARK_CODE_FONT_SIZE"] = "13px"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d21c2404aff1b7f — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:63 
    os.environ["STREAMLIT_THEME_DARK_CODE_TEXT_COLOR"] = "#FF69B4"  # hot pink

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f546589bcc1d7223 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:64 
    os.environ["STREAMLIT_THEME_DARK_LINK_COLOR"] = "#89CFF0"  # baby blue

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e6297a1f73f522f — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:66 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f89751a22831f2b — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:67 
    del os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75b8c8d2fc96bad6 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:68 
    del os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3473d6045d501601 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:69 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e2d8c3e5fc0aef3 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:70 
    del os.environ["STREAMLIT_THEME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef29e709208c0e9c — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:71 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfc5403411c678f1 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:72 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53ae21a87f92a969 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:73 
    del os.environ["STREAMLIT_THEME_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a61e7046c4cc5cfd — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:74 
    del os.environ["STREAMLIT_THEME_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4087e0386f811211 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:75 
    del os.environ["STREAMLIT_THEME_LIGHT_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cda58169382fd849 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:76 
    del os.environ["STREAMLIT_THEME_LIGHT_CODE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72e860e46a9eda1d — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:77 
    del os.environ["STREAMLIT_THEME_LIGHT_CODE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c942a19f4a69dc4d — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:78 
    del os.environ["STREAMLIT_THEME_LIGHT_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c0be5f6efecfe4f — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:79 
    del os.environ["STREAMLIT_THEME_DARK_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bb7b1e06efbd0f0 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:80 
    del os.environ["STREAMLIT_THEME_DARK_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e0f632020fe4015 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:81 
    del os.environ["STREAMLIT_THEME_DARK_CODE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02928c78d13c8271 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:82 
    del os.environ["STREAMLIT_THEME_DARK_CODE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7293396f869e1016 — Environment-variable access.
repo/e2e_playwright/theming/custom_light_theme_test.py:83 
    del os.environ["STREAMLIT_THEME_DARK_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05e29bb580938d65 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:29 
    os.environ["STREAMLIT_THEME_RED_COLOR"] = "#7d353b"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #faa01c8333305d39 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:30 
    os.environ["STREAMLIT_THEME_ORANGE_COLOR"] = "#d95a00"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fcfc857de2bc775 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:31 
    os.environ["STREAMLIT_THEME_YELLOW_COLOR"] = "#916e10"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec2cb2c6a0aabbb1 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:32 
    os.environ["STREAMLIT_THEME_BLUE_COLOR"] = "#004280"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a81b6ac8f285796d — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:33 
    os.environ["STREAMLIT_THEME_GREEN_COLOR"] = "#177233"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4aeaf7849d3e6691 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:34 
    os.environ["STREAMLIT_THEME_VIOLET_COLOR"] = "#583f84"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b24fad3614c7467 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:35 
    os.environ["STREAMLIT_THEME_GRAY_COLOR"] = "#0e1117"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74df84129dda4321 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:36 
    os.environ["STREAMLIT_THEME_SIDEBAR_RED_COLOR"] = "#ffc7c7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ca154c57c82e825 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:37 
    os.environ["STREAMLIT_THEME_SIDEBAR_ORANGE_COLOR"] = "#ffd16a"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93591f2b5c53e2bd — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:38 
    os.environ["STREAMLIT_THEME_SIDEBAR_YELLOW_COLOR"] = "#ffffa0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d2552f043e1f124 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:39 
    os.environ["STREAMLIT_THEME_SIDEBAR_BLUE_COLOR"] = "#a6dcff"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba1f82b365469bf2 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:40 
    os.environ["STREAMLIT_THEME_SIDEBAR_GREEN_COLOR"] = "#9ef6bb"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd206aaf3f255a7b — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:41 
    os.environ["STREAMLIT_THEME_SIDEBAR_VIOLET_COLOR"] = "#dbbbff"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fcba3965882ca5e — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:42 
    os.environ["STREAMLIT_THEME_SIDEBAR_GRAY_COLOR"] = "#e6eaf1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4d3ae25d15dd2ca — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:47 
    del os.environ["STREAMLIT_THEME_RED_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eed174a2f7526c7a — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:48 
    del os.environ["STREAMLIT_THEME_ORANGE_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59c65ac8d073d962 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:49 
    del os.environ["STREAMLIT_THEME_YELLOW_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f5ab1e21efa7b74 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:50 
    del os.environ["STREAMLIT_THEME_BLUE_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a2d6b6eef87671e — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:51 
    del os.environ["STREAMLIT_THEME_GREEN_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0cfd4cbeabbb3117 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:52 
    del os.environ["STREAMLIT_THEME_VIOLET_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ff4abddf2b3987a — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:53 
    del os.environ["STREAMLIT_THEME_GRAY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a097d01164bce1cf — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:54 
    del os.environ["STREAMLIT_THEME_SIDEBAR_RED_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4889afd3b9096baf — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:55 
    del os.environ["STREAMLIT_THEME_SIDEBAR_ORANGE_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b4f380681cc7a5e — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:56 
    del os.environ["STREAMLIT_THEME_SIDEBAR_YELLOW_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73fab26dace756f7 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:57 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BLUE_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb0804fbf5df869c — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:58 
    del os.environ["STREAMLIT_THEME_SIDEBAR_GREEN_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #344f4bbadf96295c — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:59 
    del os.environ["STREAMLIT_THEME_SIDEBAR_VIOLET_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f28622cad5e2705 — Environment-variable access.
repo/e2e_playwright/theming/custom_main_colors_test.py:60 
    del os.environ["STREAMLIT_THEME_SIDEBAR_GRAY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c80869acaa1442f3 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:30 
    os.environ["STREAMLIT_THEME_RED_TEXT_COLOR"] = "#e74c3c"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f52ed69b3558e50 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:31 
    os.environ["STREAMLIT_THEME_ORANGE_TEXT_COLOR"] = "#f39c12"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f671997bfa557e80 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:32 
    os.environ["STREAMLIT_THEME_YELLOW_TEXT_COLOR"] = "#f1c40f"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8b8fa0c3aa8ede2 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:33 
    os.environ["STREAMLIT_THEME_BLUE_TEXT_COLOR"] = "#3498db"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72912c7efc70c12c — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:34 
    os.environ["STREAMLIT_THEME_GREEN_TEXT_COLOR"] = "#27ae60"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6eec891569b5d253 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:35 
    os.environ["STREAMLIT_THEME_VIOLET_TEXT_COLOR"] = "#9b59b6"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d41b0d0b8d4c10c2 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:36 
    os.environ["STREAMLIT_THEME_GRAY_TEXT_COLOR"] = "#7f8c8d"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68db72acd9ad7768 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:38 
    os.environ["STREAMLIT_THEME_SIDEBAR_RED_TEXT_COLOR"] = "#8b0000"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #959183dfc8a1591a — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:39 
    os.environ["STREAMLIT_THEME_SIDEBAR_ORANGE_TEXT_COLOR"] = "#cc4400"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9ff9f378097337d — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:40 
    os.environ["STREAMLIT_THEME_SIDEBAR_YELLOW_TEXT_COLOR"] = "#b8860b"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #174a15ae36fd84c1 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:41 
    os.environ["STREAMLIT_THEME_SIDEBAR_BLUE_TEXT_COLOR"] = "#000080"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3037df6abc0be37d — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:42 
    os.environ["STREAMLIT_THEME_SIDEBAR_GREEN_TEXT_COLOR"] = "#006400"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27ceb24a7e7997f7 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:43 
    os.environ["STREAMLIT_THEME_SIDEBAR_VIOLET_TEXT_COLOR"] = "#4b0082"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cae9119861a8072f — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:44 
    os.environ["STREAMLIT_THEME_SIDEBAR_GRAY_TEXT_COLOR"] = "#2f2f2f"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0225b40f568500f1 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:46 
    del os.environ["STREAMLIT_THEME_RED_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1333673d5f9a7e68 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:47 
    del os.environ["STREAMLIT_THEME_ORANGE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35595bf3dbd08e62 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:48 
    del os.environ["STREAMLIT_THEME_YELLOW_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a6707f2cbef5b73 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:49 
    del os.environ["STREAMLIT_THEME_BLUE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11442db0e66425ae — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:50 
    del os.environ["STREAMLIT_THEME_GREEN_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e129b1956cac06f1 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:51 
    del os.environ["STREAMLIT_THEME_VIOLET_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ebfdb73c4984389f — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:52 
    del os.environ["STREAMLIT_THEME_GRAY_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #039a2f14dee234ff — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:53 
    del os.environ["STREAMLIT_THEME_SIDEBAR_RED_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7f5fe725195f3d5 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:54 
    del os.environ["STREAMLIT_THEME_SIDEBAR_ORANGE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3213cbe55bb22731 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:55 
    del os.environ["STREAMLIT_THEME_SIDEBAR_YELLOW_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #188542eebf1e8d1b — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:56 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BLUE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7bab86c9697e72fa — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:57 
    del os.environ["STREAMLIT_THEME_SIDEBAR_GREEN_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #073fe4db78088d96 — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:58 
    del os.environ["STREAMLIT_THEME_SIDEBAR_VIOLET_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97007f4e1a3f1bad — Environment-variable access.
repo/e2e_playwright/theming/custom_text_colors_test.py:59 
    del os.environ["STREAMLIT_THEME_SIDEBAR_GRAY_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5c8512c1be92650 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:29 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f35020c98fb00663 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:33 
    os.environ["STREAMLIT_THEME_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e9ea3647f8054c8 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:37 
    os.environ["STREAMLIT_THEME_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51c870bac4bde2ea — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:41 
    os.environ["STREAMLIT_THEME_SIDEBAR_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc71d899f8051188 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:44 
    os.environ["STREAMLIT_THEME_SIDEBAR_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b48a86617fc8295d — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:47 
    os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a0013b8cbbc1711 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:51 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6da4a8d5aea16e5b — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:52 
    del os.environ["STREAMLIT_THEME_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee5b8a08e875e9b4 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:53 
    del os.environ["STREAMLIT_THEME_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d60953454475f92 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:54 
    del os.environ["STREAMLIT_THEME_SIDEBAR_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0d45d12c733d804 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:55 
    del os.environ["STREAMLIT_THEME_SIDEBAR_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50fd379f0ea775a4 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_fonts_test.py:56 
    del os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97b76108c2785397 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:29 
    os.environ["STREAMLIT_THEME_BASE"] = "dark"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60c3baa23a7b617e — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:30 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#1BD760"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d0493b0c46c2c03 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:31 
    os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"] = "#001200"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed98744a9c492997 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:32 
    os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"] = "#03200C"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f465290842a8145 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:33 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "#DFFDE0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b3cd8ff6ed57d1a — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:34 
    os.environ["STREAMLIT_THEME_BASE_RADIUS"] = "1.2rem"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49e602b2755b5e17 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:35 
    os.environ["STREAMLIT_THEME_BUTTON_RADIUS"] = "0.57rem"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2080204629516471 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:36 
    os.environ["STREAMLIT_THEME_BORDER_COLOR"] = "#0B4C0B"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f718a3b1bcca6123 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:37 
    os.environ["STREAMLIT_THEME_DATAFRAME_BORDER_COLOR"] = "#f0ee86"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d56b81468c58ab5 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:38 
    os.environ["STREAMLIT_THEME_DATAFRAME_HEADER_BACKGROUND_COLOR"] = "#70aec1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30e811a88f23e3ad — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:39 
    os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb61e9effbfb0b1f — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:40 
    os.environ["STREAMLIT_THEME_LINK_COLOR"] = "#2EC163"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4810a387576cb710 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:41 
    os.environ["STREAMLIT_THEME_CODE_FONT_SIZE"] = "15px"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7551c42199e40de — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:42 
    os.environ["STREAMLIT_THEME_CODE_TEXT_COLOR"] = "#301934"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a6c90f57830968b — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:43 
    os.environ["STREAMLIT_THEME_CODE_BACKGROUND_COLOR"] = "#d4c6f5"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e52d4cc22860d353 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:44 
    os.environ["STREAMLIT_THEME_SHOW_SIDEBAR_BORDER"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5f72134d74a8e02 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:45 
    os.environ["STREAMLIT_THEME_HEADING_FONT"] = "bold, serif"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a935d1d0909da0dc — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:46 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44b5caf9f5a05195 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:48 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #160364abee7051e2 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:49 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f56bc53480aefeb — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:50 
    del os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a671113e9f1e9795 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:51 
    del os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2da536d34d0f59e — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:52 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a3e329c2e996680 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:53 
    del os.environ["STREAMLIT_THEME_BASE_RADIUS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c785389f095b214c — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:54 
    del os.environ["STREAMLIT_THEME_BUTTON_RADIUS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fda53b203c17027 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:55 
    del os.environ["STREAMLIT_THEME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9920856a74453d2e — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:56 
    del os.environ["STREAMLIT_THEME_DATAFRAME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #008eaf7aa4fe0370 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:57 
    del os.environ["STREAMLIT_THEME_DATAFRAME_HEADER_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7bb96719ca02921b — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:58 
    del os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ecddff86eafdf9de — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:59 
    del os.environ["STREAMLIT_THEME_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f61b1809078490a5 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:60 
    del os.environ["STREAMLIT_THEME_CODE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #083e543316962bf1 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:61 
    del os.environ["STREAMLIT_THEME_CODE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08464efae3cdbdf4 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:62 
    del os.environ["STREAMLIT_THEME_CODE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e818ceccfd576933 — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:63 
    del os.environ["STREAMLIT_THEME_SHOW_SIDEBAR_BORDER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de4b3cff09195f3b — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:64 
    del os.environ["STREAMLIT_THEME_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b055d24dbdf7d6d — Environment-variable access.
repo/e2e_playwright/theming/custom_theme_test.py:65 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5297b4746d283d70 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:41 
    os.environ["STREAMLIT_THEME_BASE"] = "https://data.streamlit.io/corporate.toml"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75d0448f7fda0fa7 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:42 
    os.environ["STREAMLIT_THEME_LINK_COLOR"] = "#CD1C18"  # Chili red

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b51f45a20d5aec33 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:43 
    os.environ["STREAMLIT_THEME_CODE_BACKGROUND_COLOR"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ea89e195658efa2 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:46 
    os.environ["STREAMLIT_THEME_SIDEBAR_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19ae9afd1052ac89 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:49 
    os.environ["STREAMLIT_THEME_SIDEBAR_LINK_COLOR"] = "#7851A9"  # Royal purple

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0755d5dcc2efd15e — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:52 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a644fec343017039 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:53 
    del os.environ["STREAMLIT_THEME_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0cac0bc16069a54 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:54 
    del os.environ["STREAMLIT_THEME_CODE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #457109e912a10673 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:55 
    del os.environ["STREAMLIT_THEME_SIDEBAR_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87dc8c93741aaf87 — Environment-variable access.
repo/e2e_playwright/theming/custom_url_base_test.py:56 
    del os.environ["STREAMLIT_THEME_SIDEBAR_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c5e890c96662a06 — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:30 
    os.environ["STREAMLIT_THEME_FONT_FACES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #afb09b7a5e1803ce — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:46 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bbb9824a1d591da — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:49 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "16"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7b5386444b4a9cf — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:50 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16d26be0a387d872 — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:52 
    del os.environ["STREAMLIT_THEME_FONT_FACES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91d38e74219b80da — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:53 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cfd850b11a77e15 — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:54 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81a387e018ac6e2f — Environment-variable access.
repo/e2e_playwright/theming/font_style_test.py:55 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17fefe2e74cdb9db — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:30 
    os.environ["STREAMLIT_THEME_FONT_FACES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5f0c5db1704a370 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:66 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec27ad3d0c3a18e0 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:69 
    os.environ["STREAMLIT_THEME_SIDEBAR_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98ed0fb5349313ae — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:72 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "16"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #febb91b823ad1a45 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:73 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd4c02009b8c8190 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:75 
    del os.environ["STREAMLIT_THEME_FONT_FACES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fc0b66e085a02c6 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:76 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00096262b296f167 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:77 
    del os.environ["STREAMLIT_THEME_SIDEBAR_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6304cbf34f7883d0 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:78 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0468c2d16a53d637 — Environment-variable access.
repo/e2e_playwright/theming/font_unicode_range_test.py:79 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9569e33b8f2c1e86 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:30 
    os.environ["STREAMLIT_THEME_FONT_FACES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7dbbf6bcdbe13a7 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:70 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f645b7ec7a45c48 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:73 
    os.environ["STREAMLIT_THEME_SIDEBAR_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fea355d7b6a9102 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:76 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "16"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b69ef0617d5a1825 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:77 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70be87020639cd2b — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:79 
    del os.environ["STREAMLIT_THEME_FONT_FACES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1458dbfeca78a47b — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:80 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c10cf226b7a2a48a — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:81 
    del os.environ["STREAMLIT_THEME_SIDEBAR_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5859b7e55471bfe6 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:82 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ef837faae36d119 — Environment-variable access.
repo/e2e_playwright/theming/font_weight_test.py:83 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3830dc73e1c6d52 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:29 
    os.environ["STREAMLIT_THEME_BASE"] = "light"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f43fb2085809e3f3 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:30 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23819472e33a0cc8 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:31 
    os.environ["STREAMLIT_THEME_BASE_RADIUS"] = "full"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf1007322638a897 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:32 
    os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07f73db3b6dcb9f2 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:33 
    os.environ["STREAMLIT_THEME_SIDEBAR_BACKGROUND_COLOR"] = "black"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b11cf6165929c487 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:34 
    os.environ["STREAMLIT_THEME_SIDEBAR_BASE_RADIUS"] = "none"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52829170e068735c — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:35 
    os.environ["STREAMLIT_THEME_SIDEBAR_BUTTON_RADIUS"] = "small"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #abb925e9ca83e7da — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:36 
    os.environ["STREAMLIT_THEME_SIDEBAR_BORDER_COLOR"] = "white"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #463de9c61a8b8d1b — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:37 
    os.environ["STREAMLIT_THEME_SIDEBAR_DATAFRAME_BORDER_COLOR"] = "orange"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17866f2bc57580b2 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:38 
    os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT"] = "bold, serif"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32fc73d06e096ba6 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:39 
    os.environ["STREAMLIT_THEME_SIDEBAR_CODE_FONT_SIZE"] = "0.625rem"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35a830f5c46c100a — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:40 
    os.environ["STREAMLIT_THEME_SIDEBAR_LINK_COLOR"] = "#90EE90"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9576766a0784e3c4 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:41 
    os.environ["STREAMLIT_THEME_SIDEBAR_CODE_TEXT_COLOR"] = "#601EF9"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef327f8b2efa256c — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:42 
    os.environ["STREAMLIT_THEME_SIDEBAR_CODE_BACKGROUND_COLOR"] = "#d4c6f5"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f05a798917adce9c — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:43 
    os.environ["STREAMLIT_THEME_SIDEBAR_PRIMARY_COLOR"] = "blue"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19adbec7aab32d55 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:44 
    os.environ["STREAMLIT_THEME_SIDEBAR_SECONDARY_BACKGROUND_COLOR"] = "#222222"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a791ff7f57d3d15 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:45 
    os.environ["STREAMLIT_THEME_SIDEBAR_TEXT_COLOR"] = "white"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10b19dfa250b6a59 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:46 
    os.environ["STREAMLIT_THEME_SIDEBAR_LINK_UNDERLINE"] = "False"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d02732229c4b65a8 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:47 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a3210dc229419de — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:49 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79ffa01c4f461314 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:50 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d233a386d09ec6b — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:51 
    del os.environ["STREAMLIT_THEME_BASE_RADIUS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3001b59b6bbde789 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:52 
    del os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d54f15980fb24940 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:53 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ae3efeba92fe45c — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:54 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BASE_RADIUS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e8a95ccf907081e — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:55 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BUTTON_RADIUS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26b834ab072ddc36 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:56 
    del os.environ["STREAMLIT_THEME_SIDEBAR_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b796f4131809d617 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:57 
    del os.environ["STREAMLIT_THEME_SIDEBAR_DATAFRAME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3b36d7b22d15815 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:58 
    del os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc1afdcbefd1e833 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:59 
    del os.environ["STREAMLIT_THEME_SIDEBAR_CODE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f4585e4d7efd5c6 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:60 
    del os.environ["STREAMLIT_THEME_SIDEBAR_LINK_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c016d05786a8bc8f — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:61 
    del os.environ["STREAMLIT_THEME_SIDEBAR_CODE_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #121432e6a96b8a38 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:62 
    del os.environ["STREAMLIT_THEME_SIDEBAR_CODE_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #807b399c79052c12 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:63 
    del os.environ["STREAMLIT_THEME_SIDEBAR_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea99b9a382d7183d — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:64 
    del os.environ["STREAMLIT_THEME_SIDEBAR_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12f32361f9486858 — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:65 
    del os.environ["STREAMLIT_THEME_SIDEBAR_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be2da48bf267119b — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:66 
    del os.environ["STREAMLIT_THEME_SIDEBAR_LINK_UNDERLINE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8e6452aa206230e — Environment-variable access.
repo/e2e_playwright/theming/sidebar_custom_theme_test.py:67 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5925e9a79669945 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:30 
    os.environ["STREAMLIT_THEME_BASE"] = "dark"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #964587d03da9d8fa — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:31 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#004cbe"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #902390787550fd2d — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:32 
    os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"] = "#191e24"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d45055b40f322ac — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:33 
    os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"] = "#0f161e"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92acc192fe99434b — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:34 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "oklab(79.31% -0.019 -0.063)"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57ecb65f27a01c49 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:35 
    os.environ["STREAMLIT_THEME_BORDER_COLOR"] = "#293246"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c15423a33b39be5f — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:36 
    os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87902d9d87ce9a40 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:37 
    os.environ["STREAMLIT_THEME_FONT_FACES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31c55ed0093049ca — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:76 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ff48670797a26c6 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:80 
    os.environ["STREAMLIT_THEME_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6571a4835fc95e1 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:84 
    os.environ["STREAMLIT_THEME_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bbb0db612f796d53 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:87 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68322fe5d56d1948 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:88 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b245256e311a49ea — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:90 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ec6ec77ee73959d — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:91 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef86f71d0a8550a4 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:92 
    del os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e7c700a23a7f413 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:93 
    del os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a0c2644b09f477b — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:94 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #740d50bb1ab49fa2 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:95 
    del os.environ["STREAMLIT_THEME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef4a5b99a110e3e2 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:96 
    del os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5743e1c6910aba1a — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:97 
    del os.environ["STREAMLIT_THEME_FONT_FACES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e58ef5fd979433a4 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:98 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #591d217b852aa852 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:99 
    del os.environ["STREAMLIT_THEME_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20b90b66c251b589 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:100 
    del os.environ["STREAMLIT_THEME_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38f49e7adf58fb98 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:101 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2dce5c21d8e0a56 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_dark_theme_test.py:102 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64a64e04df92054d — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:30 
    os.environ["STREAMLIT_THEME_BASE"] = "light"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #226ed4e9f4e9ca18 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:31 
    os.environ["STREAMLIT_THEME_PRIMARY_COLOR"] = "#1a6ce7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a150b6aa409ced8d — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:32 
    os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"] = "#ffffff"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcb2bd545a6aa985 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:33 
    os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"] = "#f7f7f7"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b757e973fec4a30 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:34 
    os.environ["STREAMLIT_THEME_TEXT_COLOR"] = "oklch(20.36% 0.024 253)"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b35e6aff8a91aebb — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:35 
    os.environ["STREAMLIT_THEME_BORDER_COLOR"] = "#d5dae4"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #939e0920748b4e3d — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:36 
    os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2620e37cbeea312f — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:37 
    os.environ["STREAMLIT_THEME_FONT_FACES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4135331e7a0848c2 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:76 
    os.environ["STREAMLIT_THEME_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ecd06df40c6f254f — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:80 
    os.environ["STREAMLIT_THEME_HEADING_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #887f512153527610 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:84 
    os.environ["STREAMLIT_THEME_CODE_FONT"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9fcafc940bdc5f0 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:87 
    os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"] = "14"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0da15edcbcd16635 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:88 
    os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"] = "minimal"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df295c9d274fd104 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:90 
    del os.environ["STREAMLIT_THEME_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d760426f6ad7332 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:91 
    del os.environ["STREAMLIT_THEME_PRIMARY_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5388f7ab8af63a48 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:92 
    del os.environ["STREAMLIT_THEME_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14a6775a53f7ae83 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:93 
    del os.environ["STREAMLIT_THEME_SECONDARY_BACKGROUND_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9ed31bd1bf56c33 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:94 
    del os.environ["STREAMLIT_THEME_TEXT_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2133d6178999af4 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:95 
    del os.environ["STREAMLIT_THEME_BORDER_COLOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c3cafbddefdd8b0 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:96 
    del os.environ["STREAMLIT_THEME_SHOW_WIDGET_BORDER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3eebd0c1d3a88501 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:97 
    del os.environ["STREAMLIT_THEME_FONT_FACES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c4a3f145614edfa — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:98 
    del os.environ["STREAMLIT_THEME_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f599596c46070a3 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:99 
    del os.environ["STREAMLIT_THEME_HEADING_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d358e0666dab1985 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:100 
    del os.environ["STREAMLIT_THEME_CODE_FONT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05d7333cfca43863 — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:101 
    del os.environ["STREAMLIT_THEME_BASE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79de5e045061ca9b — Environment-variable access.
repo/e2e_playwright/theming/snowflake_light_theme_test.py:102 
    del os.environ["STREAMLIT_CLIENT_TOOLBAR_MODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #270e7430ddb94774 — Environment-variable access.
repo/e2e_playwright/theming/theme_chart_colors_test.py:33 
    os.environ["STREAMLIT_THEME_CHART_CATEGORICAL_COLORS"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d37420806aa33d20 — Environment-variable access.
repo/e2e_playwright/theming/theme_chart_colors_test.py:47 
    os.environ["STREAMLIT_THEME_CHART_SEQUENTIAL_COLORS"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9c8342052247816 — Environment-variable access.
repo/e2e_playwright/theming/theme_chart_colors_test.py:61 
    os.environ["STREAMLIT_THEME_CHART_DIVERGING_COLORS"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #190148c92f9e4447 — Environment-variable access.
repo/e2e_playwright/theming/theme_chart_colors_test.py:76 
    del os.environ["STREAMLIT_THEME_CHART_CATEGORICAL_COLORS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5d772c138fd0ee6 — Environment-variable access.
repo/e2e_playwright/theming/theme_chart_colors_test.py:77 
    del os.environ["STREAMLIT_THEME_CHART_SEQUENTIAL_COLORS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd61d63076ffd62d — Environment-variable access.
repo/e2e_playwright/theming/theme_chart_colors_test.py:78 
    del os.environ["STREAMLIT_THEME_CHART_DIVERGING_COLORS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e98fb032d03ae313 — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:29 
    os.environ["STREAMLIT_THEME_BASE_FONT_WEIGHT"] = "200"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fc7de09fa15a71e — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:30 
    os.environ["STREAMLIT_THEME_CODE_FONT_WEIGHT"] = "600"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5b63b648d9deadc — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:31 
    os.environ["STREAMLIT_THEME_HEADING_FONT_WEIGHTS"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2afbd9716a21d795 — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:35 
    os.environ["STREAMLIT_THEME_SIDEBAR_CODE_FONT_WEIGHT"] = "200"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0ba6d84976299d2 — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:36 
    os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT_WEIGHTS"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f284e0a0776ba4f — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:40 
    del os.environ["STREAMLIT_THEME_BASE_FONT_WEIGHT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #870ca55d20acd986 — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:41 
    del os.environ["STREAMLIT_THEME_CODE_FONT_WEIGHT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc32a0dd392010d1 — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:42 
    del os.environ["STREAMLIT_THEME_HEADING_FONT_WEIGHTS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85eea3dbf13bfa7a — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:43 
    del os.environ["STREAMLIT_THEME_SIDEBAR_CODE_FONT_WEIGHT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bfa381dc54f299f — Environment-variable access.
repo/e2e_playwright/theming/theme_font_weights_test.py:44 
    del os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT_WEIGHTS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a044a29a77c10a8 — Environment-variable access.
repo/e2e_playwright/theming/theme_header_sizes_test.py:29 
    os.environ["STREAMLIT_THEME_HEADING_FONT_SIZES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70d8aef9cab185b9 — Environment-variable access.
repo/e2e_playwright/theming/theme_header_sizes_test.py:33 
    os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT_SIZES"] = json.dumps(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ddabcd940c774f4 — Environment-variable access.
repo/e2e_playwright/theming/theme_header_sizes_test.py:37 
    del os.environ["STREAMLIT_THEME_HEADING_FONT_SIZES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #622c089f5e56be8b — Environment-variable access.
repo/e2e_playwright/theming/theme_header_sizes_test.py:38 
    del os.environ["STREAMLIT_THEME_SIDEBAR_HEADING_FONT_SIZES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c706576c5b7a8b3d — Environment-variable access.
repo/e2e_playwright/theming/theme_metric_value_style_test.py:30 
    os.environ["STREAMLIT_THEME_METRIC_VALUE_FONT_SIZE"] = "3rem"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfeb30eabbfbd8bf — Environment-variable access.
repo/e2e_playwright/theming/theme_metric_value_style_test.py:31 
    os.environ["STREAMLIT_THEME_METRIC_VALUE_FONT_WEIGHT"] = "300"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b67ba6ac204b31cb — Environment-variable access.
repo/e2e_playwright/theming/theme_metric_value_style_test.py:33 
    del os.environ["STREAMLIT_THEME_METRIC_VALUE_FONT_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ccf8a37a0632228 — Environment-variable access.
repo/e2e_playwright/theming/theme_metric_value_style_test.py:34 
    del os.environ["STREAMLIT_THEME_METRIC_VALUE_FONT_WEIGHT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ba7d6e786a45419 — Environment-variable access.
repo/lib/streamlit/__init__.py:57 
_os.environ["MPLBACKEND"] = "Agg"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3849de2b0a6143bb — Filesystem access.
repo/lib/streamlit/cli_util.py:62 
    with open(os.devnull, "w", encoding="utf-8") as devnull:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6bcb4fc15f0f95b6 — Filesystem access.
repo/lib/streamlit/components/v2/manifest_scanner.py:266 
            pyproject_content = dist.read_text("pyproject.toml")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0465d6a6dc56826 — Filesystem access.
repo/lib/streamlit/components/v2/manifest_scanner.py:364 
        with open(pyproject_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2e803a47ffa134b — Filesystem access.
repo/lib/streamlit/components/v2/manifest_scanner.py:412 
        with open(pyproject_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8825b6acecf2dc4 — Environment-variable access.
repo/lib/streamlit/config.py:880 
        and not os.getenv("DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #742d7c29b90e3576 — Environment-variable access.
repo/lib/streamlit/config.py:881 
        and not os.getenv("WAYLAND_DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3de87c30d00f38f4 — Environment-variable access.
repo/lib/streamlit/config.py:2645 
        env_var_value = os.environ.get(opt_val.env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4eb3855b8fb44599 — Environment-variable access.
repo/lib/streamlit/config.py:2789 
        env_var = os.environ.get(var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6abc5027e75c9476 — Filesystem access.
repo/lib/streamlit/config.py:2902 
            with open(filename, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35e0a5f1b1f1ac0b — Filesystem access.
repo/lib/streamlit/config_util.py:644 
            with open(file_path_or_url, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a9171794d941a88 — Filesystem access.
repo/lib/streamlit/connections/snowflake_connection.py:714 
        with open(SNOWPARK_CONNECTION_TOKEN_FILE, encoding="utf-8") as token_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7644d9a3566bbcf1 — Environment-variable access.
repo/lib/streamlit/connections/snowflake_connection.py:747 
            value = os.getenv(env_var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08356b6cfabf561d — Filesystem access.
repo/lib/streamlit/elements/html.py:120 
            with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82b9558dfdb86add — Filesystem access.
repo/lib/streamlit/elements/iframe.py:419 
                with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1531b9bc91c4798 — Filesystem access.
repo/lib/streamlit/elements/iframe.py:433 
            with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce869fcf8c9a8758 — Filesystem access.
repo/lib/streamlit/elements/lib/image_utils.py:273 
            with open(image, encoding="utf-8") as textfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3feddc71311fb1c4 — Filesystem access.
repo/lib/streamlit/elements/lib/image_utils.py:294 
            with open(image, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #daf8c090e824fcb0 — Filesystem access.
repo/lib/streamlit/elements/lib/subtitle_utils.py:121 
        with open(data_or_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfaca5d5b3cbfe53 — Filesystem access.
repo/lib/streamlit/elements/pdf.py:138 
                    with open(data_str, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7496bef7743c020b — Environment-variable access.
repo/lib/streamlit/env_util.py:33 
    if "WSL_DISTRO_NAME" in os.environ or "WSL_INTEROP" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07fd47b33701a2a6 — Filesystem access.
repo/lib/streamlit/env_util.py:37 
        with open("/proc/version", encoding="utf-8") as proc_version:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #def22ff873bfe2ae — Filesystem access.
repo/lib/streamlit/file_util.py:89 
    with open(os.path.join(CONFIG_FOLDER_NAME, path), mode) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8ab28d68ad42a61 — Filesystem access.
repo/lib/streamlit/file_util.py:115 
        with open(path, mode) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1234f45640732142 — Environment-variable access.
repo/lib/streamlit/file_util.py:223 
    pythonpath = os.environ.get("PYTHONPATH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6338bd25747b30a — Environment-variable access.
repo/lib/streamlit/runtime/app_session.py:861 
            "DISPLAY" in os.environ or "WAYLAND_DISPLAY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e1cc7dd4ed6b327 — Environment-variable access.
repo/lib/streamlit/runtime/connection_factory.py:420 
        name = os.environ[envvar_name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b101624d036b09a — Environment-variable access.
repo/lib/streamlit/runtime/credentials.py:50 
        not env_util.IS_WINDOWS or os.environ.get("WT_SESSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #ac00659887e35f81 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/lib/streamlit/runtime/credentials.py:78 
        response_json = requests.get(
            "https://data.streamlit.io/metrics.json", timeout=2
        ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #52acdb4aa1336f4f — Filesystem access.
repo/lib/streamlit/runtime/credentials.py:151 
            with open(self._conf_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05e7f7fff5aae671 — Filesystem access.
repo/lib/streamlit/runtime/credentials.py:221 
        with open(self._conf_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #061cf480816ce93d — Filesystem access.
repo/lib/streamlit/runtime/memory_media_file_storage.py:205 
            with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60d6151bda18f7ad — Filesystem access.
repo/lib/streamlit/runtime/metrics_util.py:255 
        with open(_ETC_MACHINE_ID_PATH, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37ad182088f5bacd — Filesystem access.
repo/lib/streamlit/runtime/metrics_util.py:259 
        with open(_DBUS_MACHINE_ID_PATH, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c7f3a42a67972b3 — Filesystem access.
repo/lib/streamlit/runtime/secrets.py:307 
            with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #687a211fc18511f7 — Filesystem access.
repo/lib/streamlit/runtime/secrets.py:363 
                with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e36ebf2eebdde1cf — Environment-variable access.
repo/lib/streamlit/runtime/secrets.py:513 
            os.environ[k] = str(v)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d8845001a27050b — Environment-variable access.
repo/lib/streamlit/runtime/secrets.py:522 
        if value_type in {str, int, float} and os.environ.get(k) == str(v):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d3064588d20af83 — Environment-variable access.
repo/lib/streamlit/runtime/secrets.py:523 
            del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8d5f085bf316ee5 — Filesystem access.
repo/lib/streamlit/source_util.py:55 
    return open(filename, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef48a8954bf17970 — Filesystem access.
repo/lib/streamlit/testing/v1/app_test.py:231 
        path.write_text(aligned_script, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #923ae2f7097ee049 — Filesystem access.
repo/lib/streamlit/watcher/util.py:118 
    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74708d35b0d6e84c — Environment-variable access.
repo/lib/streamlit/web/bootstrap.py:126 
    if "MAPBOX_API_KEY" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79109a7a63cf6368 — Environment-variable access.
repo/lib/streamlit/web/bootstrap.py:127 
        os.environ["MAPBOX_API_KEY"] = config.get_option("mapbox.token")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17f774798fc30f42 — Filesystem access.
repo/lib/streamlit/web/cli.py:122 
    with open(main_script_path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f8fbe4b01e65554 — Filesystem access.
repo/lib/streamlit/web/cli.py:585 
    (project_dir / "requirements.txt").write_text("streamlit\n", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f22f464fae16481 — Filesystem access.
repo/lib/streamlit/web/cli.py:588 
    (project_dir / "streamlit_app.py").write_text(
        """import streamlit as st

st.title("🎈 My new app")
st.write(
    "Let's start building! For help and inspiration, head over to [docs.streamlit.io](https://docs.streamlit.io/)."
)
""",
        encoding="utf-8",
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fa2674371e84813 — Filesystem access.
repo/lib/streamlit/web/server/app_discovery.py:365 
        source = path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #070751c2ad2b3323 — Environment-variable access.
repo/lib/streamlit/web/server/server_util.py:191 
            port_str = os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1644e9e433897712 — Filesystem access.
repo/lib/streamlit/web/skills.py:270 
        if (target_path / rel_path).read_bytes() != source_file.read_bytes():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72c63c039e26ea9f — Filesystem access.
repo/scripts/changelog_categorize_prs.py:195 
    with open(args.input, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fcec4856a297b851 — Filesystem access.
repo/scripts/changelog_categorize_prs.py:202 
    with open(args.output, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84dc0e0a6c37fdbb — Filesystem access.
repo/scripts/changelog_fetch_prs.py:226 
    with open(args.output, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6760e3499a5deaba — Filesystem access.
repo/scripts/check_license_headers.py:33 
    (SCRIPT_DIR / "assets" / "license-template.txt").read_text().splitlines()[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a28e4dec15d6515c — Filesystem access.
repo/scripts/check_license_headers.py:102 
            file_content = filepath.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53fc0452d65fb2c2 — Environment-variable access.
repo/scripts/cli_regression_tests.py:69 
        STREAMLIT_RELEASE_VERSION = os.environ.get("STREAMLIT_RELEASE_VERSION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5581f870ee81e785 — Environment-variable access.
repo/scripts/cli_regression_tests.py:159 
        os.environ.get("SKIP_VERSION_CHECK", "false").lower() == "true",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f67802e6db2efbb — Filesystem access.
repo/scripts/cli_regression_tests.py:179 
        with open(CREDENTIALS_FILE_PATH, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be30d18d8e182cdc — Filesystem access.
repo/scripts/cli_regression_tests.py:216 
        with open(CONFIG_FILE_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be59d95cc3ea97fe — Environment-variable access.
repo/scripts/create_release.py:28 
    tag = os.getenv("GIT_TAG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d7bda6fa4f8492d — Environment-variable access.
repo/scripts/create_release.py:29 
    access_token = os.getenv("GH_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #6b23abc1f79bc628 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/create_release.py:38 
    response = requests.get(f"{url}/latest", headers=header)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #f92c3dfc417c20da — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/create_release.py:47 
    response = requests.post(f"{url}/generate-notes", json=payload, headers=header)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #2fe765891c4a43b6 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/create_release.py:56 
    response = requests.post(url, json=payload, headers=header)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #5bf28be001f03548 — Filesystem access.
repo/scripts/fetch_flaky_tests.py:104 
    with open(stats_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67e2ae8d9fab4cd5 — Filesystem access.
repo/scripts/generate_agent_rules.py:205 
    with open(source_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6c8582c4661f959 — Filesystem access.
repo/scripts/generate_agent_rules.py:219 
        with open(target_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66eee72ea600c45d — Filesystem access.
repo/scripts/generate_agent_rules.py:233 
        with open(target_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f26019bf166b767b — Filesystem access.
repo/scripts/generate_agent_rules.py:260 
    with open(skill_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32ac88ee500fbee2 — Filesystem access.
repo/scripts/generate_agent_rules.py:289 
        with open(agents_md_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fa2efd074f58f3f — Filesystem access.
repo/scripts/generate_agent_rules.py:308 
        with open(cursor_mdc_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc9907c712b06d24 — Filesystem access.
repo/scripts/generate_agent_rules.py:326 
        with open(github_copilot_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3b5f7c3794024e6 — Filesystem access.
repo/scripts/generate_agent_rules.py:356 
        with open(claude_md_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #eac8503d7cf8f6e0 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/get_release_branch.py:38 
    response = requests.get(url).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #06f77494f1064129 — Environment-variable access.
repo/scripts/log_agent_metrics.py:213 
    project_dir = os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #af8a9e15f44327e4 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/pypi_nightly_create_tag.py:48 
    rsp = requests.get(PYPI_STREAMLIT_URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #69526e64384b6b5a — Environment-variable access.
repo/scripts/run_bare_execution_tests.py:55 
os.environ["MPLBACKEND"] = "Agg"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55dcae4420987bc0 — Environment-variable access.
repo/scripts/slack_notifications.py:64 
    webhook = os.getenv("SLACK_WEBHOOK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46444a8e9624807f — Environment-variable access.
repo/scripts/slack_notifications.py:78 
    run_id = os.getenv("RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d4a2d136af69d7a — Environment-variable access.
repo/scripts/slack_notifications.py:110 
            pr_url = os.getenv("PR_URL", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1016d394c62686b — Environment-variable access.
repo/scripts/slack_notifications.py:124 
            pr_url = os.getenv("PR_URL", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2575ac0776b8d91 — Environment-variable access.
repo/scripts/slack_notifications.py:137 
        repo = os.getenv("REPO", os.getenv("GITHUB_REPOSITORY", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba6ed1a7b69683cd — Environment-variable access.
repo/scripts/slack_notifications.py:138 
        release_version = os.getenv("RELEASE_VERSION", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23c252c5db6c1e15 — Environment-variable access.
repo/scripts/slack_notifications.py:139 
        release_branch = os.getenv("RELEASE_BRANCH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7aedcfd70d254b5d — Environment-variable access.
repo/scripts/slack_notifications.py:140 
        commit_sha = os.getenv("CHERRY_PICK_SHA", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f82ab40d35c409f — Environment-variable access.
repo/scripts/slack_notifications.py:143 
            base_ref = os.getenv("RELEASE_BASE_REF", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a5938c1401860ae — Environment-variable access.
repo/scripts/slack_notifications.py:163 
            pr_url = os.getenv("PR_URL", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff0dec76282393cc — Environment-variable access.
repo/scripts/slack_notifications.py:196 
            error_reason = os.getenv("ERROR_REASON", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d67e78e842fd387d — Environment-variable access.
repo/scripts/slack_notifications.py:209 
        repo = os.getenv("REPO", os.getenv("GITHUB_REPOSITORY", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ce647fdbb98f61c — Environment-variable access.
repo/scripts/slack_notifications.py:210 
        run_id = os.getenv("RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bda41a05edb3c00e — Environment-variable access.
repo/scripts/slack_notifications.py:211 
        package_name = os.getenv("PACKAGE_NAME", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #199141e35cd27e4c — Environment-variable access.
repo/scripts/slack_notifications.py:212 
        package_version = os.getenv("PACKAGE_VERSION", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5682e8b6788988f0 — Environment-variable access.
repo/scripts/slack_notifications.py:235 
            error_reason = os.getenv("ERROR_REASON", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0f6392cc8fc3cfc — Filesystem access.
repo/scripts/snapshot_cleanup.py:168 
            with open(test_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #198fe36c2607aba2 — Filesystem access.
repo/scripts/sync_ruff_version.py:49 
        with open(pyproject_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ce561337d08c804 — Filesystem access.
repo/scripts/sync_ruff_version.py:65 
        with open(pre_commit_config_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8f39ba2fb3e33a1 — Filesystem access.
repo/scripts/sync_ruff_version.py:84 
        with open(pre_commit_config_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92a06b4c994b48e4 — Filesystem access.
repo/scripts/sync_ruff_version.py:95 
        with open(pre_commit_config_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8bdaf32abaf4e75 — Filesystem access.
repo/scripts/sync_vscode_devcontainer.py:84 
            with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69457798fc3396ad — Filesystem access.
repo/scripts/sync_vscode_devcontainer.py:109 
            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64c393d8f9624fdc — Filesystem access.
repo/scripts/update_e2e_snapshots.py:155 
    with open(download_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fe6c721ab7902ce — Filesystem access.
repo/scripts/update_emojis.py:49 
with open(EMOJIS_SCRIPT_PATH, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7811d9898768aad1 — Filesystem access.
repo/scripts/update_emojis.py:54 
with open(EMOJIS_SCRIPT_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #83d2907bd233d019 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/update_material_icon_font_and_names.py:65 
with urllib.request.urlopen(MATERIAL_ICONS_CODEPOINTS_URL) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #b2968fa86f85e5e3 — Filesystem access.
repo/scripts/update_material_icon_font_and_names.py:94 
with open(NAMES_MODULE_PATH, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4dd4c66eb16a5313 — Filesystem access.
repo/scripts/update_material_icon_font_and_names.py:99 
with open(NAMES_MODULE_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #566e26d965afd5bc — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/update_material_icon_font_and_names.py:104 
response = requests.get(
    MATERIAL_ICONS_FONT_URL,
    headers={
        "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 "
        "(KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
    },
)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #eff2a602dbe5136a — Filesystem access.
repo/scripts/update_material_icon_font_and_names.py:128 
    with open(FONT_FILE_PATH, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1256a2448be4dff6 — Filesystem access.
repo/scripts/update_material_icon_font_and_names.py:145 
with open(PLAYWRIGHT_TEST_MODULE_PATH, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35c4e5fa1dd83d43 — Filesystem access.
repo/scripts/update_material_icon_font_and_names.py:149 
with open(PLAYWRIGHT_TEST_MODULE_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2a05100e03184f3 — Filesystem access.
repo/scripts/update_name.py:51 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b3a2173dde4ca9c — Filesystem access.
repo/scripts/update_name.py:81 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3707dac3f348fa42 — Filesystem access.
repo/scripts/verify_version.py:45 
    with open(pyproject_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c51d748df4dfd21 — Environment-variable access.
repo/scripts/verify_version.py:64 
    tag = args.tag or os.getenv("TAG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): lib

python first-party
expand_more 50 low-confidence finding(s)
low env_fs production #2ba7d6e786a45419 — Environment-variable access.
repo/lib/streamlit/__init__.py:57 
_os.environ["MPLBACKEND"] = "Agg"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3849de2b0a6143bb — Filesystem access.
repo/lib/streamlit/cli_util.py:62 
    with open(os.devnull, "w", encoding="utf-8") as devnull:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6bcb4fc15f0f95b6 — Filesystem access.
repo/lib/streamlit/components/v2/manifest_scanner.py:266 
            pyproject_content = dist.read_text("pyproject.toml")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0465d6a6dc56826 — Filesystem access.
repo/lib/streamlit/components/v2/manifest_scanner.py:364 
        with open(pyproject_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2e803a47ffa134b — Filesystem access.
repo/lib/streamlit/components/v2/manifest_scanner.py:412 
        with open(pyproject_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8825b6acecf2dc4 — Environment-variable access.
repo/lib/streamlit/config.py:880 
        and not os.getenv("DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #742d7c29b90e3576 — Environment-variable access.
repo/lib/streamlit/config.py:881 
        and not os.getenv("WAYLAND_DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3de87c30d00f38f4 — Environment-variable access.
repo/lib/streamlit/config.py:2645 
        env_var_value = os.environ.get(opt_val.env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4eb3855b8fb44599 — Environment-variable access.
repo/lib/streamlit/config.py:2789 
        env_var = os.environ.get(var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6abc5027e75c9476 — Filesystem access.
repo/lib/streamlit/config.py:2902 
            with open(filename, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35e0a5f1b1f1ac0b — Filesystem access.
repo/lib/streamlit/config_util.py:644 
            with open(file_path_or_url, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a9171794d941a88 — Filesystem access.
repo/lib/streamlit/connections/snowflake_connection.py:714 
        with open(SNOWPARK_CONNECTION_TOKEN_FILE, encoding="utf-8") as token_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7644d9a3566bbcf1 — Environment-variable access.
repo/lib/streamlit/connections/snowflake_connection.py:747 
            value = os.getenv(env_var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08356b6cfabf561d — Filesystem access.
repo/lib/streamlit/elements/html.py:120 
            with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82b9558dfdb86add — Filesystem access.
repo/lib/streamlit/elements/iframe.py:419 
                with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1531b9bc91c4798 — Filesystem access.
repo/lib/streamlit/elements/iframe.py:433 
            with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce869fcf8c9a8758 — Filesystem access.
repo/lib/streamlit/elements/lib/image_utils.py:273 
            with open(image, encoding="utf-8") as textfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3feddc71311fb1c4 — Filesystem access.
repo/lib/streamlit/elements/lib/image_utils.py:294 
            with open(image, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #daf8c090e824fcb0 — Filesystem access.
repo/lib/streamlit/elements/lib/subtitle_utils.py:121 
        with open(data_or_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfaca5d5b3cbfe53 — Filesystem access.
repo/lib/streamlit/elements/pdf.py:138 
                    with open(data_str, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7496bef7743c020b — Environment-variable access.
repo/lib/streamlit/env_util.py:33 
    if "WSL_DISTRO_NAME" in os.environ or "WSL_INTEROP" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07fd47b33701a2a6 — Filesystem access.
repo/lib/streamlit/env_util.py:37 
        with open("/proc/version", encoding="utf-8") as proc_version:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #def22ff873bfe2ae — Filesystem access.
repo/lib/streamlit/file_util.py:89 
    with open(os.path.join(CONFIG_FOLDER_NAME, path), mode) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8ab28d68ad42a61 — Filesystem access.
repo/lib/streamlit/file_util.py:115 
        with open(path, mode) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1234f45640732142 — Environment-variable access.
repo/lib/streamlit/file_util.py:223 
    pythonpath = os.environ.get("PYTHONPATH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6338bd25747b30a — Environment-variable access.
repo/lib/streamlit/runtime/app_session.py:861 
            "DISPLAY" in os.environ or "WAYLAND_DISPLAY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e1cc7dd4ed6b327 — Environment-variable access.
repo/lib/streamlit/runtime/connection_factory.py:420 
        name = os.environ[envvar_name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b101624d036b09a — Environment-variable access.
repo/lib/streamlit/runtime/credentials.py:50 
        not env_util.IS_WINDOWS or os.environ.get("WT_SESSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #ac00659887e35f81 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/lib/streamlit/runtime/credentials.py:78 
        response_json = requests.get(
            "https://data.streamlit.io/metrics.json", timeout=2
        ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #52acdb4aa1336f4f — Filesystem access.
repo/lib/streamlit/runtime/credentials.py:151 
            with open(self._conf_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05e7f7fff5aae671 — Filesystem access.
repo/lib/streamlit/runtime/credentials.py:221 
        with open(self._conf_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #061cf480816ce93d — Filesystem access.
repo/lib/streamlit/runtime/memory_media_file_storage.py:205 
            with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60d6151bda18f7ad — Filesystem access.
repo/lib/streamlit/runtime/metrics_util.py:255 
        with open(_ETC_MACHINE_ID_PATH, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37ad182088f5bacd — Filesystem access.
repo/lib/streamlit/runtime/metrics_util.py:259 
        with open(_DBUS_MACHINE_ID_PATH, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c7f3a42a67972b3 — Filesystem access.
repo/lib/streamlit/runtime/secrets.py:307 
            with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #687a211fc18511f7 — Filesystem access.
repo/lib/streamlit/runtime/secrets.py:363 
                with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e36ebf2eebdde1cf — Environment-variable access.
repo/lib/streamlit/runtime/secrets.py:513 
            os.environ[k] = str(v)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d8845001a27050b — Environment-variable access.
repo/lib/streamlit/runtime/secrets.py:522 
        if value_type in {str, int, float} and os.environ.get(k) == str(v):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d3064588d20af83 — Environment-variable access.
repo/lib/streamlit/runtime/secrets.py:523 
            del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8d5f085bf316ee5 — Filesystem access.
repo/lib/streamlit/source_util.py:55 
    return open(filename, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef48a8954bf17970 — Filesystem access.
repo/lib/streamlit/testing/v1/app_test.py:231 
        path.write_text(aligned_script, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #923ae2f7097ee049 — Filesystem access.
repo/lib/streamlit/watcher/util.py:118 
    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74708d35b0d6e84c — Environment-variable access.
repo/lib/streamlit/web/bootstrap.py:126 
    if "MAPBOX_API_KEY" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79109a7a63cf6368 — Environment-variable access.
repo/lib/streamlit/web/bootstrap.py:127 
        os.environ["MAPBOX_API_KEY"] = config.get_option("mapbox.token")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17f774798fc30f42 — Filesystem access.
repo/lib/streamlit/web/cli.py:122 
    with open(main_script_path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f8fbe4b01e65554 — Filesystem access.
repo/lib/streamlit/web/cli.py:585 
    (project_dir / "requirements.txt").write_text("streamlit\n", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f22f464fae16481 — Filesystem access.
repo/lib/streamlit/web/cli.py:588 
    (project_dir / "streamlit_app.py").write_text(
        """import streamlit as st

st.title("🎈 My new app")
st.write(
    "Let's start building! For help and inspiration, head over to [docs.streamlit.io](https://docs.streamlit.io/)."
)
""",
        encoding="utf-8",
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fa2674371e84813 — Filesystem access.
repo/lib/streamlit/web/server/app_discovery.py:365 
        source = path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #070751c2ad2b3323 — Environment-variable access.
repo/lib/streamlit/web/server/server_util.py:191 
            port_str = os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1644e9e433897712 — Filesystem access.
repo/lib/streamlit/web/skills.py:270 
        if (target_path / rel_path).read_bytes() != source_file.read_bytes():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

pyarrow

python dependency
high pii_flow tooling reachable #a7551dd114957a29 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:62 · flow /tmp/closeopen-7pugiy1o/pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:60 → /tmp/closeopen-7pugiy1o/pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:62 
        r = requests.post(endpoint + master_key_identifier,
                          headers=headers,
                          data={'plaintext': base64.b64encode(key_bytes)})

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow tooling reachable #0d8a769a303d684f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:76 · flow /tmp/closeopen-7pugiy1o/pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:74 → /tmp/closeopen-7pugiy1o/pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:76 
        r = requests.post(endpoint + master_key_identifier,
                          headers=headers,
                          data={'ciphertext': wrapped_key})

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 17 low-confidence finding(s)
low env_fs tooling reachable #7d10a5e0f382d8d2 — Filesystem access.
pkgs/python/[email protected]/examples/flight/client.py:168 
            with open(args.tls_roots, "rb") as root_certs:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #1013c97a830116be — Filesystem access.
pkgs/python/[email protected]/examples/flight/client.py:171 
        with open(args.mtls[0], "rb") as cert_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #905340b875ca1c3b — Filesystem access.
pkgs/python/[email protected]/examples/flight/client.py:173 
        with open(args.mtls[1], "rb") as key_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #a5a9407a7a44d509 — Filesystem access.
pkgs/python/[email protected]/examples/flight/server.py:137 
        with open(args.tls[0], "rb") as cert_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #531fbfcee57b72b5 — Filesystem access.
pkgs/python/[email protected]/examples/flight/server.py:139 
        with open(args.tls[1], "rb") as key_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #e030156322e64146 — Environment-variable access.
pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:117 
        kms_instance_url=os.environ.get('VAULT_URL', ''),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #fad8b18251098b65 — Environment-variable access.
pkgs/python/[email protected]/examples/parquet_encryption/sample_vault_kms_client.py:118 
        key_access_token=os.environ.get('VAULT_TOKEN', ''),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96fa7df8b4ba96b0 — Environment-variable access.
pkgs/python/[email protected]/pyarrow/__init__.py:316 
    return _os.environ.get('PKG_CONFIG', 'pkg-config')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #184742c3a1d45427 — Environment-variable access.
pkgs/python/[email protected]/pyarrow/__init__.py:409 
    pkg_config_executable = _os.environ.get('PKG_CONFIG') or 'pkg-config'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6cc23b5604336d7 — Environment-variable access.
pkgs/python/[email protected]/pyarrow/__init__.py:441 
    if _os.environ.get('ARROW_HOME'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a50cc929c291112b — Environment-variable access.
pkgs/python/[email protected]/pyarrow/__init__.py:442 
        append_library_dir(_os.path.join(_os.environ['ARROW_HOME'], 'lib'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf7eed6fa1ae6b7b — Environment-variable access.
pkgs/python/[email protected]/pyarrow/ipc.py:138 
        bool(int(os.environ.get('ARROW_PRE_0_15_IPC_FORMAT', '0')))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10daee5fbd56beda — Environment-variable access.
pkgs/python/[email protected]/pyarrow/ipc.py:139 
    if bool(int(os.environ.get('ARROW_PRE_1_0_METADATA_VERSION', '0'))):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #164a4ee41df52318 — Filesystem access.
pkgs/python/[email protected]/pyarrow/util.py:237 
        with open(out_path, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a7f14c3b9bf3e85 — Filesystem access.
pkgs/python/[email protected]/pyarrow/util.py:244 
        with open(out_path, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #5e6be4d79f3ff3fd — Filesystem access.
pkgs/python/[email protected]/scripts/update_stub_docstrings.py:200 
        tree = libcst.parse_module(stub_file.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #c1d574c3c789734f — Filesystem access.
pkgs/python/[email protected]/scripts/update_stub_docstrings.py:202 
        stub_file.write_text(modified.code, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

SQLAlchemy

python dependency
expand_more 28 low-confidence finding(s)
low env_fs dependency Excluded from app score #70765c9671c42a15 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/fixtures/mypy.py:42 
            with open(
                Path(cachedir) / "sqla_mypy_config.cfg", "w"
            ) as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56bc539a9eda2d70 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/fixtures/mypy.py:56 
            with open(
                Path(cachedir) / "plain_mypy_config.cfg", "w"
            ) as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc6834c3d6eb0811 — Environment-variable access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/fixtures/mypy.py:106 
            os.environ.pop("MYPY_FORCE_COLOR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1a44a2e2b005020 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/fixtures/mypy.py:146 
        with open(path) as file_:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae522806ff58c29e — Environment-variable access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/plugin/plugin_base.py:398 
    if os.environ.get("REQUIRE_SQLALCHEMY_CEXT", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8378d582baea8fd4 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/plugin/plugin_base.py:455 
            with open(options.write_idents, "a") as file_:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3476db297cfba24 — Environment-variable access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/plugin/pytestplugin.py:880 
        return os.environ.get("PYTEST_CURRENT_TEST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98b70987dc03bfeb — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/profiling.py:200 
            profile_f = open(self.fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9bbed141c9ecde94 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/profiling.py:219 
        profile_f = open(self.fname, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c48f8966f7bbdee0 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/testing/provision.py:453 
    with open(idents_file) as file_:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79ae0bf99f3849da — Environment-variable access.
pkgs/python/[email protected]/lib/sqlalchemy/util/_has_cy.py:27 
    if os.environ.get("DISABLE_SQLALCHEMY_CEXT_RUNTIME"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7b4b55883997e66 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/util/tool_support.py:134 
            Path(destination_path).write_text(
                text, encoding="utf-8", newline="\n"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86674a3c0b7f6d2b — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/util/tool_support.py:146 
            with open(tempfile) as tf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed35395f264be97f — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/util/tool_support.py:162 
            with open(source_file, encoding="utf-8") as tf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f18e35cb11f17d53 — Filesystem access.
pkgs/python/[email protected]/lib/sqlalchemy/util/tool_support.py:169 
        with open(destination_path, encoding="utf-8") as dp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1aaa6873690528d5 — Environment-variable access.
pkgs/python/[email protected]/noxfile.py:95 
    cmd.extend(os.environ.get(dburl_env, default_dburl).split())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e5dad33a4f8c4ab — Environment-variable access.
pkgs/python/[email protected]/noxfile.py:106 
    env_dbdrivers = os.environ.get(extra_driver_env, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da281d7f4d42df48 — Environment-variable access.
pkgs/python/[email protected]/noxfile.py:269 
    cmd.extend(os.environ.get("TOX_WORKERS", "-n4").split())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #097f10363165f4f0 — Environment-variable access.
pkgs/python/[email protected]/setup.py:23 
DISABLE_EXTENSION = bool(os.environ.get("DISABLE_SQLALCHEMY_CEXT"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ff27d0209ffaf0b — Environment-variable access.
pkgs/python/[email protected]/setup.py:24 
REQUIRE_EXTENSION = bool(os.environ.get("REQUIRE_SQLALCHEMY_CEXT"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #4d22e5a7cb9c0225 — Filesystem access.
pkgs/python/[email protected]/tools/format_docs_code.py:155 
    original = file.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #dfcb791eab1e3c6d — Filesystem access.
pkgs/python/[email protected]/tools/format_docs_code.py:313 
                file.write_text(updated, "utf-8", newline="\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #bca25e2a9f4c14dc — Filesystem access.
pkgs/python/[email protected]/tools/generate_proxy_methods.py:145 
    with open(fn.__code__.co_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #0758f7cdd5a6854a — Filesystem access.
pkgs/python/[email protected]/tools/generate_proxy_methods.py:373 
        open(filename) as orig_py,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #ce87438b80d1c6d3 — Filesystem access.
pkgs/python/[email protected]/tools/generate_sql_functions.py:38 
        open(filename) as orig_py,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #8d661f0b21461d37 — Filesystem access.
pkgs/python/[email protected]/tools/generate_tuple_map_overloads.py:53 
        open(filename) as orig_py,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #d2a4f4e066da2f91 — Filesystem access.
pkgs/python/[email protected]/tools/normalize_file_headers.py:27 
    content = file.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #773bb6996e0484f0 — Filesystem access.
pkgs/python/[email protected]/tools/sync_test_files.py:35 
    source_data = Path(source).read_text().replace(remove_str, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

altair

python dependency
expand_more 7 low-confidence finding(s)
low env_fs dependency Excluded from app score #3a6e92e98ffce147 — Environment-variable access.
pkgs/python/[email protected]/altair/datasets/_cache.py:307 
        Path(os.environ.get("XDG_CACHE_HOME", Path.home() / ".cache")) / "altair"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8c1c78fef0100dd — Environment-variable access.
pkgs/python/[email protected]/altair/datasets/_cache.py:401 
        fp = Path(usr) if (usr := os.environ.get(self._ENV_VAR)) else self._XDG_CACHE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f18ef925ac36c9e — Environment-variable access.
pkgs/python/[email protected]/altair/datasets/_cache.py:408 
            os.environ[self._ENV_VAR] = str(Path(source).resolve())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb227fe829529c66 — Environment-variable access.
pkgs/python/[email protected]/altair/datasets/_cache.py:410 
            os.environ[self._ENV_VAR] = ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc1c04a2262ea04f — Environment-variable access.
pkgs/python/[email protected]/altair/datasets/_cache.py:429 
        return os.environ.get(self._ENV_VAR) == ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ca7660c974a222d — Filesystem access.
pkgs/python/[email protected]/altair/jupyter/jupyter_chart.py:95 
    return (_here / "js" / "index.js").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31651250d4e41584 — Filesystem access.
pkgs/python/[email protected]/altair/utils/data.py:308 
    Path(filename).write_text(data, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

anyio

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #f0f7e069eefc5265 — Filesystem access.
pkgs/python/[email protected]/src/anyio/to_process.py:212 
    sys.stdin = open(os.devnull)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e682cd07a764591 — Filesystem access.
pkgs/python/[email protected]/src/anyio/to_process.py:213 
    sys.stdout = open(os.devnull, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb2adc2f2168e121 — Filesystem access.
pkgs/python/[email protected]/src/anyio/to_process.py:214 
    sys.stderr = open(os.devnull, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

cachetools

python dependency
expand_more 1 low-confidence finding(s)
low env_fs tooling reachable #d382c16f8d69eba2 — Filesystem access.
pkgs/python/[email protected]/docs/conf.py:12 
    text = (src_directory / "cachetools/__init__.py").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

click

python dependency
expand_more 31 low-confidence finding(s)
low env_fs dependency Excluded from app score #917c25ce918a76a7 — Filesystem access.
pkgs/python/[email protected]/src/click/_compat.py:366 
        return open(file, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7abaee94db27b21c — Filesystem access.
pkgs/python/[email protected]/src/click/_compat.py:368 
    return open(file, mode, encoding=encoding, errors=errors)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27535a9271f1da11 — Environment-variable access.
pkgs/python/[email protected]/src/click/_termui_impl.py:418 
    pager_cmd_parts = shlex.split(os.environ.get("PAGER", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24560f6bf63925e1 — Environment-variable access.
pkgs/python/[email protected]/src/click/_termui_impl.py:424 
    if os.environ.get("TERM") in ("dumb", "emacs"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20792a45d63f0e18 — Environment-variable access.
pkgs/python/[email protected]/src/click/_termui_impl.py:516 
    env = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c26324f4985e42de — Environment-variable access.
pkgs/python/[email protected]/src/click/_termui_impl.py:521 
        less_flags = f"{os.environ.get('LESS', '')}{' '.join(cmd_params)}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #402d4a0d81435b11 — Environment-variable access.
pkgs/python/[email protected]/src/click/_termui_impl.py:673 
            rv = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49d1a355619c032d — Environment-variable access.
pkgs/python/[email protected]/src/click/_termui_impl.py:695 
            environ = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e116942ac58ca46b — Filesystem access.
pkgs/python/[email protected]/src/click/_termui_impl.py:761 
            with open(name, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4bb04dad8abbadbf — Filesystem access.
pkgs/python/[email protected]/src/click/_termui_impl.py:790 
        null = open("/dev/null", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71c6b5bd0d06578a — Filesystem access.
pkgs/python/[email protected]/src/click/_termui_impl.py:916 
            f = open("/dev/tty")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7aec0522833c2966 — Filesystem access.
pkgs/python/[email protected]/src/click/core.py:1243 
                formatter.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4263571ebc8781b8 — Filesystem access.
pkgs/python/[email protected]/src/click/core.py:1264 
                formatter.write_text(epilog)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37ae41141f90e31c — Environment-variable access.
pkgs/python/[email protected]/src/click/core.py:1557 
        instruction = os.environ.get(complete_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1496ea569aed54a — Environment-variable access.
pkgs/python/[email protected]/src/click/core.py:2631 
            rv = os.environ.get(self.envvar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ebbc95cf7767564 — Environment-variable access.
pkgs/python/[email protected]/src/click/core.py:2637 
                rv = os.environ.get(envvar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #308d17661d1e1608 — Environment-variable access.
pkgs/python/[email protected]/src/click/core.py:3402 
            rv = os.environ.get(envvar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #091bf11838f15679 — Environment-variable access.
pkgs/python/[email protected]/src/click/shell_completion.py:371 
        cwords = split_arg_string(os.environ["COMP_WORDS"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b73c7f92f84f384c — Environment-variable access.
pkgs/python/[email protected]/src/click/shell_completion.py:372 
        cword = int(os.environ["COMP_CWORD"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #187b363a86b9f586 — Environment-variable access.
pkgs/python/[email protected]/src/click/shell_completion.py:393 
        cwords = split_arg_string(os.environ["COMP_WORDS"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c04caa3edc08ab15 — Environment-variable access.
pkgs/python/[email protected]/src/click/shell_completion.py:394 
        cword = int(os.environ["COMP_CWORD"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46d7b62f8fa7bfd9 — Environment-variable access.
pkgs/python/[email protected]/src/click/shell_completion.py:429 
        cwords = split_arg_string(os.environ["COMP_WORDS"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4392ebfedbab4f6 — Environment-variable access.
pkgs/python/[email protected]/src/click/shell_completion.py:430 
        incomplete = os.environ["COMP_CWORD"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c77c3d4fcac5a7e — Environment-variable access.
pkgs/python/[email protected]/src/click/testing.py:567 
                old_env[key] = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a559d4c5fb6e2fee — Environment-variable access.
pkgs/python/[email protected]/src/click/testing.py:570 
                        del os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5eb01a701022d83c — Environment-variable access.
pkgs/python/[email protected]/src/click/testing.py:574 
                    os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20edf2a473b9519e — Environment-variable access.
pkgs/python/[email protected]/src/click/testing.py:580 
                        del os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #046e30c6ae288b7e — Environment-variable access.
pkgs/python/[email protected]/src/click/testing.py:584 
                    os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #477d9ca297186701 — Filesystem access.
pkgs/python/[email protected]/src/click/utils.py:149 
                open(filename, mode).close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a850e1473e3945c0 — Environment-variable access.
pkgs/python/[email protected]/src/click/utils.py:506 
        folder = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5db4b5f212f95d87 — Environment-variable access.
pkgs/python/[email protected]/src/click/utils.py:517 
        os.environ.get("XDG_CONFIG_HOME", os.path.expanduser("~/.config")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

gitpython

python dependency
expand_more 55 low-confidence finding(s)
low env_fs dependency Excluded from app score #32db3d575895e395 — Filesystem access.
pkgs/python/[email protected]/doc/source/conf.py:50 
with open(os.path.join(os.path.dirname(__file__), "..", "..", "VERSION")) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2e6fc4fcd163563 — Environment-variable access.
pkgs/python/[email protected]/git/cmd.py:668 
    GIT_PYTHON_TRACE = os.environ.get("GIT_PYTHON_TRACE", False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1bdc4442772bf9e4 — Environment-variable access.
pkgs/python/[email protected]/git/cmd.py:784 
            new_git = os.environ.get(cls._git_exec_env_var, cls.git_exec_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #899afd5c9e6be747 — Environment-variable access.
pkgs/python/[email protected]/git/cmd.py:833 
                mode = os.environ.get(cls._refresh_env_var, "raise").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a299b1bf0396f1f — Environment-variable access.
pkgs/python/[email protected]/git/cmd.py:1364 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee383e3150d13992 — Filesystem access.
pkgs/python/[email protected]/git/cmd.py:1386 
        stdout_sink = PIPE if with_stdout else getattr(subprocess, "DEVNULL", None) or open(os.devnull, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b03c59b19a2bd33 — Environment-variable access.
pkgs/python/[email protected]/git/config.py:259 
        config_home = os.environ.get("XDG_CONFIG_HOME") or osp.join(os.environ.get("HOME", "~"), ".config")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d03f6fd7f8954c83 — Filesystem access.
pkgs/python/[email protected]/git/config.py:652 
                    with open(file_path, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02288d3319beac16 — Filesystem access.
pkgs/python/[email protected]/git/config.py:770 
            with open(fp, "wb") as fp_open:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1816d742550e33e — Filesystem access.
pkgs/python/[email protected]/git/index/base.py:705 
                return open(filepath, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6be30e2ed47c2202 — Filesystem access.
pkgs/python/[email protected]/git/index/base.py:1180 
        with open(self._commit_editmsg_filepath(), "wb") as commit_editmsg_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #399c893df5401219 — Filesystem access.
pkgs/python/[email protected]/git/index/base.py:1187 
        with open(self._commit_editmsg_filepath(), "rb") as commit_editmsg_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a67e0afe6f8506c — Environment-variable access.
pkgs/python/[email protected]/git/index/fun.py:89 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #295fdc550ddb5afd — Environment-variable access.
pkgs/python/[email protected]/git/objects/commit.py:681 
        env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97834d0f7b1dbb02 — Filesystem access.
pkgs/python/[email protected]/git/objects/submodule/base.py:428 
        with open(git_file, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5308f71d62e6d47f — Filesystem access.
pkgs/python/[email protected]/git/refs/log.py:267 
        with open(filepath, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d19fe9ff8cd233c2 — Filesystem access.
pkgs/python/[email protected]/git/refs/log.py:363 
            fd = open(filepath, "ab")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10e39385e92bb240 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:152 
            with open(cls._get_packed_refs_path(repo), "rt", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b6fafa77c59b1a0 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:265 
            with open(os.path.join(repodir, ref_path), "rt", encoding="UTF-8") as fp:  # type: ignore[arg-type]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99717d415db25b87 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:668 
                with open(pack_file_path, "rb") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c8a2f8cba3c34d2 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:696 
                    with open(pack_file_path, "wb") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0f488dc27cc3ed2 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:738 
            with open(abs_ref_path, "rb") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d683753f304b4da6 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:822 
                with open(new_abs_path, "rb") as fd1:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #689b739bd8afe2ca — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:824 
                with open(cur_abs_path, "rb") as fd2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eec84f37059a194f — Filesystem access.
pkgs/python/[email protected]/git/remote.py:918 
        with open(fetch_head.abspath, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43ff3211bebbdbb0 — Environment-variable access.
repo/base.py:230 
        epath = path or os.getenv("GIT_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72b9802efe6e586b — Environment-variable access.
repo/base.py:266 
                if "GIT_WORK_TREE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb8d8403c9f66cb9 — Environment-variable access.
repo/base.py:267 
                    self._working_tree_dir = os.getenv("GIT_WORK_TREE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12ab58156fde4733 — Filesystem access.
repo/base.py:271 
                    with open(osp.join(git_dir, "gitdir")) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79bf2a6b7800466f — Environment-variable access.
repo/base.py:294 
                if os.environ.get("GIT_COMMON_DIR") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #808a00faab751a35 — Environment-variable access.
repo/base.py:298 
                if "GIT_WORK_TREE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b7b619c1cf09622 — Environment-variable access.
repo/base.py:299 
                    self._working_tree_dir = os.getenv("GIT_WORK_TREE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8410390acc68e8c5 — Filesystem access.
repo/base.py:336 
            common_dir = (Path(self.git_dir) / "commondir").read_text().splitlines()[0].strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9bff1350f6e41c1 — Filesystem access.
repo/base.py:397 
        with open(filename, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ec235545e571ca8 — Filesystem access.
repo/base.py:403 
        with open(filename, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f84e112cf166e9aa — Environment-variable access.
repo/base.py:678 
            config_home = os.environ.get("XDG_CONFIG_HOME") or osp.join(os.environ.get("HOME", "~"), ".config")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21f991d494919f55 — Filesystem access.
repo/base.py:952 
            with open(alternates_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0999405ef2e45e1 — Filesystem access.
repo/base.py:975 
            with open(alternates_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3e51c4f62a87363 — Filesystem access.
repo/base.py:1728 
        with open(rebase_head_file, "rt") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #803e1b39b613aa35 — Filesystem access.
repo/fun.py:55 
    with open(filename, "ab"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2326f19f5bca6d4a — Environment-variable access.
repo/fun.py:69 
        if (osp.isdir(osp.join(d, "objects")) or "GIT_OBJECT_DIRECTORY" in os.environ) and osp.isdir(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7dfdf23ebd666f3b — Filesystem access.
repo/fun.py:93 
        lines = Path(dotgit).read_text().splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa8bd0aca969829f — Filesystem access.
repo/fun.py:108 
        with open(d) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97eab550426ae14e — Environment-variable access.
pkgs/python/[email protected]/git/util.py:122 
        value = os.environ[name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90b567393c301f4e — Environment-variable access.
pkgs/python/[email protected]/git/util.py:201 
    old_value = os.getenv(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5425cf0504c22209 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:202 
    os.environ[name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #491272c013c263b5 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:207 
            del os.environ[name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6323af1fe6bfd564 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:209 
            os.environ[name] = old_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #985d48d939a8d260 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:338 
    PATHEXT = os.environ.get("PATHEXT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2509253521361c75 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:374 
        path = os.environ["PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f1ff91c98f0ac12 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:865 
                val = os.environ[evar]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d9ba758ac76a351 — Filesystem access.
pkgs/python/[email protected]/git/util.py:1051 
            with open(lock_file, mode="w"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e021a207b34963a3 — Filesystem access.
pkgs/python/[email protected]/setup.py:14 
    return (Path(__file__).parent / path).read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73b8e87b1843163f — Filesystem access.
pkgs/python/[email protected]/setup.py:49 
        with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d700e8847a713fb — Filesystem access.
pkgs/python/[email protected]/setup.py:59 
        with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

httptools

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #7c14626cefe48e5c — Filesystem access.
pkgs/python/[email protected]/setup.py:143 
with open(str(ROOT / 'httptools' / '_version.py')) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

orjson

python dependency
expand_more 40 low-confidence finding(s)
low env_fs dependency Excluded from app score #09e79bd63c0f2ea7 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:118 
data = json.load(open("../encoding/encodings.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aaf8939cd30f7c49 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:120 
indexes = json.load(open("../encoding/indexes.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #528e63dda7d60846 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:366 
  partially_generated_file = open(path, "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49c114c8d5954c11 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:387 
label_file = open("src/lib.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b383109a235181b4 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:405 
  docfile = open("doc/%s.txt" % name, "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ebc7916a50c6454 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:457 
label_test_file = open("src/test_labels_names.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e432be886fd472ec — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:484 
data_file = open("src/data.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #754d23a72ca6151d — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1173 
variant_file = open("src/variant.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d365689fd287607 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1417 
ffi_file = open("../encoding_c/src/lib.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #423b70764eafa763 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1440 
single_byte_file = open("src/single_byte.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #457f23de9537db03 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1494 
static_file = open("../encoding_c/include/encoding_rs_statics.h", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22e41bdcd79e2bc2 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1560 
utf_8_file = open("src/utf_8.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d02ff6a64f31de65 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1623 
jis0208_in_file = open("src/test_data/jis0208_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #488d98952c9ffbac — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1632 
jis0208_in_ref_file = open("src/test_data/jis0208_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0cc0e6c7d251092c — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1642 
jis0208_out_file = open("src/test_data/jis0208_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9069a8dc52ba9d1d — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1643 
jis0208_out_ref_file = open("src/test_data/jis0208_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dca2ae9792cd501b — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1660 
shift_jis_in_file = open("src/test_data/shift_jis_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd1c4a1c85a3d769 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1669 
shift_jis_in_ref_file = open("src/test_data/shift_jis_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a27e41af93a41f2d — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1684 
shift_jis_out_file = open("src/test_data/shift_jis_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53b9bd22ab4df3e8 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1685 
shift_jis_out_ref_file = open("src/test_data/shift_jis_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1ad0f582779efe8 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1713 
iso_2022_jp_in_file = open("src/test_data/iso_2022_jp_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39e5ac1191ecb431 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1722 
iso_2022_jp_in_ref_file = open("src/test_data/iso_2022_jp_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6d5663d6db6969c — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1732 
iso_2022_jp_out_file = open("src/test_data/iso_2022_jp_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87020d7e566c0c58 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1733 
iso_2022_jp_out_ref_file = open("src/test_data/iso_2022_jp_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b7781e3e3259b9a — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1761 
euc_kr_in_file = open("src/test_data/euc_kr_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7fa27ea5c6cbe47 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1770 
euc_kr_in_ref_file = open("src/test_data/euc_kr_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c3bb21a0c6139e9 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1785 
euc_kr_out_file = open("src/test_data/euc_kr_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87221aea12681d17 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1786 
euc_kr_out_ref_file = open("src/test_data/euc_kr_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1445184cd20d114 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1802 
gb18030_in_file = open("src/test_data/gb18030_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #621503baf19faa9c — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1811 
gb18030_in_ref_file = open("src/test_data/gb18030_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c4879a4c33f9b06 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1826 
gb18030_out_file = open("src/test_data/gb18030_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70d2c1be3a11adae — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1827 
gb18030_out_ref_file = open("src/test_data/gb18030_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd63eddab5932624 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1845 
big5_in_file = open("src/test_data/big5_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6497ec9d07242e13 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1861 
big5_in_ref_file = open("src/test_data/big5_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7d38bbd680f4e57 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1898 
big5_out_file = open("src/test_data/big5_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5482da032d567923 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1899 
big5_out_ref_file = open("src/test_data/big5_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1edf92f7e96eef0 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1921 
jis0212_in_file = open("src/test_data/jis0212_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c8d5c0ee280d73e — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1930 
jis0212_in_ref_file = open("src/test_data/jis0212_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2c9a76d1856bfdf — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1942 
codepage_file = open("../codepage/src/lib.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63945930d28c03b9 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1974 
codepage_test_file = open("../codepage/src/tests.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

packaging

python dependency
expand_more 3 low-confidence finding(s)
low env_fs tooling reachable #cb1d52edd9ea1a00 — Filesystem access.
pkgs/python/[email protected]/docs/conf.py:11 
with open(os.path.join(_BASE_DIR, "src", "packaging", "__init__.py")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4d72b5221b19f68 — Filesystem access.
pkgs/python/[email protected]/src/packaging/_manylinux.py:34 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4566c92983148e68 — Filesystem access.
pkgs/python/[email protected]/src/packaging/_musllinux.py:46 
        with open(executable, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pandas

python dependency
expand_more 28 low-confidence finding(s)
low env_fs dependency Excluded from app score #83f80715b4309222 — Filesystem access.
pkgs/python/[email protected]/generate_pxi.py:8 
    with open(pxifile, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc06b44a6f44cf70 — Filesystem access.
pkgs/python/[email protected]/generate_pxi.py:12 
    with open(outfile, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6b7e8d8e4503f13 — Environment-variable access.
pkgs/python/[email protected]/generate_version.py:25 
    if os.environ.get("MESON_DIST_ROOT"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d89fbe69847f5f3 — Environment-variable access.
pkgs/python/[email protected]/generate_version.py:26 
        path = os.path.join(os.environ.get("MESON_DIST_ROOT"), path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4e6cd957aced64a — Filesystem access.
pkgs/python/[email protected]/generate_version.py:27 
    with open(path, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db5507445c33853d — Environment-variable access.
pkgs/python/[email protected]/pandas/_testing/contexts.py:76 
                    del os.environ["TZ"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61a5f1bcfee5b555 — Environment-variable access.
pkgs/python/[email protected]/pandas/_testing/contexts.py:80 
                os.environ["TZ"] = tz

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb7f0f9b74ffe66b — Environment-variable access.
pkgs/python/[email protected]/pandas/_testing/contexts.py:85 
    orig_tz = os.environ.get("TZ")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #712edc9bc8bebebd — Filesystem access.
pkgs/python/[email protected]/pandas/_version.py:159 
        with open(versionfile_abs, encoding="utf-8") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63bbc1c1d3f00d06 — Environment-variable access.
pkgs/python/[email protected]/pandas/_version.py:264 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8dc37daad268ceb — Environment-variable access.
pkgs/python/[email protected]/pandas/compat/__init__.py:154 
    return os.environ.get("PANDAS_CI", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d5eb9091e29fe2d — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:425 
        if os.environ.get("PANDAS_COPY_ON_WRITE", "0") == "warn"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb0b9beb209aa53e — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:426 
        else os.environ.get("PANDAS_COPY_ON_WRITE", "1") == "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #723fb3345e6fa653 — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:878 
        False if os.environ.get("PANDAS_FUTURE_INFER_STRING", "1") == "0" else True,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e106ebeb5d890a70 — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:895 
        os.environ.get("PANDAS_FUTURE_DISTINGUISH_NAN_AND_NA", "0") == "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c9fb001cd0fcc27 — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:906 
        False if os.environ.get("PANDAS_FUTURE_PYTHON_SCALARS", "0") == "0" else True,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1f787a030a3477e — Filesystem access.
pkgs/python/[email protected]/pandas/core/series.py:1573 
            with open(buf, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74903d10030a818a — Environment-variable access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:74 
HAS_DISPLAY = os.getenv("DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abdfcba1866eb2e2 — Filesystem access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:302 
        with open("/dev/clipboard", "w", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #427aa9668e3264ff — Filesystem access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:306 
        with open("/dev/clipboard", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68296e365c436a4c — Environment-variable access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:569 
        if os.environ.get("WAYLAND_DISPLAY") and _executable_exists("wl-copy"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8843bb032806c8e — Filesystem access.
pkgs/python/[email protected]/pandas/io/common.py:930 
            handle = open(
                handle,
                ioargs.mode,
                encoding=ioargs.encoding,
                errors=errors,
                newline="",
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7f058222b8a3e92 — Filesystem access.
pkgs/python/[email protected]/pandas/io/common.py:939 
            handle = open(handle, ioargs.mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1166ac3c6f9684a3 — Filesystem access.
pkgs/python/[email protected]/pandas/io/common.py:1192 
        handle = open(handle, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c63fffd083fdbd87 — Filesystem access.
pkgs/python/[email protected]/pandas/io/formats/format.py:1076 
        with open(buf, "w", encoding=encoding, newline="") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2816a1fc65a34761 — Environment-variable access.
pkgs/python/[email protected]/pandas/util/_print_versions.py:57 
        "LC_ALL": os.environ.get("LC_ALL"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #835513c0bfb018d8 — Environment-variable access.
pkgs/python/[email protected]/pandas/util/_print_versions.py:58 
        "LANG": os.environ.get("LANG"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50452e00f8f862e4 — Filesystem access.
pkgs/python/[email protected]/pandas/util/_print_versions.py:148 
            with open(as_json, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

protobuf

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #f62311b254794b94 — Environment-variable access.
pkgs/python/[email protected]/google/protobuf/internal/api_implementation.py:65 
_implementation_type = os.getenv('PROTOCOL_BUFFERS_PYTHON_IMPLEMENTATION',
                                 _implementation_type)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f214341d28a2777 — Environment-variable access.
pkgs/python/[email protected]/google/protobuf/runtime_version.py:71 
  disable_flag = os.getenv('TEMPORARILY_DISABLE_PROTOBUF_VERSION_CHECK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ed8c2d2a07323b9 — Filesystem access.
pkgs/python/[email protected]/setup.py:28 
  with open(os.path.join('google', 'protobuf', '__init__.py')) as version_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pydeck

python dependency
expand_more 13 low-confidence finding(s)
low env_fs tooling reachable #8090baf78a3cc82f — Environment-variable access.
pkgs/python/[email protected]/examples/terrain_layer.py:12 
MAPBOX_API_KEY = os.environ.get("MapboxAccessToken") or os.environ.get("MAPBOX_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #303273a6e1fd2cbd — Environment-variable access.
pkgs/python/[email protected]/pydeck/bindings/deck.py:172 
                    attr_value = os.getenv(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e89d06f2f597200 — Environment-variable access.
pkgs/python/[email protected]/pydeck/io/html.py:42 
    dev_port = os.getenv("PYDECK_DEV_PORT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9aee2e1450ed480c — Filesystem access.
pkgs/python/[email protected]/pydeck/io/html.py:51 
        with open(join(dirname(__file__), RELPATH_TO_BUNDLE), "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12346b0947cb2e3e — Filesystem access.
pkgs/python/[email protected]/pydeck/io/html.py:156 
        with open(filename, "w+", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f983a0e56963d4e0 — Filesystem access.
pkgs/python/[email protected]/pydeck/types/image.py:50 
            with open(os.path.expanduser(self.path), "rb") as img_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #579ff15a1ffeec5d — Filesystem access.
pkgs/python/[email protected]/setup.py:20 
with open(os.path.join(here, "pydeck", "_version.py")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7fdd7c9bd06efd2 — Filesystem access.
pkgs/python/[email protected]/setup.py:25 
    return open(os.path.join(here, *parts), "r").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4404e372a94ca4fa — Environment-variable access.
pkgs/python/[email protected]/setup.py:32 
log.info("$PATH=%s" % os.environ["PATH"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #923f10aa0492a3a0 — Environment-variable access.
pkgs/python/[email protected]/setup.py:41 
    [os.path.join(PATH_TO_REPO_ROOT, "node_modules", ".bin"), os.environ.get("PATH", os.defpath)]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee471ef4de9834d3 — Filesystem access.
pkgs/python/[email protected]/setup.py:100 
            check_call(["npm", "--version"], stdout=open(os.devnull, "wb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d71b47e8f15cb0b8 — Filesystem access.
pkgs/python/[email protected]/setup.py:101 
            check_call(["yarn", "--version"], stdout=open(os.devnull, "wb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #857c2285ac83cd88 — Environment-variable access.
pkgs/python/[email protected]/setup.py:124 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

python-multipart

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #78ee2f79cfbbc071 — Filesystem access.
pkgs/python/[email protected]/python_multipart/multipart.py:516 
                tmp_file = open(path, "w+b")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

requests

python dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #b86bdd7b9b5b2668 — Environment-variable access.
pkgs/python/[email protected]/src/requests/sessions.py:857 
                    os.environ.get("REQUESTS_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ab06b520bd94003 — Environment-variable access.
pkgs/python/[email protected]/src/requests/sessions.py:858 
                    or os.environ.get("CURL_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #adb5c2fc01b2871d — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:239 
    netrc_file = os.environ.get("NETRC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ed11364258d802f — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:798 
        old_value = os.environ.get(env_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98e9dd61be2e0def — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:799 
        os.environ[env_name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8066f8a92c742fac — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:805 
                del os.environ[env_name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2ffadaaae7f7461 — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:807 
                os.environ[env_name] = old_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d3711f356371edd — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:820 
        return os.environ.get(key) or os.environ.get(key.upper())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

starlette

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #f2ed55ac48cb621a — Environment-variable access.
pkgs/python/[email protected]/starlette/config.py:19 
    def __init__(self, environ: MutableMapping[str, str] = os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b697620be45f5d4e — Filesystem access.
pkgs/python/[email protected]/starlette/config.py:113 
        with open(file_name, encoding=encoding) as input_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

toml

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #bd4bcf6f85dd21b4 — Filesystem access.
pkgs/python/[email protected]/setup.py:8 
with open("README.rst") as readme_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64709cdcdfebcce5 — Filesystem access.
pkgs/python/[email protected]/toml/decoder.py:133 
        with io.open(_getpath(f), encoding='utf-8') as ffile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

typing-extensions

python dependency
expand_more 7 low-confidence finding(s)
low env_fs dependency Excluded from app score #3bc45ffc731fe52f — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:1698 
            Path(tempdir, "ann_module.py").write_text(ANN_MODULE_SOURCE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0e5d9a5df1a4ae1 — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:1699 
            Path(tempdir, "ann_module2.py").write_text(ANN_MODULE_2_SOURCE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e9e8f2fa69641d0 — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:1700 
            Path(tempdir, "ann_module3.py").write_text(ANN_MODULE_3_SOURCE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8dccedcb976c342e — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:8783 
            Path(tempdir, "inspect_stock_annotations.py").write_text(STOCK_ANNOTATIONS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b0c3f6f1b400647 — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:8784 
            Path(tempdir, "inspect_stringized_annotations.py").write_text(STRINGIZED_ANNOTATIONS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #191e288cf46f743a — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:8785 
            Path(tempdir, "inspect_stringized_annotations_2.py").write_text(STRINGIZED_ANNOTATIONS_2)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #238066ee05d8a128 — Filesystem access.
pkgs/python/[email protected]/src/test_typing_extensions.py:9234 
            Path(tempdir, "inspect_stringized_annotations_pep_695.py").write_text(STRINGIZED_ANNOTATIONS_PEP_695)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

uvicorn

python dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #bed2cad2df30458d — Environment-variable access.
pkgs/python/[email protected]/uvicorn/config.py:351 
        if workers is None and "WEB_CONCURRENCY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ddc8b1c5ab5efcd — Environment-variable access.
pkgs/python/[email protected]/uvicorn/config.py:352 
            self.workers = int(os.environ["WEB_CONCURRENCY"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa94feae9646aeaf — Environment-variable access.
pkgs/python/[email protected]/uvicorn/config.py:356 
            self.forwarded_allow_ips = os.environ.get("FORWARDED_ALLOW_IPS", "127.0.0.1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d27698d532f28e6 — Filesystem access.
pkgs/python/[email protected]/uvicorn/config.py:393 
                with open(self.log_config) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #391d0f57fcccd6bc — Filesystem access.
pkgs/python/[email protected]/uvicorn/config.py:404 
                with open(self.log_config) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

vega-datasets

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #e38e143b408a43e8 — Filesystem access.
pkgs/python/[email protected]/setup.py:13 
    with io.open(path, encoding=encoding) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

websockets

python dependency
expand_more 24 low-confidence finding(s)
low env_fs dependency Excluded from app score #ad9e2318d9d3e41c — Filesystem access.
pkgs/python/[email protected]/setup.py:10 
exec((root_dir / "src" / "websockets" / "version.py").read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9798da86c1bedfae — Filesystem access.
pkgs/python/[email protected]/setup.py:16 
    (root_dir / "README.rst").read_text(encoding="utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6b0bda38811f488 — Environment-variable access.
pkgs/python/[email protected]/setup.py:22 
if os.environ.get("BUILD_EXTENSION") == "no":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64a3679c2d874227 — Environment-variable access.
pkgs/python/[email protected]/setup.py:29 
            optional=os.environ.get("BUILD_EXTENSION") != "yes",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e592c3de3e0be1e2 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/asyncio/client.py:39 
MAX_REDIRECTS = int(os.environ.get("WEBSOCKETS_MAX_REDIRECTS", "10"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4414815b0ec7aa8c — Environment-variable access.
pkgs/python/[email protected]/src/websockets/client.py:353 
BACKOFF_INITIAL_DELAY = float(os.environ.get("WEBSOCKETS_BACKOFF_INITIAL_DELAY", "5"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4394b017d2729ff — Environment-variable access.
pkgs/python/[email protected]/src/websockets/client.py:354 
BACKOFF_MIN_DELAY = float(os.environ.get("WEBSOCKETS_BACKOFF_MIN_DELAY", "3.1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc7b581566d7adb7 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/client.py:355 
BACKOFF_MAX_DELAY = float(os.environ.get("WEBSOCKETS_BACKOFF_MAX_DELAY", "90.0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82a212fed7936771 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/client.py:356 
BACKOFF_FACTOR = float(os.environ.get("WEBSOCKETS_BACKOFF_FACTOR", "1.618"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #448cb2ef78a7593a — Environment-variable access.
pkgs/python/[email protected]/src/websockets/frames.py:148 
    MAX_LOG_SIZE = int(os.environ.get("WEBSOCKETS_MAX_LOG_SIZE", "75"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4162b8ebace8588b — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:27 
USER_AGENT = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ccd462490d28546 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:27 
USER_AGENT = os.environ.get(
    "WEBSOCKETS_USER_AGENT",
    f"Python/{PYTHON_VERSION} websockets/{websockets_version}",
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b475f6a1b0ec6fc8 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:33 
SERVER = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec516f67876ca1bb — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:33 
SERVER = os.environ.get(
    "WEBSOCKETS_SERVER",
    f"Python/{PYTHON_VERSION} websockets/{websockets_version}",
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cb27a1570d9cd1e — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:39 
MAX_NUM_HEADERS = int(os.environ.get("WEBSOCKETS_MAX_NUM_HEADERS", "128"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57138ec8ddf30aa1 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:43 
MAX_LINE_LENGTH = int(os.environ.get("WEBSOCKETS_MAX_LINE_LENGTH", "8192"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #243af21e882409a6 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/http11.py:47 
MAX_BODY_SIZE = int(os.environ.get("WEBSOCKETS_MAX_BODY_SIZE", "1_048_576"))  # 1 MiB

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a17c26189a2ff5d0 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/client.py:417 
    MAX_REDIRECTS_ALLOWED = int(os.environ.get("WEBSOCKETS_MAX_REDIRECTS", "10"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afbb8f1e5a2e623d — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/client.py:602 
    BACKOFF_INITIAL = float(os.environ.get("WEBSOCKETS_BACKOFF_INITIAL_DELAY", "5"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bfbf91a9d04e142c — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/client.py:603 
    BACKOFF_MIN = float(os.environ.get("WEBSOCKETS_BACKOFF_MIN_DELAY", "3.1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #845536f45dac5bd5 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/client.py:604 
    BACKOFF_MAX = float(os.environ.get("WEBSOCKETS_BACKOFF_MAX_DELAY", "90.0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d0294056e60d7f4 — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/client.py:605 
    BACKOFF_FACTOR = float(os.environ.get("WEBSOCKETS_BACKOFF_FACTOR", "1.618"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2867c3b7577defe — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/http.py:13 
MAX_NUM_HEADERS = int(os.environ.get("WEBSOCKETS_MAX_NUM_HEADERS", "128"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d4a5031471c3edc — Environment-variable access.
pkgs/python/[email protected]/src/websockets/legacy/http.py:14 
MAX_LINE_LENGTH = int(os.environ.get("WEBSOCKETS_MAX_LINE_LENGTH", "8192"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

yfinance

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #6fb46adae851b4f2 — Filesystem access.
pkgs/python/[email protected]/setup.py:16 
with open("yfinance/version.py") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5c253bc8712d297 — Filesystem access.
pkgs/python/[email protected]/setup.py:25 
with io.open(path.join(here, 'README.md'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a019e22aba98ff57 — Environment-variable access.
pkgs/python/[email protected]/yfinance/_http.py:19 
_DISABLE = os.environ.get("YF_DISABLE_CURL_CFFI", "").lower() in ("1", "true", "yes")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • pillow prod — sdist exceeds byte cap