Close Open: huggingface/transformers

low env_fs production #1a8424508280179b — Environment-variable access.

repo/.circleci/create_circleci_config.py:117

            print(os.environ.get("GIT_COMMIT_MESSAGE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a7664bc6eaf8296 — Environment-variable access.

repo/.circleci/create_circleci_config.py:119

                "[build-ci-image]" in os.environ.get("GIT_COMMIT_MESSAGE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #68481841733bb8f6 — Environment-variable access.

repo/.circleci/create_circleci_config.py:120

                or os.environ.get("GIT_COMMIT_MESSAGE", "") == "dev-ci"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa6b3e4570f8018b — Filesystem access.

repo/.circleci/create_circleci_config.py:138

                with open(test_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ebd638cdb9937e06 — Environment-variable access.

repo/.circleci/create_circleci_config.py:154

        env["RUN_FLAKY"] = os.environ.get("CIRCLE_PULL_REQUEST", "") == ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f9196d27aa56a6b — Environment-variable access.

repo/.circleci/create_circleci_config.py:444

    os.environ["test_preparation_dir"] = folder

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d52b53831cd5093 — Environment-variable access.

repo/.circleci/create_circleci_config.py:476

    if "CIRCLE_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #575f927bf5ff4244 — Filesystem access.

repo/.circleci/create_circleci_config.py:485

    with open(os.path.join(folder, "generated_config.yml"), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #658a78dd9e69f12a — Filesystem access.

repo/.circleci/parse_test_outputs.py:8

    with open(file_path, 'r', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a04a7d25d7ad5dd — Filesystem access.

repo/.circleci/parse_test_outputs.py:22

    with open(file_path, 'r', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eb11238f79f500f7 — Filesystem access.

repo/.circleci/parse_test_outputs.py:39

    with open(file_path, 'r', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da71114b8071ead8 — Filesystem access.

repo/.github/scripts/assign_reviewers.py:76

    with open(script_dir / "codeowners_for_review_action") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #947d0bb8b4e9ccd2 — Environment-variable access.

repo/.github/scripts/assign_reviewers.py:79

    g = Github(os.environ['GITHUB_TOKEN'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9502cc17b267c67a — Filesystem access.

repo/.github/scripts/assign_reviewers.py:81

    with open(os.environ['GITHUB_EVENT_PATH']) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5a475d4805fe5ff — Environment-variable access.

repo/.github/scripts/assign_reviewers.py:81

    with open(os.environ['GITHUB_EVENT_PATH']) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9ea94cb7ed561da5 — Environment-variable access.

repo/benchmark/benches/llama.py:44

os.environ["HF_XET_HIGH_PERFORMANCE"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f5bfcc4d8be4e0d1 — Environment-variable access.

repo/benchmark/benches/llama.py:45

os.environ["TOKENIZERS_PARALLELISM"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4b7a5c3401af53c3 — Environment-variable access.

repo/benchmark/benches/llama.py:111

        os.environ["TOKENIZERS_PARALLELISM"] = "false"  # silence warnings when compiling

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f6c2b80546aa6298 — Filesystem access.

repo/benchmark/benchmark.py:143

        with open(os.path.join(report_dir, "summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #da87ce2efa61584d — Filesystem access.

repo/benchmark/benchmark.py:190

    with open(os.path.join(exp_run_dir, "summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6f33c9180221e112 — Filesystem access.

repo/benchmark/benchmark.py:310

        with open(os.path.join(exp_run_dir, "summaries.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6542f28a95fab63f — Environment-variable access.

repo/benchmark_v2/benchmark_scripts/continuous_batching_overall.py:176

        self.global_rank = int(os.environ.get("RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a4f02f64772a098a — Environment-variable access.

repo/benchmark_v2/benchmark_scripts/continuous_batching_overall.py:177

        self.local_rank = int(os.environ.get("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5ca072d3c8d9b06 — Filesystem access.

repo/benchmark_v2/benchmark_scripts/continuous_batching_overall.py:287

        with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce540e946fb9017e — Filesystem access.

repo/benchmark_v2/benchmark_scripts/continuous_batching_overall.py:298

        data = json.loads(candidates[-1].read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #25007c960b402b92 — Environment-variable access.

repo/benchmark_v2/framework/benchmark_runner.py:56

PUSH_TO_HUB_TOKEN = os.getenv("PUSH_TO_HUB_TOKEN", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f0a4ccdbfc5ee6b — Filesystem access.

repo/benchmark_v2/framework/benchmark_runner.py:437

        with open(filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #084f4cddcabcd00d — Filesystem access.

repo/benchmark_v2/framework/benchmark_runner.py:467

                with open(jsonl_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a3f1e87592c036b — Filesystem access.

repo/benchmark_v2/run_benchmarks.py:99

            with open(args.config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9d168104f4f21efe — Filesystem access.

repo/benchmark_v2/run_benchmarks.py:102

            with open(args.config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #83564bd40adc7731 — Environment-variable access.

repo/conftest.py:70

                mock.patch.dict(os.environ, {"HF_XET_CACHE": _ci_fallback_cache_dir}),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11a7efc02f3c6b55 — Environment-variable access.

repo/conftest.py:144

    os.environ["DISABLE_SAFETENSORS_CONVERSION"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #edd001ab37fa1eb0 — Environment-variable access.

repo/conftest.py:224

if os.environ.get("PATCH_TESTING_METHODS_TO_COLLECT_OUTPUTS", "").lower() in ("yes", "true", "on", "y", "1"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aaedbcf9c9dede66 — Environment-variable access.

repo/examples/3D_parallel.py:75

    tp_size = int(os.environ.get("TP_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b5700019c5f89997 — Environment-variable access.

repo/examples/3D_parallel.py:76

    dp_size = int(os.environ.get("DP_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78986037a7277dc9 — Environment-variable access.

repo/examples/3D_parallel.py:77

    cp_size = int(os.environ.get("CP_SIZE", "1"))  # Add CP size configuration

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fc4bc81f5408e78f — Environment-variable access.

repo/examples/3D_parallel.py:90

    if "RANK" in os.environ and "WORLD_SIZE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c4498a84681e10d3 — Environment-variable access.

repo/examples/3D_parallel.py:94

        local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #026df5aeff5cc1c0 — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:58

ignore_sanity_checks = int(os.environ.get("IGNORE_SANITY", "0")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2fed9aa757235d4d — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:76

    tp_size = int(os.environ.get("TP_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9e2da1733081ba8c — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:77

    dp_size = int(os.environ.get("DP_SIZE", "4"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d8de61fbdbf6bb74 — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:78

    cp_size = int(os.environ.get("CP_SIZE", "1"))  # Add CP size configuration

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #27ada51e99d71c9f — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:91

    if "RANK" in os.environ and "WORLD_SIZE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db3fdc194a194d83 — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:95

        local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #21880a352df38e55 — Environment-variable access.

repo/examples/pytorch/context_parallel.py:27

world_size = int(os.environ.get("WORLD_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6868249cefda035 — Filesystem access.

repo/examples/pytorch/continuous_batching.py:131

        with open(output_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f96cc0da04888e6b — Filesystem access.

repo/examples/pytorch/image-classification/run_image_classification.py:78

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #374b49dc690f4976 — Filesystem access.

repo/examples/pytorch/image-classification/run_image_classification_no_trainer.py:280

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7651085d58c43e49 — Filesystem access.

repo/examples/pytorch/image-classification/run_image_classification_no_trainer.py:650

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b37c7b0b2d95824a — Filesystem access.

repo/examples/pytorch/image-pretraining/run_mim_no_trainer.py:432

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c6b1bef1fe9d4e3 — Filesystem access.

repo/examples/pytorch/instance-segmentation/run_instance_segmentation_no_trainer.py:401

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9299a44b821883e — Filesystem access.

repo/examples/pytorch/instance-segmentation/run_instance_segmentation_no_trainer.py:731

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #68ad4e49e1b3b7dd — Filesystem access.

repo/examples/pytorch/language-modeling/run_clm_no_trainer.py:317

                with open(gitignore_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5021ff146b690e76 — Filesystem access.

repo/examples/pytorch/language-modeling/run_clm_no_trainer.py:319

            with open(gitignore_path, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e984bfe0e843e0f — Filesystem access.

repo/examples/pytorch/language-modeling/run_clm_no_trainer.py:729

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d0b51cc079d45402 — Filesystem access.

repo/examples/pytorch/language-modeling/run_fim_no_trainer.py:379

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a2ff1636030e6a6 — Filesystem access.

repo/examples/pytorch/language-modeling/run_fim_no_trainer.py:910

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #46e1a8b7798993c8 — Filesystem access.

repo/examples/pytorch/language-modeling/run_mlm_no_trainer.py:320

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73e762a3788b23a8 — Filesystem access.

repo/examples/pytorch/language-modeling/run_mlm_no_trainer.py:759

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b7440e5402c8059a — Filesystem access.

repo/examples/pytorch/multiple-choice/run_swag_no_trainer.py:283

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6df1447786943dcc — Filesystem access.

repo/examples/pytorch/multiple-choice/run_swag_no_trainer.py:653

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bebb139497e1be14 — Filesystem access.

repo/examples/pytorch/object-detection/run_object_detection_no_trainer.py:444

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de76ff1be10354bd — Filesystem access.

repo/examples/pytorch/object-detection/run_object_detection_no_trainer.py:775

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55626fe8b2e28f77 — Filesystem access.

repo/examples/pytorch/old_test_xla_examples.py:35

        with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1678926e78cd6a2 — Filesystem access.

repo/examples/pytorch/question-answering/run_qa_beam_search_no_trainer.py:85

    with open(os.path.join(output_dir, file_name), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa0a8010430443b6 — Filesystem access.

repo/examples/pytorch/question-answering/run_qa_beam_search_no_trainer.py:344

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9e72e036f0a486f1 — Filesystem access.

repo/examples/pytorch/question-answering/run_qa_no_trainer.py:90

    with open(os.path.join(output_dir, file_name), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fe64672c14a78de3 — Filesystem access.

repo/examples/pytorch/question-answering/run_qa_no_trainer.py:383

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a406c29b541f504 — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:238

        with open(prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eb4a93e057e2615b — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:241

        with open(nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d2163a6b46c31cf — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:245

            with open(null_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8562c400e063818 — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:432

        with open(prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2aaab13d2daacd2a — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:435

        with open(nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7526d81b86aba61a — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:439

            with open(null_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c10890f88cb43292 — Filesystem access.

repo/examples/pytorch/semantic-segmentation/run_semantic_segmentation.py:240

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #baac210727228ada — Filesystem access.

repo/examples/pytorch/semantic-segmentation/run_semantic_segmentation_no_trainer.py:272

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #70ce8377f541370d — Filesystem access.

repo/examples/pytorch/semantic-segmentation/run_semantic_segmentation_no_trainer.py:308

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e813375b9d7b9f24 — Filesystem access.

repo/examples/pytorch/semantic-segmentation/run_semantic_segmentation_no_trainer.py:614

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b7ebe1273a49667 — Filesystem access.

repo/examples/pytorch/speech-pretraining/run_wav2vec2_pretraining_no_trainer.py:442

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #24a2cafbe1a4d9a1 — Filesystem access.

repo/examples/pytorch/speech-recognition/run_speech_recognition_ctc.py:562

                with open(vocab_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f47b71cb1b058c1a — Filesystem access.

repo/examples/pytorch/speech-recognition/run_speech_recognition_ctc_adapter.py:566

                with open(vocab_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8060f4b39f8f3b46 — Filesystem access.

repo/examples/pytorch/summarization/run_summarization.py:737

                with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e2859d8017c0b54 — Filesystem access.

repo/examples/pytorch/summarization/run_summarization_no_trainer.py:392

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2b0324d55eb36aac — Filesystem access.

repo/examples/pytorch/summarization/run_summarization_no_trainer.py:808

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dbe3f3b4fbd955cb — Filesystem access.

repo/examples/pytorch/test_accelerate_examples.py:53

        with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f93e66a82f39d4d1 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:78

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fcff44fd219fac8b — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:103

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e2f227d3c87c851 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:131

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #25e50743eeec0f66 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:152

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #54653813c428ec57 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:181

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b0d24e84a98921ef — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:210

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ccedab3a5add0006 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:233

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d53ac1b442f6b8a — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:261

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1239e83fb787f517 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:313

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3bd177d95f3969df — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:340

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #023e81ae08dfacc9 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:364

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04e71597f3b7128c — Filesystem access.

repo/examples/pytorch/test_pytorch_examples.py:89

        with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #636fc76fea361043 — Environment-variable access.

repo/examples/pytorch/test_pytorch_examples.py:604

    @patch.dict(os.environ, {"WANDB_DISABLED": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29c4b16c3f165caf — Environment-variable access.

repo/examples/pytorch/test_pytorch_examples.py:632

    @patch.dict(os.environ, {"WANDB_DISABLED": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a1ef381f6fa0991 — Filesystem access.

repo/examples/pytorch/text-classification/run_classification.py:716

            with open(output_predict_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c9f6818bd52db8e — Filesystem access.

repo/examples/pytorch/text-classification/run_glue.py:615

                with open(output_predict_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #38c5525c81ee7492 — Filesystem access.

repo/examples/pytorch/text-classification/run_glue_no_trainer.py:275

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9389315eb07d7b83 — Filesystem access.

repo/examples/pytorch/text-classification/run_glue_no_trainer.py:691

        with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52428ee7fdb1645d — Filesystem access.

repo/examples/pytorch/text-classification/run_xnli.py:438

            with open(output_predict_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #002aed9bad28374c — Filesystem access.

repo/examples/pytorch/token-classification/run_ner.py:617

            with open(output_predictions_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11e6206d32045624 — Filesystem access.

repo/examples/pytorch/token-classification/run_ner_no_trainer.py:324

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f6f675183aa53ef — Filesystem access.

repo/examples/pytorch/token-classification/run_ner_no_trainer.py:828

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #601527dfdcd1963b — Filesystem access.

repo/examples/pytorch/translation/run_translation.py:661

                with open(output_prediction_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9a1eb79e52b5981d — Filesystem access.

repo/examples/pytorch/translation/run_translation_no_trainer.py:369

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf84ed2a156e1852 — Filesystem access.

repo/examples/pytorch/translation/run_translation_no_trainer.py:792

        with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #58da544f0eabede7 — Environment-variable access.

repo/examples/training/distributed_training.py:9

LOCAL_RANK = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1b16b829fbf11c1 — Environment-variable access.

repo/examples/training/distributed_training.py:10

WORLD_SIZE = int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ed07b8a05b51424 — Environment-variable access.

repo/examples/training/distributed_training.py:11

WORLD_RANK = int(os.environ["RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a23c66322878582 — Environment-variable access.

repo/examples/training/distributed_training.py:13

LOCAL_RANK = int(os.environ["OMPI_COMM_WORLD_LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bcee8c0289e55d88 — Environment-variable access.

repo/examples/training/distributed_training.py:14

WORLD_SIZE = int(os.environ["OMPI_COMM_WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #39438284a3f09d33 — Environment-variable access.

repo/examples/training/distributed_training.py:15

WORLD_RANK = int(os.environ["OMPI_COMM_WORLD_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f553b91a677080f — Filesystem access.

repo/scripts/distributed/torch-distributed-gpu-test.py:55

    with open(__file__, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2772193483c54a4 — Environment-variable access.

repo/scripts/distributed/torch-distributed-gpu-test.py:63

local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd56c7ce120674c0 — Environment-variable access.

repo/scripts/stale.py:37

    g = Github(os.environ["GITHUB_TOKEN"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0581959ac29de119 — Filesystem access.

repo/setup.py:311

        with open(target, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fcd4faa26ae8fdc9 — Filesystem access.

repo/setup.py:331

        long_description=open("README.md", "r", encoding="utf-8").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #deef773339cba0bb — Filesystem access.

repo/src/transformers/audio_utils.py:320

            with open(audio, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00a6d211e1dcebd5 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:176

    with open(file_name, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8c66cd0ac889ce5 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:182

    with open(file_name, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e8c78cf4d5f33f2 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:228

    autofile = (repo_path / "src" / "transformers" / "models" / "auto" / "auto_mappings.py").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4cec704d98a8329c — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:246

                file = (repo_path / "src" / "transformers" / "models" / "auto" / filename).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce007b67f0bab879 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:333

    with open(toc_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d0aa9081c7d7ad5 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:392

    with open(module_name, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8319ef2aaa5d9065 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:517

            with open(original_test_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #054a917525768052 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:567

    with open(new_module_folder / f"modular_{new_lowercase_name}.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4500a54e98d9a23e — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:572

    with open(new_module_folder / "__init__.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #41c559f639507b73 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:589

    with open(tests_folder / "__init__.py", "w"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3baa1c99363b5064 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:593

        with open(tests_folder / filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db58ea343d7a7d76 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:598

    with open(repo_path / "docs" / "source" / "en" / "model_doc" / f"{new_lowercase_name}.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4803b32540d5dff0 — Filesystem access.

repo/src/transformers/cli/chat.py:363

            with open(examples_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #deff6d8f1dcf118a — Filesystem access.

repo/src/transformers/cli/chat.py:659

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c92ce308fb60400 — Filesystem access.

repo/src/transformers/configuration_utils.py:921

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0dbc20d5b9c55640 — Filesystem access.

repo/src/transformers/configuration_utils.py:1136

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1a108694d28cc0b — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:159

        with open(model, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8bf5831fbd875cb1 — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:706

        with open(self.original_tokenizer.vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #916144133eda93cf — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:1713

        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8935925c083d10e — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:1753

        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0706184a964acc3 — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:1843

        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #802fa37a1fb72e81 — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:2003

        with open(self.vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eea64cb6a9ececb3 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:576

        with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #42863052bfd39800 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:580

        with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f59508102c3f292 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:584

        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f54ebcc327b8249 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:769

    with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c015b0c1ae10dce — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:772

    with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16477057c9c0e3c0 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:776

        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cdea609314269abd — Filesystem access.

repo/src/transformers/data/processors/squad.py:515

        with open(
            os.path.join(data_dir, self.train_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #014cc47980c1e7c8 — Filesystem access.

repo/src/transformers/data/processors/squad.py:536

        with open(
            os.path.join(data_dir, self.dev_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e4865a78edd16ef4 — Filesystem access.

repo/src/transformers/data/processors/utils.py:119

        with open(input_file, "r", encoding="utf-8-sig") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5acda1b53d873423 — Filesystem access.

repo/src/transformers/distributed/configuration_utils.py:86

        with open(json_file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9809e0c0541b662 — Environment-variable access.

repo/src/transformers/distributed/fsdp.py:48

        and strtobool(os.environ.get("ACCELERATE_USE_FSDP", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6f29bbc61234ebc5 — Environment-variable access.

repo/src/transformers/distributed/fsdp.py:49

        and strtobool(os.environ.get("FSDP_CPU_RAM_EFFICIENT_LOADING", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13663fe7dbc144f4 — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:133

    with open(module_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ee6013e4e30efa7e — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:186

    with open(filename, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1e188946746f0ebe — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:298

        module_hash: str = hashlib.sha256(b"".join(bytes(f) + f.read_bytes() for f in module_files)).hexdigest()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b85242e54e86e03e — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:341

        source_files_hash.update(file_path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2dd53dbaf44ae70c — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:813

        with open(requirements, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b8653c95d01096aa — Filesystem access.

repo/src/transformers/feature_extraction_utils.py:611

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #727bfc66893536d9 — Filesystem access.

repo/src/transformers/feature_extraction_utils.py:639

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db765664cc8f91a5 — Filesystem access.

repo/src/transformers/generation/configuration_utils.py:1084

        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c58b0b891dbfcc15 — Filesystem access.

repo/src/transformers/generation/configuration_utils.py:1247

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b08f5472877d2582 — Filesystem access.

repo/src/transformers/generation/configuration_utils.py:1368

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a3e9f74395f3b609 — Environment-variable access.

repo/src/transformers/generation/configuration_utils.py:1814

        graph_mixing_supported = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT", "1") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #866b9ca587434a21 — Environment-variable access.

repo/src/transformers/generation/configuration_utils.py:1815

        distributed = int(os.environ.get("WORLD_SIZE", "1")) > 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #20d919fd2781ed2b — Environment-variable access.

repo/src/transformers/generation/configuration_utils.py:1820

            os.environ.setdefault("NCCL_GRAPH_MIXING_SUPPORT", "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49faac53bd59522a — Environment-variable access.

repo/src/transformers/generation/continuous_batching/distributed.py:160

        graph_mixing_not_disabled = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT") != "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61f996bb9c013f52 — Environment-variable access.

repo/src/transformers/generation/utils.py:2149

            os.environ["TOKENIZERS_PARALLELISM"] = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d1074b7704b15085 — Filesystem access.

repo/src/transformers/hf_argparser.py:333

                    file_args += args_file.read_text().split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e727190b9b6a54f1 — Filesystem access.

repo/src/transformers/hf_argparser.py:403

        with open(Path(json_file), encoding="utf-8") as open_json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4cc9bb58b8335b07 — Filesystem access.

repo/src/transformers/hf_argparser.py:425

        outputs = self.parse_dict(yaml.safe_load(Path(yaml_file).read_text()), allow_extra_keys=allow_extra_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #74aedf415bac2480 — Filesystem access.

repo/src/transformers/image_processing_base.py:417

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b98d79480cc505a — Filesystem access.

repo/src/transformers/image_processing_base.py:445

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af645b7dce83450a — Environment-variable access.

repo/src/transformers/integrations/accelerate.py:115

                local_rank = int(os.environ.get("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50ae250c1c7a4396 — Environment-variable access.

repo/src/transformers/integrations/deepgemm.py:87

    cuda_home = os.environ.get("CUDA_HOME") or os.environ.get("CUDA_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b70a2e266945cfc — Filesystem access.

repo/src/transformers/integrations/deepgemm.py:112

            with open(version_json) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0870b4155fb18028 — Filesystem access.

repo/src/transformers/integrations/deepgemm.py:123

            with open(version_txt) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f48bd00c3091da7 — Filesystem access.

repo/src/transformers/integrations/deepgemm.py:134

            with open(cuda_h) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #42771bb55bafcb38 — Environment-variable access.

repo/src/transformers/integrations/finegrained_fp8.py:254

        and os.environ.get("TRANSFORMERS_DISABLE_DEEPGEMM_LINEAR", "0") != "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55ca801d4574d84f — Environment-variable access.

repo/src/transformers/integrations/hub_kernels.py:80

    _TRANSFORMERS_USE_HUB_KERNELS = os.environ.get("USE_HUB_KERNELS", "YES").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2cc5e2c301ecb3ac — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:40

if os.getenv("WANDB_MODE") == "offline":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #068aea5ea8bafba7 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:176

    if os.getenv("DISABLE_MLFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9d476d35fef6de26 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:212

    if os.getenv("DISABLE_KUBEFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #92472fb888f5c6c8 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:214

    return os.getenv("KUBEFLOW_TRAINER_SERVER_URL") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dddda92c55a8d99b — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:436

    ray_scope = os.getenv("RAY_SCOPE", "last")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9daa6b12d2a4e47 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:602

        self.logging_dir = os.getenv("TENSORBOARD_LOGGING_DIR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a9d277d8e2c20b5 — Filesystem access.

repo/src/transformers/integrations/integration_utils.py:664

    with open(f"{output_dir}/model_architecture.txt", "w+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #92c4bc2c1c4e0efd — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:709

        self._log_model = WandbLogModel(os.getenv("WANDB_LOG_MODEL", "false"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0c12b7fc849c5b8a — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:763

                    project=os.getenv("WANDB_PROJECT", "huggingface"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd45226d887b27a9 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:775

            _watch_model = os.getenv("WANDB_WATCH", "false")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4955bfca52b2f178 — Filesystem access.

repo/src/transformers/integrations/integration_utils.py:815

                                fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #caa4178e3af2cb9d — Filesystem access.

repo/src/transformers/integrations/integration_utils.py:878

                            fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b241b08056b1bb5d — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1170

        log_assets = os.getenv("COMET_LOG_ASSETS", "FALSE").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06db089b74444c92 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1174

            comet_old_mode = os.getenv("COMET_MODE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec31d1a74ef6b82d — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1334

        self._log_artifacts = os.getenv("HF_MLFLOW_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #59c7287b77942095 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1335

        self._nested_run = os.getenv("MLFLOW_NESTED_RUN", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4fd670d583ab0a1b — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1336

        self._tracking_uri = os.getenv("MLFLOW_TRACKING_URI", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab03de482f033b50 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1337

        self._experiment_name = os.getenv("MLFLOW_EXPERIMENT_NAME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #919eae7c5bfd2443 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1338

        self._flatten_params = os.getenv("MLFLOW_FLATTEN_PARAMS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d7acddc38494b557 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1339

        self._run_id = os.getenv("MLFLOW_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d8ee29ec5f244f8 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1340

        self._max_log_params = os.getenv("MLFLOW_MAX_LOG_PARAMS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f69b49705eaddb2a — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1403

            mlflow_tags = os.getenv("MLFLOW_TAGS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5792fea2533d3e61 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1487

        self.log_artifacts = os.getenv("HF_DAGSHUB_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bceed321f192e5c0 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1488

        self.name = os.getenv("HF_DAGSHUB_MODEL_NAME") or "main"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #290855021d96a108 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1489

        self.remote = os.getenv("MLFLOW_TRACKING_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86e67a479261b04e — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1493

            branch=os.getenv("BRANCH") or "main",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ff9f2156efd7214 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1908

                    self._log_model = os.getenv(
                        "CLEARML_LOG_MODEL",
                        "FALSE" if not ClearMLCallback._task_created_in_callback else "TRUE",
                    ).upper() in ENV_VARS_TRUE_VALUES.union({"TRUE"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #338684d663e65d0c — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1915

                        project_name=os.getenv("CLEARML_PROJECT", "HuggingFace Transformers"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43837167d3d67164 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1916

                        task_name=os.getenv("CLEARML_TASK", "Trainer"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c606095529e99dd — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1920

                    self._log_model = os.getenv("CLEARML_LOG_MODEL", "TRUE").upper() in ENV_VARS_TRUE_VALUES.union(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c647bb7c7ed6ead2 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2189

            log_model_env = os.getenv("HF_DVCLIVE_LOG_MODEL", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8903dbbbb1a7dbe0 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2271

        self._log_model = os.getenv("SWANLAB_LOG_MODEL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ef426446236d82c — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2342

            init_args["project"] = os.getenv("SWANLAB_PROJECT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d4444931ef86fad — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2344

            run_id = os.getenv("SWANLAB_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #873edb7095f8a994 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2348

            resume = os.getenv("SWANLAB_RESUME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e55d67511ea989c — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2494

        ca_file = os.environ.get(self._ENV_CA_CERT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #77ea0fb9e8677d32 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2512

        token_path = os.environ.get(self._ENV_TOKEN_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e6dc9014bcd38c85 — Filesystem access.

repo/src/transformers/integrations/integration_utils.py:2518

            with open(token_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a3099dbd782fb125 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2534

            url = os.environ.get(self._ENV_SERVER_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #627fffa5b73710bb — Environment-variable access.

repo/src/transformers/integrations/mxfp4.py:417

        rank = int(os.environ.get("LOCAL_RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49fbcbf963c669d1 — Environment-variable access.

repo/src/transformers/integrations/npu_flash_attention.py:30

SPARSE_MODE = int(os.getenv("NPU_FA2_SPARSE_MODE", default=DOWN_RIGHT_ALIGNED_CAUSAL_MASK_MODE))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #60d6793a4b997ff3 — Filesystem access.

repo/src/transformers/integrations/peft.py:708

        with open(_adapter_model_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f24438c433a03e9d — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:77

                rank = int(os.environ["RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #efa4484de605874f — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:78

                local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c6e83c0d489b630c — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:79

                world_size = int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4907787618ad6b01 — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:103

            current_device.set_device(int(os.environ["LOCAL_RANK"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6728c4a5c1ad567a — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:122

        device_map = torch.device(f"{device_mesh.device_type}:{int(os.environ['LOCAL_RANK'])}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02e3b5e11242ec73 — Filesystem access.

repo/src/transformers/model_debugging_utils.py:243

    with open(full_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6d57e07acf7afd1 — Filesystem access.

repo/src/transformers/model_debugging_utils.py:266

    with open(summary_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a590752c82db1d27 — Environment-variable access.

repo/src/transformers/modeling_flash_attention_utils.py:657

            deterministic if deterministic is not None else os.getenv("FLASH_ATTENTION_DETERMINISTIC", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #77019bd4b25d291a — Environment-variable access.

repo/src/transformers/modeling_utils.py:163

XLA_USE_BF16 = os.environ.get("XLA_USE_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #34a7d9fa8ce5cc91 — Environment-variable access.

repo/src/transformers/modeling_utils.py:164

XLA_DOWNCAST_BF16 = os.environ.get("XLA_DOWNCAST_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d86d622b13b8e41f — Environment-variable access.

repo/src/transformers/modeling_utils.py:213

    return _is_torch_distributed_initialized() and int(os.environ.get("LOCAL_RANK", "-1")) == 0

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #636c26bd14265ac4 — Filesystem access.

repo/src/transformers/modeling_utils.py:323

        with open("/proc/mounts", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d74c67c81b103007 — Filesystem access.

repo/src/transformers/modeling_utils.py:356

            with open(checkpoint_path, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30cf467cb038a4c1 — Filesystem access.

repo/src/transformers/modeling_utils.py:3699

            with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fc833bf17f2cc2ab — Environment-variable access.

repo/src/transformers/modeling_utils.py:4262

        if device_map == "auto" and int(os.environ.get("WORLD_SIZE", "0")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #541881726b2b301b — Filesystem access.

repo/src/transformers/modeling_utils.py:4564

                        with open(file, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #930477473df63e3a — Filesystem access.

repo/src/transformers/models/audio_spectrogram_transformer/convert_audio_spectrogram_transformer_original_to_pytorch.py:60

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d42ff8a962c27909 — Filesystem access.

repo/src/transformers/models/auto/auto_factory.py:311

                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b8a92c543f21df6 — Filesystem access.

repo/src/transformers/models/auto/processing_auto.py:273

                with open(tokenizer_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #58f5c7905985fa7e — Filesystem access.

repo/src/transformers/models/auto/tokenization_auto.py:435

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7ac66e79204f313 — Filesystem access.

repo/src/transformers/models/auto/tokenization_auto.py:442

    with open(merges_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d1335f85ff648f40 — Filesystem access.

repo/src/transformers/models/auto/tokenization_auto.py:613

    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #923e6fe250930334 — Filesystem access.

repo/src/transformers/models/bamba/convert_mamba_ssm_checkpoint.py:158

    with open(os.path.join(save_directory, SAFE_WEIGHTS_INDEX_NAME), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #07430142bb7c84ae — Filesystem access.

repo/src/transformers/models/bamba/convert_mamba_ssm_checkpoint.py:202

    with open(config_path, "r", encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c03e3cc9b226623c — Environment-variable access.

repo/src/transformers/models/bark/convert_suno_to_hf.py:77

CACHE_DIR = os.path.join(os.getenv("XDG_CACHE_HOME", default_cache_dir), "suno", "bark_v0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #82290c4c744929e0 — Filesystem access.

repo/src/transformers/models/bark/processing_bark.py:101

                with open(speaker_embeddings_path) as speaker_embeddings_json:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d5d10b490e67f432 — Filesystem access.

repo/src/transformers/models/bark/processing_bark.py:161

            with open(os.path.join(save_directory, speaker_embeddings_dict_path), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6887b1ae80ae77b9 — Filesystem access.

repo/src/transformers/models/bartpho/tokenization_bartpho.py:133

        with open(monolingual_vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e8d7085c5abbdc4 — Filesystem access.

repo/src/transformers/models/bartpho/tokenization_bartpho.py:306

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #225d3572e66463a6 — Filesystem access.

repo/src/transformers/models/bartpho/tokenization_bartpho.py:315

            with open(out_monolingual_vocab_file, "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #54fc2ef4c442ccfe — Filesystem access.

repo/src/transformers/models/beit/convert_beit_unilm_to_pytorch.py:192

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b22e6252e4fb1f8c — Filesystem access.

repo/src/transformers/models/beit/convert_beit_unilm_to_pytorch.py:205

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e54007d342ba385d — Filesystem access.

repo/src/transformers/models/beit/convert_beit_unilm_to_pytorch.py:218

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #505c98c87508d16d — Filesystem access.

repo/src/transformers/models/bert/tokenization_bert.py:33

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #daf07211237e41bd — Filesystem access.

repo/src/transformers/models/bert/tokenization_bert_legacy.py:32

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c47f24cb29988e84 — Filesystem access.

repo/src/transformers/models/bert/tokenization_bert_legacy.py:245

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #63176e80772cce2f — Filesystem access.

repo/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:41

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #42e8e70fa3012361 — Filesystem access.

repo/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:278

            with open(vocab_file, "wb") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3025931e7990f065 — Filesystem access.

repo/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:282

            with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b5b3b14608d13a53 — Filesystem access.

repo/src/transformers/models/bertweet/tokenization_bertweet.py:142

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd59933d5636c943 — Filesystem access.

repo/src/transformers/models/bertweet/tokenization_bertweet.py:316

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #59660a04c45b9d9b — Filesystem access.

repo/src/transformers/models/bertweet/tokenization_bertweet.py:324

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9c1a490fb42455d — Filesystem access.

repo/src/transformers/models/bertweet/tokenization_bertweet.py:338

                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b688ffb3b483f69 — Filesystem access.

repo/src/transformers/models/biogpt/convert_biogpt_original_pytorch_checkpoint_to_pytorch.py:112

                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47f526f70211f551 — Filesystem access.

repo/src/transformers/models/biogpt/convert_biogpt_original_pytorch_checkpoint_to_pytorch.py:183

    with open(src_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8df6efd9baf7d263 — Filesystem access.

repo/src/transformers/models/biogpt/convert_biogpt_original_pytorch_checkpoint_to_pytorch.py:223

    with open(biogpt_model_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7668c0dd6ef1d9d4 — Filesystem access.

repo/src/transformers/models/biogpt/convert_biogpt_original_pytorch_checkpoint_to_pytorch.py:240

    with open(biogpt_tokenizer_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #367d5c6dcb70124f — Filesystem access.

repo/src/transformers/models/biogpt/tokenization_biogpt.py:116

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f93e89964e97d7b0 — Filesystem access.

repo/src/transformers/models/biogpt/tokenization_biogpt.py:119

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a61d29d998a17a92 — Filesystem access.

repo/src/transformers/models/biogpt/tokenization_biogpt.py:293

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0838a92e6ac75853 — Filesystem access.

repo/src/transformers/models/biogpt/tokenization_biogpt.py:297

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2923d04857c625e — Filesystem access.

repo/src/transformers/models/bit/convert_bit_to_pytorch.py:41

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #922715c3e0057dc8 — Filesystem access.

repo/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:89

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #806f2e211049825c — Filesystem access.

repo/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:92

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e38da08850f141a — Filesystem access.

repo/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:203

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac5baafdb07c0daa — Filesystem access.

repo/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:207

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2c3067a3331af81b — Filesystem access.

repo/src/transformers/models/bloom/convert_bloom_original_checkpoint_to_pytorch.py:149

        with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f14ac4b1c2d683e7 — Filesystem access.

repo/src/transformers/models/bloom/convert_bloom_original_checkpoint_to_pytorch.py:151

        with open(os.path.join(pytorch_dump_folder_path, WEIGHTS_NAME + ".index.json"), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30d48c5015792975 — Filesystem access.

repo/src/transformers/models/bloom/convert_bloom_original_checkpoint_to_pytorch.py:209

        with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #413f98fdc54d9f19 — Filesystem access.

repo/src/transformers/models/blt/convert_blt_weights_to_hf.py:25

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bb7c3d622eb67c82 — Filesystem access.

repo/src/transformers/models/blt/convert_blt_weights_to_hf.py:28

    with open(entropy_params_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12b3924fe4429b32 — Filesystem access.

repo/src/transformers/models/blt/convert_blt_weights_to_hf.py:295

    with open(tokenizer_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2f3c841f1ded990 — Filesystem access.

repo/src/transformers/models/blt/convert_blt_weights_to_hf.py:388

    with open(config_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7577910d6ac3783e — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:75

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b8fc50643aba5bb9 — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:80

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3920fdd32727be5 — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:329

    with open(os.path.join(input_base_path, "tokenizer/text_tokenizer.json")) as tokenizer_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e1cde253233c864 — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:341

    with open(os.path.join(input_base_path, "tokenizer/text_tokenizer_modified.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e8c4bff0150b41d4 — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:352

    with open(os.path.join(input_base_path, "tokenizer/vqgan.yaml")) as vqgan_cfg_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c23e7780d5add408 — Filesystem access.

repo/src/transformers/models/clvp/tokenization_clvp.py:149

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #20d58a95977bfa01 — Filesystem access.

repo/src/transformers/models/clvp/tokenization_clvp.py:155

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e676152814a8a51e — Filesystem access.

repo/src/transformers/models/conditional_detr/convert_conditional_detr_original_pytorch_checkpoint_to_pytorch.py:280

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #525fa5bd78540ce5 — Filesystem access.

repo/src/transformers/models/convnext/convert_convnext_to_pytorch.py:66

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #792cd97f2df9a89f — Filesystem access.

repo/src/transformers/models/convnextv2/convert_convnextv2_to_pytorch.py:71

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a637edb5bcda4537 — Filesystem access.

repo/src/transformers/models/cpm/tokenization_cpm.py:324

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78c425bc2dde35e7 — Filesystem access.

repo/src/transformers/models/cpmant/tokenization_cpmant.py:37

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #033fb895ddd80373 — Filesystem access.

repo/src/transformers/models/cpmant/tokenization_cpmant.py:219

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba659d2e6b93fa5c — Filesystem access.

repo/src/transformers/models/ctrl/tokenization_ctrl.py:128

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8d74c9b8789a8bce — Filesystem access.

repo/src/transformers/models/ctrl/tokenization_ctrl.py:131

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #041bb6a859fc5516 — Filesystem access.

repo/src/transformers/models/cvt/convert_cvt_original_pytorch_checkpoint_to_pytorch.py:285

    id2label = json.loads(Path(hf_hub_download(repo_id, img_labels_file, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e660caef8645796 — Filesystem access.

repo/src/transformers/models/d_fine/convert_d_fine_original_pytorch_checkpoint_to_hf.py:41

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18973de99ee8a3ca — Filesystem access.

repo/src/transformers/models/dab_detr/convert_dab_detr_original_pytorch_checkpoint_to_pytorch.py:140

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8d0a70237bdce047 — Filesystem access.

repo/src/transformers/models/data2vec/convert_data2vec_vision_original_pytorch_checkpoint_to_pytorch.py:281

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed991f4724f8ffba — Filesystem access.

repo/src/transformers/models/deepseek_ocr2/convert_deepseek_ocr2_weights_to_hf.py:135

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #674ea935e0f2fa1e — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/transformers/models/deepseek_ocr2/convert_deepseek_ocr2_weights_to_hf.py:190

    image = Image.open(requests.get(image_url, stream=True).raw).convert("RGB")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #cae90ca22c883c71 — Filesystem access.

repo/src/transformers/models/deepseek_vl/convert_deepseek_vl_weights_to_hf.py:184

        with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5f6760b0c89c7356 — Filesystem access.

repo/src/transformers/models/deepseek_vl_hybrid/convert_deepseek_vl_hybrid_weights_to_hf.py:211

        with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d154774cc19981f6 — Filesystem access.

repo/src/transformers/models/deformable_detr/convert_deformable_detr_to_pytorch.py:113

    id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1cc332ae316bd17e — Filesystem access.

repo/src/transformers/models/deimv2/convert_deimv2_original_pytorch_checkpoint_to_hf.py:105

    with open(config_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #546b633006b10eff — Filesystem access.

repo/src/transformers/models/deimv2/convert_deimv2_original_pytorch_checkpoint_to_hf.py:110

        open(hf_hub_download("huggingface/label-files", "coco-detection-mmdet-id2label.json", repo_type="dataset"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e647bb628e57a0da — Filesystem access.

repo/src/transformers/models/deit/convert_deit_timm_to_pytorch.py:145

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b539656c154cc8d — Filesystem access.

repo/src/transformers/models/detr/convert_detr_original_pytorch_checkpoint_to_pytorch.py:198

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6543411e6b92c72a — Filesystem access.

repo/src/transformers/models/detr/convert_detr_to_pytorch.py:53

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #97c64fa87b136d7e — Filesystem access.

repo/src/transformers/models/diffusion_gemma/convert_diffusion_gemma_weights.py:558

    with open(metadata_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d79a9e23fbe96ee8 — Filesystem access.

repo/src/transformers/models/dinov2/convert_dinov2_to_hf.py:65

        config.id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #319230f5b6faa834 — Filesystem access.

repo/src/transformers/models/dinov2_with_registers/convert_dinov2_with_registers_to_hf.py:70

        config.id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #acb5c4ddf3fa4a8c — Filesystem access.

repo/src/transformers/models/dit/convert_dit_unilm_to_pytorch.py:155

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #03510398d7f0e21e — Filesystem access.

repo/src/transformers/models/doge/convert_doge_weights_to_hf.py:96

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #83ab872ee08593b8 — Filesystem access.

repo/src/transformers/models/dpt/convert_dpt_hybrid_to_pytorch.py:64

        id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b10d0fa6b5ece66e — Filesystem access.

repo/src/transformers/models/dpt/convert_dpt_to_pytorch.py:52

        id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b160cb25533d78d1 — Filesystem access.

repo/src/transformers/models/efficientnet/convert_efficientnet_to_pytorch.py:134

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9a91120bc253994d — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:186

    with open(os.path.join(output_dir, "vocab.json"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1fee339a2eb50f7c — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:189

    with open(os.path.join(output_dir, "tokenizer.json"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c70fab49ecfa1f61 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:192

    with open(os.path.join(output_dir, "tokenizer_config.json"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2032f4d6be34bab8 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:195

    with open(os.path.join(output_dir, "special_tokens_map.json"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #727d850d91b79494 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:207

    with open(os.path.join(output_dir, "merges.txt"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #57d31016ab9935e1 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:280

    with open(f"{output_dir}/tokenizer.json", "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #347d7b88213d145c — Filesystem access.

repo/src/transformers/models/eomt/convert_eomt_to_hf.py:166

        with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3467e240d4e2b35c — Filesystem access.

repo/src/transformers/models/eomt/convert_eomt_to_hf.py:212

    with open(os.path.join(input_path, "config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #808c859cb3e8cb45 — Filesystem access.

repo/src/transformers/models/eomt_dinov3/convert_eomt_dinov3_to_hf.py:291

    with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #121fc726794b1229 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/transformers/models/eomt_dinov3/convert_eomt_dinov3_to_hf.py:377

    image = Image.open(requests.get(CAT_URL, stream=True).raw).convert("RGB")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #5fe6098e46674faf — Filesystem access.

repo/src/transformers/models/ernie4_5_vl_moe/convert_ernie4_5_vl_moe_to_hf.py:158

    with open(os.path.join(save_dir, filename), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9e000194acea3682 — Filesystem access.

repo/src/transformers/models/ernie4_5_vl_moe/convert_ernie4_5_vl_moe_to_hf.py:163

    with open(os.path.join(save_dir, filename), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09ffe6fb31230a5b — Filesystem access.

repo/src/transformers/models/esm/convert_esm.py:80

        vocab_file.write_text(vocab)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7bf11f1dfee6e950 — Filesystem access.

repo/src/transformers/models/esm/convert_esm.py:312

            vocab_file.write_text(vocab)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d36ff26ff432b0a8 — Filesystem access.

repo/src/transformers/models/esm/openfold_utils/residue_constants.py:417

    stereo_chemical_props = resources.read_text("openfold.resources", "stereo_chemical_props.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d976aa182c554bbd — Filesystem access.

repo/src/transformers/models/esm/tokenization_esm.py:28

    with open(vocab_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #07074be0e53ff283 — Filesystem access.

repo/src/transformers/models/esm/tokenization_esm.py:136

        with open(vocab_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #532920942395f767 — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:36

    text = config.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #218a389694b73668 — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:55

    config.write_text(json.dumps(json_config, indent=2, sort_keys=True))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #095832ac5939c32f — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:59

        text = tokenizer_config.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c8f8cbe20c20c7e — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:64

            tokenizer_config.write_text(json.dumps(json_config, indent=2, sort_keys=True))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ff24f7fa92e5533 — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:73

    generation_config_path.write_text(json.dumps(generation_dict, indent=2, sort_keys=True))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #217b8d064a19edeb — Environment-variable access.

repo/src/transformers/models/fast_vlm/convert_fastvlm_weights_to_hf.py:37

os.environ["TIMM_FUSED_ATTN"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e399a414ac9c6f81 — Filesystem access.

repo/src/transformers/models/fastspeech2_conformer/convert_fastspeech2_conformer_original_pytorch_checkpoint_to_pytorch.py:177

        with open(vocab_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f5d3dfbc048ac7c — Filesystem access.

repo/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:65

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #91a9cc78ffab481c — Filesystem access.

repo/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:163

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f12356dcc3e7273b — Filesystem access.

repo/src/transformers/models/flaubert/tokenization_flaubert.py:237

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5cd59d826a6dfda — Filesystem access.

repo/src/transformers/models/flaubert/tokenization_flaubert.py:240

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4465abd60e7c2880 — Filesystem access.

repo/src/transformers/models/flaubert/tokenization_flaubert.py:498

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea143707c0c3ac3c — Filesystem access.

repo/src/transformers/models/flaubert/tokenization_flaubert.py:502

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #89e9aa05110c4c3c — Filesystem access.

repo/src/transformers/models/focalnet/convert_focalnet_to_hf_format.py:71

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad675e32588b72eb — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:130

    with open(src_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3181f44ca115caa7 — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:146

    with open(tgt_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f275302009fa3862 — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:155

    with open(fsmt_merges_file, encoding="utf-8") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #89d2d6ef832f41ab — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:159

    with open(merges_file, "w", encoding="utf-8") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #39f72980630647d3 — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:209

    with open(fsmt_model_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9b81a6a73986b7df — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:222

    with open(fsmt_tokenizer_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b127fae498ae09c3 — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:204

        with open(src_vocab_file, encoding="utf-8") as src_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ee88755953ad801e — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:206

        with open(tgt_vocab_file, encoding="utf-8") as tgt_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4377bd9c308c5b9c — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:209

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #928e5f39b9f91b11 — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:446

        with open(src_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #192201642562d57a — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:449

        with open(tgt_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #885cde777b94b7d0 — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:454

        with open(merges_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f726cdd0037598e6 — Filesystem access.

repo/src/transformers/models/gemma3/convert_gemma3_weights.py:331

        with open(_CHAT_TEMPLATE_PATH.value, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e3d179b9a882b221 — Filesystem access.

repo/src/transformers/models/gemma4/convert_gemma4_weights.py:71

_CHAT_TEMPLATE = pathlib.Path(cached_file("gg-hf-gg/gemma-4-E4B-it", "chat_template.jinja")).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #822226750d9ae306 — Filesystem access.

repo/src/transformers/models/gemma4/convert_gemma4_weights.py:72

_CHAT_TEMPLATE_LARGE = pathlib.Path(cached_file("gg-hf-gg/gemma-4-31B-it", "chat_template.jinja")).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73937785def3a65c — Filesystem access.

repo/src/transformers/models/gemma4/convert_gemma4_weights.py:1406

    with open(metadata_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b005d4434dbeb128 — Filesystem access.

repo/src/transformers/models/gemma4_unified/convert_gemma4_unified_weights.py:82

_CHAT_TEMPLATE = pathlib.Path(cached_file("google/gemma-4-31B-it", "chat_template.jinja")).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50fe7c4db2890507 — Filesystem access.

repo/src/transformers/models/gemma4_unified/convert_gemma4_unified_weights.py:562

    with open(metadata_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ba974ebb3621ef1 — Filesystem access.

repo/src/transformers/models/glm/convert_glm_weights_to_hf.py:158

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7235a2b0260791dc — Filesystem access.

repo/src/transformers/models/glm4/convert_glm4_weights_to_hf.py:163

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da03750c61a18406 — Filesystem access.

repo/src/transformers/models/glm4v/convert_glm4v_mgt_weights_to_hf.py:276

    with open(index_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0498f84465a51ef4 — Filesystem access.

repo/src/transformers/models/glm4v/convert_glm4v_mgt_weights_to_hf.py:483

    with open(vllm_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0fff708cbba84c8e — Filesystem access.

repo/src/transformers/models/glm4v/convert_glm4v_mgt_weights_to_hf.py:735

    with open(config_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a39f373160d45f6e — Filesystem access.

repo/src/transformers/models/glm4v_moe/convert_glm4v_moe_mgt_weights_to_hf.py:229

    with open(index_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9b5e84449fdf6ab — Filesystem access.

repo/src/transformers/models/glm4v_moe/convert_glm4v_moe_mgt_weights_to_hf.py:439

    with open(vllm_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7399fb6463058155 — Filesystem access.

repo/src/transformers/models/glm4v_moe/convert_glm4v_moe_mgt_weights_to_hf.py:739

    with open(config_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7eeda267dd5559fb — Filesystem access.

repo/src/transformers/models/gpt2/convert_gpt2_original_tf_checkpoint_to_pytorch.py:102

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1a80fe13fabfef4 — Filesystem access.

repo/src/transformers/models/gpt_neo/convert_gpt_neo_mesh_tf_to_pytorch.py:113

    config_json = json.load(open(config_file, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ddf078642e67d5e5 — Filesystem access.

repo/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:35

    with open(emoji_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d89d21f7d7564ee — Filesystem access.

repo/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:41

    with open(vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #07bb7d375718d0ee — Filesystem access.

repo/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:180

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78c48251d44e6043 — Filesystem access.

repo/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:190

        with open(emoji_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4515bf426bed7697 — Filesystem access.

repo/src/transformers/models/gpt_oss/convert_gpt_oss_weights_to_hf.py:154

    original_config = json.loads((Path(input_base_path) / "config.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db21f2d4ded1e11b — Filesystem access.

repo/src/transformers/models/gpt_oss/convert_gpt_oss_weights_to_hf.py:331

    with open(os.path.join(model_path, "model.safetensors.index.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a033eec011ad6e48 — Filesystem access.

repo/src/transformers/models/gpt_oss/convert_gpt_oss_weights_to_hf.py:779

    with open(chat_template_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78f0f18f250444c5 — Filesystem access.

repo/src/transformers/models/hiera/convert_hiera_to_hf.py:164

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0824100e6104ab37 — Filesystem access.

repo/src/transformers/models/hubert/convert_hubert_original_pytorch_checkpoint_to_pytorch.py:208

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6210cf95ee925a13 — Filesystem access.

repo/src/transformers/models/idefics3/convert_idefics3_weights_to_hf.py:122

    with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c3c5ea9692a786e — Filesystem access.

repo/src/transformers/models/imagegpt/convert_imagegpt_original_tf2_to_pytorch.py:156

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9e91b06d50dff4ae — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:217

        with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4792cc2155c9003d — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:274

    with open(os.path.join(input_path, "config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cd0945c15881b04b — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:276

    with open(os.path.join(input_path, "preprocessor_config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88fcddd2ebf38f6f — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:278

    with open(os.path.join(input_path, "special_tokens_map.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87dc930667a1c6d0 — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:280

    with open(os.path.join(input_path, "tokenizer_config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4196baf4fcef6a70 — Filesystem access.

repo/src/transformers/models/levit/convert_levit_timm_to_pytorch.py:87

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a8f3cf6beaf99d7 — Filesystem access.

repo/src/transformers/models/llama/convert_llama_weights_to_hf.py:175

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a22632a59c9f37f — Filesystem access.

repo/src/transformers/models/llama/convert_llama_weights_to_hf.py:180

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #45a322cb1ec2a4bb — Environment-variable access.

repo/src/transformers/models/llama4/convert_llama4_weights_to_hf.py:25

_OFFLINE_QUANT_COMPATIBLE = os.environ.get("OFFLINE_QUANT_COMPATIBLE", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7acbb27065c81a6 — Filesystem access.

repo/src/transformers/models/llama4/convert_llama4_weights_to_hf.py:203

    with open(os.path.join(model_path, "params.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #783e14b82422359b — Filesystem access.

repo/src/transformers/models/llama4/convert_llama4_weights_to_hf.py:221

    with open(os.path.join(input_base_path, "params.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a57f5111b7aa8955 — Filesystem access.

repo/src/transformers/models/llava_next/convert_llava_next_weights_to_hf.py:100

    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30b4d84c71caf6ec — Filesystem access.

repo/src/transformers/models/llava_next_video/convert_llava_next_video_weights_to_hf.py:155

    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #21c8856a6946b8d9 — Filesystem access.

repo/src/transformers/models/llava_onevision/convert_llava_onevision_weights_to_hf.py:103

    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d9c74aedd6213c23 — Filesystem access.

repo/src/transformers/models/luke/convert_luke_original_pytorch_checkpoint_to_pytorch.py:29

    with open(metadata_path) as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b0e6ec95b438f2a — Filesystem access.

repo/src/transformers/models/luke/convert_luke_original_pytorch_checkpoint_to_pytorch.py:49

    with open(os.path.join(pytorch_dump_folder_path, LukeTokenizer.vocab_files_names["entity_vocab_file"]), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d16d22ad996cb943 — Filesystem access.

repo/src/transformers/models/luke/convert_luke_original_pytorch_checkpoint_to_pytorch.py:135

    with open(entity_vocab_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f68b5f71f3190577 — Filesystem access.

repo/src/transformers/models/luke/tokenization_luke.py:287

            with open(entity_vocab_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ccf0c6a0fab888b2 — Filesystem access.

repo/src/transformers/models/m2m_100/tokenization_m2m_100.py:311

            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87cff144a11b09ca — Filesystem access.

repo/src/transformers/models/m2m_100/tokenization_m2m_100.py:375

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b11bc832b33b32a — Filesystem access.

repo/src/transformers/models/m2m_100/tokenization_m2m_100.py:380

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9490badaf299b47 — Filesystem access.

repo/src/transformers/models/mamba/convert_mamba_ssm_checkpoint_to_pytorch.py:110

    with open(config_json_file, "r", encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #66d9bae908f27311 — Filesystem access.

repo/src/transformers/models/mamba2/convert_mamba2_ssm_checkpoint_to_pytorch.py:125

    with open(config_path, "r", encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #41f29db224f2bea5 — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:59

        self.model_results = json.load(open("Tatoeba-Challenge/models/released-model-results.json"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c7dcc0fd956566e — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:61

        for line in open(ISO_PATH):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e39310e445d50f5 — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:274

        with open(sub_dir / "metadata.json", "w", encoding="utf-8") as writeobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a9bdf80ebdd86e6 — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:305

            metadata = yaml.safe_load(open(p / ymls[0]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc135bca5139ecb9 — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:313

            metadata = yaml.safe_load(open(p / ymls[-1]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a438d08ffb22ea0 — Filesystem access.

repo/src/transformers/models/marian/convert_marian_to_pytorch.py:292

            lns = list(open(p / "README.md").readlines())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76b85fac5cb56769 — Filesystem access.

repo/src/transformers/models/marian/convert_marian_to_pytorch.py:683

    with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8092a0e0c46ea29e — Filesystem access.

repo/src/transformers/models/marian/convert_marian_to_pytorch.py:688

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f69bfbb46b9deca — Filesystem access.

repo/src/transformers/models/marian/tokenization_marian.py:352

                with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c8551df92672aae — Filesystem access.

repo/src/transformers/models/marian/tokenization_marian.py:416

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32e87cda5546dcd7 — Filesystem access.

repo/src/transformers/models/marian/tokenization_marian.py:421

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0315765f05fb45c8 — Filesystem access.

repo/src/transformers/models/mask2former/convert_mask2former_original_pytorch_checkpoint_to_pytorch.py:134

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7fd892d7db382eb3 — Filesystem access.

repo/src/transformers/models/maskformer/convert_maskformer_resnet_to_pytorch.py:74

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32f23d916a49d4fd — Environment-variable access.

repo/src/transformers/models/maskformer/convert_maskformer_resnet_to_pytorch.py:273

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c32756ab3a106563 — Filesystem access.

repo/src/transformers/models/maskformer/convert_maskformer_resnet_to_pytorch.py:281

    with open(checkpoint_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b1f7d9ed360ed5aa — Filesystem access.

repo/src/transformers/models/maskformer/convert_maskformer_swin_to_pytorch.py:71

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d3dd57c1bcb457f — Environment-variable access.

repo/src/transformers/models/maskformer/convert_maskformer_swin_to_pytorch.py:242

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb9233dac707effa — Filesystem access.

repo/src/transformers/models/maskformer/convert_maskformer_swin_to_pytorch.py:250

    with open(checkpoint_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eff8589ba2e814a4 — Filesystem access.

repo/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:598

        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5dd3b00793c43d36 — Filesystem access.

repo/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:651

    with open(tracker_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #21a931600673ba70 — Filesystem access.

repo/src/transformers/models/mgp_str/tokenization_mgp_str.py:53

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #69f80a1ca687397e — Filesystem access.

repo/src/transformers/models/mgp_str/tokenization_mgp_str.py:97

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a43225ad2dd22def — Filesystem access.

repo/src/transformers/models/mimo_v2_flash/convert_mimo_v2_flash_weights_to_hf.py:94

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6f84b8715fb75c56 — Filesystem access.

repo/src/transformers/models/ministral3/convert_ministral3_weights_to_hf.py:89

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #58a99684ca0aa85c — Filesystem access.

repo/src/transformers/models/mistral/convert_mistral_weights_to_hf.py:63

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8e62875fe06990b — Filesystem access.

repo/src/transformers/models/mistral3/convert_mistral3_weights_to_hf.py:75

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4b60aac1e367af9 — Filesystem access.

repo/src/transformers/models/mistral4/convert_mistral4_weight_to_hf.py:363

    with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aed38aa74b24cd5d — Filesystem access.

repo/src/transformers/models/mixtral/convert_mixtral_weights_to_hf.py:52

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #932e0689397b9f3a — Filesystem access.

repo/src/transformers/models/mixtral/convert_mixtral_weights_to_hf.py:57

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e731fbcf3ab0c6d0 — Filesystem access.

repo/src/transformers/models/mllama/convert_mllama_weights_to_hf.py:216

    with open(os.path.join(input_base_path, "params.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02958a0328decb70 — Filesystem access.

repo/src/transformers/models/mllama/convert_mllama_weights_to_hf.py:562

        with open(chat_template_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #954e6b7e3426cead — Filesystem access.

repo/src/transformers/models/mllama/convert_mllama_weights_to_hf.py:567

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8358711e6ee85cac — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:30

    with open(metadata_path) as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5896e0bb0b9e28a — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:53

    with open(os.path.join(pytorch_dump_folder_path, "tokenizer_config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0886016019d2ebb6 — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:56

    with open(os.path.join(pytorch_dump_folder_path, "tokenizer_config.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d182555b2cd40f89 — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:59

    with open(os.path.join(pytorch_dump_folder_path, MLukeTokenizer.vocab_files_names["entity_vocab_file"]), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ed5b6691c3d00ab — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:188

    data = [json.loads(line) for line in open(entity_vocab_path)]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #beec296947457124 — Filesystem access.

repo/src/transformers/models/mluke/tokenization_mluke.py:308

            with open(entity_vocab_file, encoding="utf-8") as entity_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e37adb8c1a5318e9 — Filesystem access.

repo/src/transformers/models/mluke/tokenization_mluke.py:1713

        with open(entity_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2ca54d6d801436f — Filesystem access.

repo/src/transformers/models/mobilenet_v1/convert_original_tf_checkpoint_to_pytorch.py:158

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #51810c13cf3a13e8 — Filesystem access.

repo/src/transformers/models/mobilenet_v2/convert_original_tf_checkpoint_to_pytorch.py:231

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f79bfe344a04fb9 — Filesystem access.

repo/src/transformers/models/mobilevit/convert_mlcvnets_to_pytorch.py:65

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #742526cc7491fd40 — Filesystem access.

repo/src/transformers/models/mobilevitv2/convert_mlcvnets_to_pytorch.py:55

    with open(orig_cfg_file, "r") as yaml_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ec88d63edaeca80 — Filesystem access.

repo/src/transformers/models/mobilevitv2/convert_mlcvnets_to_pytorch.py:117

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #705e44383d516304 — Filesystem access.

repo/src/transformers/models/myt5/tokenization_myt5.py:46

            with open(rewriting_rules, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fde3e77a772ec294 — Filesystem access.

repo/src/transformers/models/myt5/tokenization_myt5.py:195

        self.byte_maps = json.load(open(vocab_file, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #690bd8e01fccc7aa — Filesystem access.

repo/src/transformers/models/myt5/tokenization_myt5.py:373

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #156a4260ff7a2444 — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:58

        with open(meta_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4f5621216f14dfc — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:82

            with open(config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b7560d979c9d274 — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:236

            with open(tokenizer_pkl, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2651c6d8febdcbe4 — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:246

                    (Path(output_dir) / filename).write_bytes(src.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3806f379e7e3af8f — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:252

                (Path(output_dir) / filename).write_bytes(src.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d400eb8211d0ff7 — Filesystem access.

repo/src/transformers/models/nemotron/convert_nemotron_nemo_to_hf.py:131

    json.dump(hf_config, open(f"{hf_output_path}/config.json", "w"), indent=2)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #36963a7a46a851eb — Filesystem access.

repo/src/transformers/models/nemotron3_5_asr/convert_nemotron3_5_asr_to_hf.py:505

    nemo_config = yaml.load(open(model_files["model_config"], "r"), Loader=yaml.FullLoader)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f37710f3d911b48a — Filesystem access.

repo/src/transformers/models/nemotron_asr_streaming/convert_nemotron_asr_streaming_to_hf.py:458

    nemo_config = yaml.load(open(model_files["model_config"], "r"), Loader=yaml.FullLoader)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2f23f63c73e600a — Filesystem access.

repo/src/transformers/models/nllb_moe/convert_nllb_moe_sharded_original_checkpoint_to_pytorch.py:122

    with open(os.path.join(dump_path, WEIGHTS_INDEX_NAME), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3cc402f04e6f63ff — Filesystem access.

repo/src/transformers/models/olmo/convert_olmo_weights_to_hf.py:56

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #935ed0fc5a50c05e — Filesystem access.

repo/src/transformers/models/olmo/convert_olmo_weights_to_hf.py:61

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2719e58594606cd7 — Filesystem access.

repo/src/transformers/models/olmo/convert_olmo_weights_to_hf.py:71

    olmo_config = yaml.safe_load(config_path.read_text())["model"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c60665c25c758a0c — Filesystem access.

repo/src/transformers/models/olmo2/convert_olmo2_weights_to_hf.py:59

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #20125a6b60fe6672 — Filesystem access.

repo/src/transformers/models/olmo2/convert_olmo2_weights_to_hf.py:64

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d8e52c953ad8fb4 — Filesystem access.

repo/src/transformers/models/olmo2/convert_olmo2_weights_to_hf.py:81

    olmo2_config = yaml.safe_load(config_path.read_text())["model"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #221acfd5ab926fb9 — Filesystem access.

repo/src/transformers/models/olmo2/convert_olmo2_weights_to_hf.py:230

        tokenizer_config = yaml.safe_load(config_path.read_text())["tokenizer"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b7b01d030f85f7a — Filesystem access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:72

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff49751e75a18f93 — Filesystem access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:77

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f8e5df24d5a3c0a6 — Filesystem access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:90

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3466cea3b769aedc — Environment-variable access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:203

                if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b3bb6ffbe56b3c2d — Environment-variable access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:268

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #794c673c322e0665 — Filesystem access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:300

    olmo3_config = json.loads(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #165669813942128c — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:98

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fba5bdbf339a8485 — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:103

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #365354ac35b47093 — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:116

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7216ea6c87141702 — Environment-variable access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:221

                if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2852e1867660598 — Environment-variable access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:313

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e7df34337f26e005 — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:424

    olmo_config = json.loads(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d3a91ac5a611e3fc — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:561

    with open(hf_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2dd5b08f93c1882c — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:569

    with open(hf_config_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1b551719f1459a5 — Filesystem access.

repo/src/transformers/models/olmoe/convert_olmoe_weights_to_hf.py:82

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #31a80a5cd1fb015b — Filesystem access.

repo/src/transformers/models/olmoe/convert_olmoe_weights_to_hf.py:87

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c3b652d242bf37f7 — Filesystem access.

repo/src/transformers/models/olmoe/convert_olmoe_weights_to_hf.py:97

    olmoe_config = yaml.safe_load(config_path.read_text())["model"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #95fb7101c40d8c7a — Filesystem access.

repo/src/transformers/models/oneformer/image_processing_oneformer.py:95

    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40ec03540bbe24c1 — Filesystem access.

repo/src/transformers/models/oneformer/image_processing_pil_oneformer.py:241

    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e87fedc307b7b50 — Filesystem access.

repo/src/transformers/models/openai/convert_openai_original_tf_checkpoint_to_pytorch.py:41

    with open(openai_checkpoint_folder_path + "/parameters_names.json", "r", encoding="utf-8") as names_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #222bba9a23f98ff4 — Filesystem access.

repo/src/transformers/models/openai/convert_openai_original_tf_checkpoint_to_pytorch.py:43

    with open(openai_checkpoint_folder_path + "/params_shapes.json", "r", encoding="utf-8") as shapes_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1cae3552fe349199 — Filesystem access.

repo/src/transformers/models/openai/convert_openai_original_tf_checkpoint_to_pytorch.py:125

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ee0fa95515e14d8 — Filesystem access.

repo/src/transformers/models/openai_privacy_filter/convert_openai_privacy_filter_weights_to_hf.py:245

    original_config = json.loads((input_path / "config.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19cd4a752f68aae0 — Filesystem access.

repo/src/transformers/models/parakeet/convert_nemo_to_hf.py:515

    nemo_config = yaml.load(open(model_files["model_config"], "r"), Loader=yaml.FullLoader)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0bd8573d33455dcd — Environment-variable access.

repo/src/transformers/models/perceiver/convert_perceiver_haiku_to_pytorch.py:271

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5d93bbd1623765b9 — Filesystem access.

repo/src/transformers/models/perceiver/convert_perceiver_haiku_to_pytorch.py:280

    with open(pickle_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ff023d2688fe126 — Filesystem access.

repo/src/transformers/models/perceiver/convert_perceiver_haiku_to_pytorch.py:331

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d33497ff4dd48fa2 — Filesystem access.

repo/src/transformers/models/perceiver/convert_perceiver_haiku_to_pytorch.py:380

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #572d4592edf590c1 — Filesystem access.

repo/src/transformers/models/perception_lm/convert_perception_lm_weights_to_hf.py:176

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc85b6247bd49900 — Filesystem access.

repo/src/transformers/models/perception_lm/convert_perception_lm_weights_to_hf.py:181

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #37badf6d2ebd80aa — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:139

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a56729cb49abea9 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:196

    vocab = json.load(open(f"{output_dir}/vocab.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4689f5c12984dee0 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:199

    json.dump(vocab, open(f"{output_dir}/vocab.json", "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d21f9b25af0b3ed — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:201

    tokenizer = json.load(open(f"{output_dir}/tokenizer.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d80281cca823c58f — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:208

    json.dump(tokenizer, open(f"{output_dir}/tokenizer.json", "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d0a66f22cfd2b69b — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:210

    tokenizer_config = json.load(open(f"{output_dir}/tokenizer_config.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b5c67c70c6e59bf1 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:213

    json.dump(tokenizer_config, open(f"{output_dir}/tokenizer_config.json", "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f9fd4f874a5c100 — Filesystem access.

repo/src/transformers/models/phobert/tokenization_phobert.py:126

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #432adf7634e281ff — Filesystem access.

repo/src/transformers/models/phobert/tokenization_phobert.py:310

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab2e7992a4992c1a — Filesystem access.

repo/src/transformers/models/phobert/tokenization_phobert.py:331

                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cd469c367666f773 — Filesystem access.

repo/src/transformers/models/pixtral/convert_pixtral_weights_to_hf.py:147

        with open(f"{input_dir}/params.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87031b29ccab5b52 — Filesystem access.

repo/src/transformers/models/pixtral/convert_pixtral_weights_to_hf.py:239

        processor.chat_template = open(args.chat_template_file).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8d38c1c73faf1697 — Filesystem access.

repo/src/transformers/models/poolformer/convert_poolformer_original_to_pytorch.py:109

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c512e3fe9817b12b — Filesystem access.

repo/src/transformers/models/pop2piano/convert_pop2piano_weights_to_hf.py:189

with open("./vocab.json", "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #664baa3f38757ca0 — Filesystem access.

repo/src/transformers/models/pop2piano/tokenization_pop2piano.py:111

        with open(vocab, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b2372eed61c0a25f — Filesystem access.

repo/src/transformers/models/pop2piano/tokenization_pop2piano.py:358

        with open(out_vocab_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e9b862ecced8cdb — Filesystem access.

repo/src/transformers/models/prophetnet/tokenization_prophetnet.py:259

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #051546e6bb8402fa — Filesystem access.

repo/src/transformers/models/prophetnet/tokenization_prophetnet.py:438

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a615c35054e74d5a — Filesystem access.

repo/src/transformers/models/qwen3_asr/convert_qwen3_asr_to_hf.py:110

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cb6d26a3b539f3f4 — Filesystem access.

repo/src/transformers/models/qwen3_asr/convert_qwen3_asr_to_hf.py:125

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e6f6bf5fc5c956b9 — Filesystem access.

repo/src/transformers/models/qwen3_asr/convert_qwen3_asr_to_hf.py:236

            with open(chat_template_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa1084131b62afc3 — Environment-variable access.

repo/src/transformers/models/rag/retrieval_rag.py:134

        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c5e49b01d02ee170 — Filesystem access.

repo/src/transformers/models/rag/retrieval_rag.py:141

        with open(passages_path, "rb") as passages_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00e5f49b28416495 — Environment-variable access.

repo/src/transformers/models/rag/retrieval_rag.py:150

        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #742f85d120d45aa5 — Filesystem access.

repo/src/transformers/models/rag/retrieval_rag.py:157

        with open(resolved_meta_path, "rb") as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bcc9827c7d050246 — Environment-variable access.

repo/src/transformers/models/reformer/convert_reformer_trax_checkpoint_to_pytorch.py:193

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6f52481f938c70d4 — Filesystem access.

repo/src/transformers/models/reformer/convert_reformer_trax_checkpoint_to_pytorch.py:200

    with open(trax_model_pkl_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88173ea3321a51cc — Filesystem access.

repo/src/transformers/models/regnet/convert_regnet_seer_10b_to_pytorch.py:165

    id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56a7bb10faef2c04 — Environment-variable access.

repo/src/transformers/models/regnet/convert_regnet_seer_10b_to_pytorch.py:236

        logger.info(f"Token is {os.environ['HF_TOKEN']}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae355d0ef71cb689 — Filesystem access.

repo/src/transformers/models/regnet/convert_regnet_to_pytorch.py:218

    id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a5aee9e31ecdafd — Filesystem access.

repo/src/transformers/models/resnet/convert_resnet_to_pytorch.py:121

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d7949732860363db — Filesystem access.

repo/src/transformers/models/rf_detr/convert_rf_detr_weights_to_hf.py:154

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a750891a203eba3 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:52

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d283118eaa8e41f9 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:139

        with open(word_shape_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d3e876d23c8a2bb4 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:142

        with open(word_pronunciation_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #770feb6ad1b00ae5 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:1077

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0aeb13408c10a917 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:1088

        with open(word_shape_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e801d79f46b44c40 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:1091

        with open(word_pronunciation_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6080c00c1d2170f7 — Filesystem access.

repo/src/transformers/models/rt_detr/convert_rt_detr_original_pytorch_checkpoint_to_hf.py:41

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #51f356a4ab2247b6 — Filesystem access.

repo/src/transformers/models/rt_detr_v2/convert_rt_detr_v2_weights_to_hf.py:42

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d9d0f8b5fceb5ce5 — Filesystem access.

repo/src/transformers/models/rwkv/convert_rwkv_checkpoint_to_hf.py:134

        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c5811015b7b0d365 — Environment-variable access.

repo/src/transformers/models/seamless_m4t/convert_fairseq2_to_hf.py:132

CACHE_DIR = os.path.join(os.getenv("XDG_CACHE_HOME", default_cache_dir), "huggingface", "hub")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2873b5bffa528182 — Environment-variable access.

repo/src/transformers/models/seamless_m4t_v2/convert_fairseq2_to_hf.py:149

CACHE_DIR = os.path.join(os.getenv("XDG_CACHE_HOME", default_cache_dir), "huggingface", "hub")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #72400a54c04cd605 — Filesystem access.

repo/src/transformers/models/segformer/convert_segformer_original_to_pytorch.py:153

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44a1d347c609160f — Filesystem access.

repo/src/transformers/models/sew/convert_sew_original_pytorch_checkpoint_to_pytorch.py:268

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #273c8c535e983d75 — Filesystem access.

repo/src/transformers/models/sew_d/convert_sew_d_original_pytorch_checkpoint_to_pytorch.py:280

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2901a4614a609a6 — Filesystem access.

repo/src/transformers/models/siglip/tokenization_siglip.py:345

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea049ee5947adfc0 — Filesystem access.

repo/src/transformers/models/speech_encoder_decoder/convert_speech_to_text_wav2vec2_seq2seq_original_to_pytorch.py:195

    with open(dict_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #91dd253b64ef2714 — Filesystem access.

repo/src/transformers/models/speech_encoder_decoder/convert_speech_to_text_wav2vec2_seq2seq_original_to_pytorch.py:267

    with open(os.path.join(pytorch_dump_folder_path, "vocab.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #64911e6d65cb3ae6 — Filesystem access.

repo/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:271

            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9239143108521ff — Filesystem access.

repo/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:285

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e6aaca33a0e2bbf1 — Filesystem access.

repo/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:290

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1dfd564b8fe0b45 — Filesystem access.

repo/src/transformers/models/splinter/tokenization_splinter.py:33

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d32bfd842cbaae4 — Filesystem access.

repo/src/transformers/models/swiftformer/convert_swiftformer_original_to_hf.py:102

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02a4d1f1980fe7af — Filesystem access.

repo/src/transformers/models/swin/convert_swin_timm_to_pytorch.py:45

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2cf7e5eaf1615e95 — Filesystem access.

repo/src/transformers/models/swinv2/convert_swinv2_timm_to_pytorch.py:67

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aaa3fbe77fe3770a — Filesystem access.

repo/src/transformers/models/swinv2/convert_swinv2_timm_to_pytorch.py:76

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #72137ec1a3530856 — Filesystem access.

repo/src/transformers/models/switch_transformers/convert_big_switch.py:145

    with open(os.path.join(dump_path, WEIGHTS_INDEX_NAME), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f02124aa79dd06e6 — Filesystem access.

repo/src/transformers/models/switch_transformers/convert_switch_transformers_original_flax_checkpoint_to_pytorch.py:267

    with open(gin_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8d850b5e2dc4359 — Filesystem access.

repo/src/transformers/models/tapas/tokenization_tapas.py:91

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85bcbf1c9d64bdf9 — Filesystem access.

repo/src/transformers/models/tapas/tokenization_tapas.py:394

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2e1c5948c9eaa624 — Filesystem access.

repo/src/transformers/models/textnet/convert_textnet_to_hf.py:119

    with open(config_filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dffc832eb231c64d — Filesystem access.

repo/src/transformers/models/timesformer/convert_timesformer_to_pytorch.py:49

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0890d17ca97a27eb — Filesystem access.

repo/src/transformers/models/unispeech/convert_unispeech_original_pytorch_checkpoint_to_pytorch.py:220

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a6e1d50a55d10e7 — Filesystem access.

repo/src/transformers/models/upernet/convert_convnext_upernet_to_pytorch.py:53

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #15e005cc7c96c740 — Filesystem access.

repo/src/transformers/models/upernet/convert_swin_upernet_to_pytorch.py:59

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5d8b2d3262e06e38 — Filesystem access.

repo/src/transformers/models/vibevoice_acoustic_tokenizer/convert_vibevoice_acoustic_tokenizer_to_hf.py:113

        with open(processor_config, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d93633351656700d — Filesystem access.

repo/src/transformers/models/vibevoice_acoustic_tokenizer/convert_vibevoice_acoustic_tokenizer_to_hf.py:127

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd928b704bb2e193 — Filesystem access.

repo/src/transformers/models/vibevoice_asr/convert_vibevoice_asr_to_hf.py:126

    with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a13e14ba68f164ed — Filesystem access.

repo/src/transformers/models/vibevoice_asr/convert_vibevoice_asr_to_hf.py:149

        with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #155b520361215714 — Filesystem access.

repo/src/transformers/models/videomae/convert_videomae_to_pytorch.py:50

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a73ea744006eb403 — Filesystem access.

repo/src/transformers/models/videoprism/convert_videoprism_weights_to_hf.py:391

        with open(spiece_path, "wb") as f_out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23fbad6b5f7a8fdf — Filesystem access.

repo/src/transformers/models/vilt/convert_vilt_original_to_pytorch.py:184

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b0f71290516bc1a — Filesystem access.

repo/src/transformers/models/vit/convert_dino_to_pytorch.py:147

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d41978242fca8a97 — Filesystem access.

repo/src/transformers/models/vit_msn/convert_msn_to_pytorch.py:154

    id2label = json.load(open(hf_hub_download(repo_id, filename), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #416566975565273f — Filesystem access.

repo/src/transformers/models/vits/convert_original_checkpoint.py:309

        with open(config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3adf39e3a745abed — Filesystem access.

repo/src/transformers/models/vits/convert_original_checkpoint.py:331

        symbols = [line.replace("\n", "") for line in open(vocab_path, encoding="utf-8")]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #82fa8081cae2b6f2 — Filesystem access.

repo/src/transformers/models/vits/convert_original_checkpoint.py:338

        with open(tf.name, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f26708c90184c19 — Filesystem access.

repo/src/transformers/models/vits/tokenization_vits.py:83

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e4c12e5d4d022a0e — Filesystem access.

repo/src/transformers/models/vits/tokenization_vits.py:242

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d72e2344c75af3e — Filesystem access.

repo/src/transformers/models/vivit/convert_vivit_flax_to_pytorch.py:36

    with open(path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fcfa86635172ba34 — Filesystem access.

repo/src/transformers/models/vivit/convert_vivit_flax_to_pytorch.py:49

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e6e3e19f7d67ae5 — Filesystem access.

repo/src/transformers/models/vjepa2/convert_vjepa2_classifier_to_hf.py:99

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13f87e53379f6599 — Environment-variable access.

repo/src/transformers/models/vjepa2/convert_vjepa2_to_hf.py:48

TOKEN = os.environ.get("HF_TOKEN", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #54cdaaf794f8969a — Filesystem access.

repo/src/transformers/models/voxtral/convert_voxtral_weights_to_hf.py:187

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ef2385f03221863 — Filesystem access.

repo/src/transformers/models/voxtral_realtime/convert_voxtral_realtime_weights_to_hf.py:242

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c9057bc19c01cb3 — Filesystem access.

repo/src/transformers/models/wav2vec2/convert_wav2vec2_original_pytorch_checkpoint_to_pytorch.py:75

    with open(filename, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40b14b5915dcf1ae — Filesystem access.

repo/src/transformers/models/wav2vec2/convert_wav2vec2_original_pytorch_checkpoint_to_pytorch.py:317

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #825b8809b3ed341f — Filesystem access.

repo/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:154

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ad4d5935c6de2dd — Filesystem access.

repo/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:647

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49dde8854dd1926e — Filesystem access.

repo/src/transformers/models/wav2vec2_conformer/convert_wav2vec2_conformer_original_pytorch_checkpoint_to_pytorch.py:253

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2244d68024a67a2c — Filesystem access.

repo/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:138

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d520a3ae5c4980ac — Filesystem access.

repo/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:575

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d0b5687e6e74ca1 — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:158

        model_bytes = open(download_target, "rb").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0732c289e5cbeaca — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:164

    with urllib.request.urlopen(url) as source, open(download_target, "wb") as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4bbec175d2c9517b — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:176

    model_bytes = open(download_target, "rb").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d190fa18a6149ec — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:315

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d9903c675643c8d9 — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:318

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9273883d7721af3a — Filesystem access.

repo/src/transformers/models/whisper/tokenization_whisper.py:266

            with open(normalizer_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #60178addb57a1628 — Filesystem access.

repo/src/transformers/models/whisper/tokenization_whisper.py:560

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #818e6d17d22bb425 — Filesystem access.

repo/src/transformers/models/whisper/tokenization_whisper.py:563

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #877f6d536055e69a — Filesystem access.

repo/src/transformers/models/whisper/tokenization_whisper.py:568

            with open(normalizer_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c53c3981ebdec550 — Filesystem access.

repo/src/transformers/models/xcodec/convert_xcodec_weights_to_hf.py:186

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a367f095beed620 — Filesystem access.

repo/src/transformers/models/xcodec2/convert_xcodec2_checkpoint.py:224

        with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df0003bba7b139b1 — Filesystem access.

repo/src/transformers/models/xlm/convert_xlm_original_pytorch_checkpoint_to_pytorch.py:58

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #38dcd4c21b5837d7 — Filesystem access.

repo/src/transformers/models/xlm/convert_xlm_original_pytorch_checkpoint_to_pytorch.py:62

    with open(pytorch_vocab_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa21351aa4dc0db2 — Filesystem access.

repo/src/transformers/models/xlm/tokenization_xlm.py:244

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab6245fc73246883 — Filesystem access.

repo/src/transformers/models/xlm/tokenization_xlm.py:247

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c4e041bb657e8f01 — Filesystem access.

repo/src/transformers/models/xlm/tokenization_xlm.py:541

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40314e8b9706e482 — Filesystem access.

repo/src/transformers/models/xlm/tokenization_xlm.py:545

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ba08bf808afc0f9 — Filesystem access.

repo/src/transformers/models/xlnet/convert_xlnet_original_tf_checkpoint_to_pytorch.py:224

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bcff7b6665698b09 — Filesystem access.

repo/src/transformers/models/yolos/convert_yolos_to_pytorch.py:61

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7edfb339549f6984 — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:171

    config_dict = json.loads((input_dir / "config.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #880633efff9f566f — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:249

    index = json.loads((input_dir / "model.safetensors.index.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eb65e3e0d8992b5b — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:251

    old_num_hidden_layers = int(json.loads((input_dir / "config.json").read_text())["num_hidden_layers"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73db4a88ca13e1b6 — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:296

        old_num_hidden_layers = int(json.loads((input_dir / "config.json").read_text())["num_hidden_layers"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b244cf7638985b84 — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:313

    old_index = json.loads(index_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf8498a4a1ee2a0a — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:346

    (output_dir / "model.safetensors.index.json").write_text(
        json.dumps(converted_index, indent=2, sort_keys=True) + "\n"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c40b7fa20af4aa3 — Filesystem access.

repo/src/transformers/pipelines/__init__.py:921

                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #27d088b4e3d570ca — Filesystem access.

repo/src/transformers/pipelines/audio_classification.py:174

                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85beff5763d99a26 — Filesystem access.

repo/src/transformers/pipelines/automatic_speech_recognition.py:352

                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b2ae9d32f965c2d4 — Filesystem access.

repo/src/transformers/pipelines/base.py:464

        with open(binary_path, "wb+") as f_output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a19398080468cf29 — Filesystem access.

repo/src/transformers/pipelines/base.py:527

        with open(self.input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cdccc00e7fa2a926 — Filesystem access.

repo/src/transformers/pipelines/base.py:542

        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #772015dee0dab71b — Filesystem access.

repo/src/transformers/pipelines/base.py:570

        with open(input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #99085f651baeaa95 — Filesystem access.

repo/src/transformers/pipelines/base.py:587

        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19d11ae1fa5f08d1 — Environment-variable access.

repo/src/transformers/pipelines/base.py:1200

        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76763186132f62ad — Environment-variable access.

repo/src/transformers/pipelines/base.py:1202

            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #104b124210066b27 — Environment-variable access.

repo/src/transformers/pipelines/base.py:1321

        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f2868cdfa9ca441 — Environment-variable access.

repo/src/transformers/pipelines/base.py:1323

            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b1bbe79aa46e8249 — Filesystem access.

repo/src/transformers/pipelines/zero_shot_audio_classification.py:111

                with open(audio, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d72e01c92a881611 — Filesystem access.

repo/src/transformers/processing_utils.py:1086

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bcd802f249787be2 — Filesystem access.

repo/src/transformers/processing_utils.py:1166

            with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #157de441a57ffea2 — Filesystem access.

repo/src/transformers/processing_utils.py:1174

                    with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a6d7af68f6441f78 — Filesystem access.

repo/src/transformers/processing_utils.py:1183

                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7839de0e104a38e3 — Filesystem access.

repo/src/transformers/processing_utils.py:1371

            with open(resolved_chat_template_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3fa410c6412e1586 — Filesystem access.

repo/src/transformers/processing_utils.py:1383

                template_name: open(template_file, "r", encoding="utf-8").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a6afe25a7ad69c8 — Filesystem access.

repo/src/transformers/processing_utils.py:1387

                with open(resolved_raw_chat_template_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c9e516b8290bf8d1 — Filesystem access.

repo/src/transformers/processing_utils.py:1402

                with open(resolved_processor_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c43aa72b62e6aa27 — Filesystem access.

repo/src/transformers/processing_utils.py:1428

                reader = open(resolved_audio_tokenizer_file, "r", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e66a5b52c08eccfb — Environment-variable access.

repo/src/transformers/testing_utils.py:290

        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #24007e515ae2582f — Environment-variable access.

repo/src/transformers/testing_utils.py:306

        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85d2dc1607cd46c6 — Environment-variable access.

repo/src/transformers/testing_utils.py:1094

    if "TRANSFORMERS_TEST_BACKEND" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10144f054f7f02af — Environment-variable access.

repo/src/transformers/testing_utils.py:1095

        backend = os.environ["TRANSFORMERS_TEST_BACKEND"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c0c576a24b0e9a1 — Environment-variable access.

repo/src/transformers/testing_utils.py:1104

    if "TRANSFORMERS_TEST_DEVICE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca61e4b05f832de8 — Environment-variable access.

repo/src/transformers/testing_utils.py:1105

        torch_device = os.environ["TRANSFORMERS_TEST_DEVICE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb70eab9d591d0ca — Environment-variable access.

repo/src/transformers/testing_utils.py:2176

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11055264ef96a213 — Environment-variable access.

repo/src/transformers/testing_utils.py:2298

            for k in list(os.environ.keys()):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18d1d2c38da9c491 — Environment-variable access.

repo/src/transformers/testing_utils.py:2300

                    del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dba0cf251665e6be — Environment-variable access.

repo/src/transformers/testing_utils.py:2311

    return mock.patch.dict(os.environ, kwargs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76bb70146aaff5ff — Environment-variable access.

repo/src/transformers/testing_utils.py:2326

    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2dc8a7da43ea52b4 — Filesystem access.

repo/src/transformers/testing_utils.py:2428

        with open(report_files["durations"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e57aee81445a7f8d — Filesystem access.

repo/src/transformers/testing_utils.py:2458

    with open(report_files["failures_long"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a24fe6e10c48b692 — Filesystem access.

repo/src/transformers/testing_utils.py:2463

    with open(report_files["failures_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b78653b9cfecb7d9 — Filesystem access.

repo/src/transformers/testing_utils.py:2468

    with open(report_files["failures_line"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f6049a6f2dc15245 — Filesystem access.

repo/src/transformers/testing_utils.py:2472

    with open(report_files["errors"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #72e318458dba9f8b — Filesystem access.

repo/src/transformers/testing_utils.py:2476

    with open(report_files["warnings"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5411dd20856e4f33 — Filesystem access.

repo/src/transformers/testing_utils.py:2490

    with open(report_files["summary_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3da3f11b351e29f1 — Filesystem access.

repo/src/transformers/testing_utils.py:2494

    with open(report_files["stats"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f17e9de5610ae1d — Environment-variable access.

repo/src/transformers/testing_utils.py:2594

    worker = os.environ.get("PYTEST_XDIST_WORKER", "gw0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8cc336813e3c80c5 — Filesystem access.

repo/src/transformers/testing_utils.py:2641

    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9148f54679f7a187 — Environment-variable access.

repo/src/transformers/testing_utils.py:2843

        timeout = int(os.environ.get("PYTEST_TIMEOUT", "600"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #879ad6d495bf8b81 — Environment-variable access.

repo/src/transformers/testing_utils.py:2879

        if os.getenv("_INSIDE_SUB_PROCESS", None) == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b93d919d95a6ac7 — Environment-variable access.

repo/src/transformers/testing_utils.py:2882

            test = " ".join(os.environ.get("PYTEST_CURRENT_TEST").split(" ")[:-1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2337c7c9c9ceda31 — Environment-variable access.

repo/src/transformers/testing_utils.py:2884

                env = copy.deepcopy(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c199906d9f94019a — Environment-variable access.

repo/src/transformers/testing_utils.py:3001

    skip_cuda_tests: bool = os.environ.get("SKIP_CUDA_DOCTEST", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3bd2c6821bc62317 — Environment-variable access.

repo/src/transformers/testing_utils.py:3239

    if "TRANSFORMERS_TEST_DEVICE_SPEC" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c42253fc20ecdd7 — Environment-variable access.

repo/src/transformers/testing_utils.py:3240

        device_spec_path = os.environ["TRANSFORMERS_TEST_DEVICE_SPEC"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3db63a6bde2f32d2 — Environment-variable access.

repo/src/transformers/testing_utils.py:3263

        if "TRANSFORMERS_TEST_DEVICE" in os.environ and torch_device != device_name:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f652c9aad379be3 — Environment-variable access.

repo/src/transformers/testing_utils.py:3464

    force_fullgraph = os.environ.get("TORCH_COMPILE_FORCE_FULLGRAPH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b2dec0ad62a8fc06 — Environment-variable access.

repo/src/transformers/testing_utils.py:3487

    full_test_name = os.environ.get("PYTEST_CURRENT_TEST", "").split(" ")[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f07093dea46bedf5 — Filesystem access.

repo/src/transformers/testing_utils.py:3567

    with open(actual_test_file) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #acd4b7c4e18ea8ee — Filesystem access.

repo/src/transformers/testing_utils.py:3573

    with open(caller_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ca7f37d94a5f4c6 — Environment-variable access.

repo/src/transformers/testing_utils.py:3661

    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e9712c46f192d22 — Filesystem access.

repo/src/transformers/testing_utils.py:3663

    with open(p, "a") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b852d1d7e7701a1 — Environment-variable access.

repo/src/transformers/testing_utils.py:3780

        if not os.environ.get("PYTEST_CURRENT_TEST", ""):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #967ae1e7fd4913bd — Environment-variable access.

repo/src/transformers/testing_utils.py:3817

            if os.getenv("CI") == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47fcaaa47b46ba21 — Environment-variable access.

repo/src/transformers/testing_utils.py:3893

    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bde34b443405e5ad — Filesystem access.

repo/src/transformers/testing_utils.py:4247

    with open(file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ccae62db668dbbd1 — Filesystem access.

repo/src/transformers/testing_utils.py:4252

    with open(file, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb105af49c15325d — Filesystem access.

repo/src/transformers/testing_utils.py:4488

            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a029f2862219583c — Filesystem access.

repo/src/transformers/testing_utils.py:4497

            with open(new_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0fc9f93f25bea652 — Filesystem access.

repo/src/transformers/tokenization_python.py:1397

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12e4ff353aaab6ea — Filesystem access.

repo/src/transformers/tokenization_python.py:1406

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56902fbd3da41c46 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1661

                    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7979f22128b38bb2 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1780

            with open(tokenizer_config_file, encoding="utf-8") as tokenizer_config_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4104f2249ed38828 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1799

            with open(chat_template_file, encoding="utf-8") as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #778f7ef77791fa27 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1806

            with open(template_file) as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #984b109823e58d94 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1875

                with open(special_tokens_map_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b640ac6540a465d — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1905

                with open(added_tokens_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5fcdb5c7aabfa661 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1918

                with open(tokenizer_file, encoding="utf-8") as tokenizer_file_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73b8aff779fae172 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:2123

        with open(tokenizer_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a27292ede97fd3dd — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:2176

            with open(added_tokens_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6873c46d9a5eb16e — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3314

            with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e6af0e0b73942e05 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3325

                    with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a1d0e657f7ad3041 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3335

                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40607a116fe8a663 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3608

            with open(resolved_vocab_file, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae7e2b0943eb8dc9 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3634

                with open(resolved_vocab_txt, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #786beaff550d79d5 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3660

            with open(resolved_merges_file, "r", encoding="utf-8") as mf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #35d3cb7d48f56882 — Filesystem access.

repo/src/transformers/tokenization_utils_sentencepiece.py:260

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b0557105325884c — Filesystem access.

repo/src/transformers/tokenization_utils_tokenizers.py:121

            with open(fast_tokenizer_file, encoding="utf-8") as tokenizer_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #051f146fe26adabc — Filesystem access.

repo/src/transformers/tokenization_utils_tokenizers.py:1335

                with open(_config_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2700b012fff00b14 — Environment-variable access.

repo/src/transformers/trainer.py:2465

                model, device_ids=[int(os.getenv("SMDATAPARALLEL_LOCAL_RANK"))]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c46335e928dcb2d6 — Filesystem access.

repo/src/transformers/trainer.py:4021

        with open(model_card_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #42a361a9c7b0be4e — Filesystem access.

repo/src/transformers/trainer.py:4126

                with open(index_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #622ff5295f19d6cc — Filesystem access.

repo/src/transformers/trainer_callback.py:146

        with open(json_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86eae391ae038e5d — Filesystem access.

repo/src/transformers/trainer_callback.py:152

        with open(json_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c55b078b77089116 — Filesystem access.

repo/src/transformers/trainer_jit_checkpoint.py:60

            with open(sentinel_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fcc9844e5760e8ab — Filesystem access.

repo/src/transformers/trainer_pt_utils.py:943

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #58599ed997610094 — Filesystem access.

repo/src/transformers/trainer_pt_utils.py:949

            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1aa0b0ad8a79b708 — Filesystem access.

repo/src/transformers/trainer_pt_utils.py:955

        with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #651c6780a745ab22 — Environment-variable access.

repo/src/transformers/trainer_utils.py:166

        os.environ["CUDA_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7905673b42ae4f27 — Environment-variable access.

repo/src/transformers/trainer_utils.py:167

        os.environ["CUBLAS_WORKSPACE_CONFIG"] = ":16:8"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #608f3404eca8cc9f — Environment-variable access.

repo/src/transformers/trainer_utils.py:169

        os.environ["ASCEND_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5c78cedbb74ef6e — Environment-variable access.

repo/src/transformers/trainer_utils.py:170

        os.environ["HCCL_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e43e1b3773c7ca9 — Environment-variable access.

repo/src/transformers/trainer_utils.py:172

        os.environ["FLASH_ATTENTION_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43bf3173fb9b16fd — Filesystem access.

repo/src/transformers/trainer_utils.py:1094

    with open(load_index, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e35fc5c47552a45 — Environment-variable access.

repo/src/transformers/training_args.py:86

    if os.environ.get("TORCHELASTIC_RUN_ID"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fc56fd065ccc3fa4 — Environment-variable access.

repo/src/transformers/training_args.py:1556

        self.mixed_precision = os.environ.get("ACCELERATE_MIXED_PRECISION", "no")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9305e8fdb1bc1b5a — Environment-variable access.

repo/src/transformers/training_args.py:1576

                os.environ["ACCELERATE_DYNAMO_BACKEND"] = self.torch_compile_backend

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #563f863d71b61a94 — Environment-variable access.

repo/src/transformers/training_args.py:1578

                    os.environ["ACCELERATE_DYNAMO_MODE"] = self.torch_compile_mode

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #03d1ce24386bab97 — Environment-variable access.

repo/src/transformers/training_args.py:1650

        elif strtobool(os.environ.get("ACCELERATE_USE_DEEPSPEED", "false")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7fd0003fb1e2b95e — Environment-variable access.

repo/src/transformers/training_args.py:1810

        if self.use_cpu or strtobool(os.environ.get("ACCELERATE_USE_CPU", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ede9a129f2f32d6a — Environment-variable access.

repo/src/transformers/training_args.py:1834

                os.environ["ACCELERATE_USE_DEEPSPEED"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3880df93c94c39c0 — Environment-variable access.

repo/src/transformers/training_args.py:1837

                del os.environ["ACCELERATE_USE_DEEPSPEED"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c5e6811b2b52e9df — Environment-variable access.

repo/src/transformers/training_args.py:1880

                    "cuda:0" if torch.cuda.is_available() else os.environ.get("ACCELERATE_TORCH_DEVICE", "cpu")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3d23408d627d0b3f — Filesystem access.

repo/src/transformers/training_args.py:2699

            with open(self.fsdp_config, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad3a3c1f8df95f00 — Environment-variable access.

repo/src/transformers/training_args.py:2766

        os.environ["FSDP_CPU_RAM_EFFICIENT_LOADING"] = cpu_ram_efficient_loading

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #6bac943f519a6250 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/transformers/utils/attention_visualizer.py:183

            img = Image.open(io.BytesIO(httpx.get(img, follow_redirects=True).content))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #94de26f9db6d795e — Filesystem access.

repo/src/transformers/utils/generic.py:379

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9018f6a2b8a0253 — Filesystem access.

repo/src/transformers/utils/generic.py:862

        with open(pretrained_model_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bad70235aaff5984 — Filesystem access.

repo/src/transformers/utils/generic.py:868

        with open(os.path.join(pretrained_model_path, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0c017ba1a0e422e1 — Environment-variable access.

repo/src/transformers/utils/hub.py:107

HF_MODULES_CACHE = os.getenv("HF_MODULES_CACHE", os.path.join(constants.HF_HOME, "modules"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06c6f71bca29e17f — Environment-variable access.

repo/src/transformers/utils/hub.py:178

        instance_data = httpx.get(os.environ["ECS_CONTAINER_METADATA_URI"]).json()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0cb4316d240a927b — Environment-variable access.

repo/src/transformers/utils/hub.py:185

    sagemaker_params = json.loads(os.getenv("SM_FRAMEWORK_PARAMS", "{}"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4573000b811a118e — Environment-variable access.

repo/src/transformers/utils/hub.py:187

    training_job_arn = os.getenv("TRAINING_JOB_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11aefcb4ab03d776 — Environment-variable access.

repo/src/transformers/utils/hub.py:191

        "sm_framework": os.getenv("SM_FRAMEWORK_MODULE", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e80fc84db509962c — Environment-variable access.

repo/src/transformers/utils/hub.py:192

        "sm_region": os.getenv("AWS_REGION", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a48883fd58cc161a — Environment-variable access.

repo/src/transformers/utils/hub.py:193

        "sm_number_gpu": os.getenv("SM_NUM_GPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44e0f836dafe46c4 — Environment-variable access.

repo/src/transformers/utils/hub.py:194

        "sm_number_cpu": os.getenv("SM_NUM_CPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba908d100c57b6ac — Environment-variable access.

repo/src/transformers/utils/hub.py:215

    if os.environ.get("TRANSFORMERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d8843fe5d9c3a4de — Filesystem access.

repo/src/transformers/utils/hub.py:879

    with open(index_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1611752d8e333782 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:118

    return os.getenv(env_variable, "false").lower() in ("true", "1", "y", "yes", "on")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13c4a37fe4645669 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:123

    return os.getenv(env_variable, "true").lower() in ("false", "0", "n", "no", "off")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc13533938b86bbb — Environment-variable access.

repo/src/transformers/utils/import_utils.py:130

USE_TORCH_XLA = os.environ.get("USE_TORCH_XLA", "1").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9eb8afd43cfdacd6 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:356

    pytorch_cndev_based_mlu_check_previous_value = os.environ.get("PYTORCH_CNDEV_BASED_MLU_CHECK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1170766bccff5060 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:358

        os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = str(1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff7cc969354a9e70 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:362

            os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = pytorch_cndev_based_mlu_check_previous_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #51f17a2b6639ae48 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:364

            os.environ.pop("PYTORCH_CNDEV_BASED_MLU_CHECK", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #826998a017acf551 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:434

    if os.environ.get("PT_HPU_LAZY_MODE", "1") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a89d39b2b357ac6 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1615

    if os.getenv("TRANSFORMERS_DISABLE_TORCH_CHECK", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d7f091a3957c578 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1664

        if "DATABRICKS_RUNTIME_VERSION" in os.environ and os.environ["DATABRICKS_RUNTIME_VERSION"] < "11.0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0908edfe5bd3a5ad — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1676

    sagemaker_params = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3709c6a3eeacf886 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1690

    smp_options = os.getenv("SM_HP_MP_PARAMETERS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00f85431af0ebee7 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1700

    mpi_options = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #94e5b34a1ceecd56 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1713

    return "SAGEMAKER_JOB_NAME" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f746903f2ff4d27b — Filesystem access.

repo/src/transformers/utils/import_utils.py:2825

        with open(os.path.join(module_path, module_name), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c0d44b6a059fe31 — Environment-variable access.

repo/src/transformers/utils/logging.py:64

    env_level_str = os.getenv("TRANSFORMERS_VERBOSITY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5580dae6369bfbc0 — Filesystem access.

repo/src/transformers/utils/logging.py:94

            sys.stderr = open(os.devnull, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e95d41d7d4914135 — Environment-variable access.

repo/src/transformers/utils/logging.py:108

        if os.getenv("TRANSFORMERS_VERBOSITY", None) == "detail":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3af9f67257e60a8d — Environment-variable access.

repo/src/transformers/utils/logging.py:114

        ci = os.getenv("CI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4fef5ca97b1bb92e — Environment-variable access.

repo/src/transformers/utils/logging.py:322

    no_advisory_warnings = os.getenv("TRANSFORMERS_NO_ADVISORY_WARNINGS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5f6c65ad7e21ede4 — Filesystem access.

repo/src/transformers/utils/network_logging.py:172

        Path(dump_path).write_text(json.dumps(records), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ee9d1aeb2917434 — Filesystem access.

repo/src/transformers/utils/network_logging.py:182

                records = json.loads(Path(record_file).read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #60f7c82021c41f83 — Filesystem access.

repo/src/transformers/utils/network_logging.py:327

        report_path.write_text(json.dumps(self.build_report(), indent=2, sort_keys=True), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #90811aeb11af54cf — Environment-variable access.

repo/src/transformers/utils/network_logging.py:338

    enabled_raw = os.environ.get("NETWORK_DEBUG_REPORT", "").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a0820cccbda5a15 — Environment-variable access.

repo/src/transformers/utils/network_logging.py:344

    output_path = os.environ.get("NETWORK_DEBUG_REPORT_PATH", "").strip() or _DEFAULT_REPORT_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ceb82f55c62344ce — Environment-variable access.

repo/src/transformers/utils/notebook.py:128

        if "VSCODE_PID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d544e3210859278 — Filesystem access.

repo/src/transformers/utils/pytest_helpers.py:39

    data = json.loads(p.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #20421ffe67c4112e — Filesystem access.

repo/src/transformers/utils/quantization_config.py:144

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3fd6f966ea356304 — Filesystem access.

repo/src/transformers/video_processing_utils.py:769

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c407b9280abb4fc9 — Filesystem access.

repo/src/transformers/video_processing_utils.py:789

        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f5ec4bca16177745 — Filesystem access.

repo/utils/add_dates.py:125

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0bb8483f0dcc2151 — Filesystem access.

repo/utils/add_dates.py:186

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1e685ef8119e9b63 — Filesystem access.

repo/utils/add_dates.py:215

        with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d1df1be0cf793c6 — Filesystem access.

repo/utils/add_dates.py:234

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16a0a0c7759fc3b7 — Filesystem access.

repo/utils/add_dates.py:324

            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #849d96e6bc75b604 — Filesystem access.

repo/utils/add_dates.py:355

                with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e439d4cb7c3fbd5 — Filesystem access.

repo/utils/add_dates.py:365

            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d5e7a4887d3924f — Filesystem access.

repo/utils/add_pipeline_model_mapping_to_test.py:260

    with open(moddule_file, "w", encoding="UTF-8", newline="\n") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5cbcc5d230ddbb2e — Filesystem access.

repo/utils/aggregate_failure_reports.py:46

                with open(failure_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #838037fc5f2ef73e — Filesystem access.

repo/utils/aggregate_failure_reports.py:53

    with open(output_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad8a4a25404a2874 — Filesystem access.

repo/utils/check_auto.py:81

        with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a539db29ff8aaf51 — Filesystem access.

repo/utils/check_auto.py:135

            with open(f"src/transformers/models/{module}/{processor_filename}_{module}.py", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12ba5d96bb9f84c0 — Filesystem access.

repo/utils/check_auto.py:282

        old_content = open(AUTO_FILENAME, "r").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c6a13bf0061c04d — Filesystem access.

repo/utils/check_auto.py:300

        with open(temp_filename, "w") as temp_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2121138b9a282cc0 — Filesystem access.

repo/utils/check_auto.py:304

        new_content = open(temp_filename, "r").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9e2566d4d079bcda — Filesystem access.

repo/utils/check_auto.py:323

            with open(AUTO_FILENAME, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #25c8d9dfe80f3af4 — Filesystem access.

repo/utils/check_bad_commit.py:77

    with open("target_script.py", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dde1f560a3ebdd98 — Environment-variable access.

repo/utils/check_bad_commit.py:138

    is_pr_ci = os.environ.get("GITHUB_EVENT_NAME") in ["issue_comment", "pull_request"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5180c54eb6d34f04 — Filesystem access.

repo/utils/check_bad_commit.py:231

    with open("run_git_bisect.sh", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f62ef4c2b43ed36d — Environment-variable access.

repo/utils/check_bad_commit.py:283

        pr_number = os.environ.get("pr_number")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a90c6fadb0ee8c0 — Environment-variable access.

repo/utils/check_bad_commit.py:343

        args.github_token = os.environ.get("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b896b60f73a8bc2 — Environment-variable access.

repo/utils/check_bad_commit.py:345

    run_idx = os.environ.get("run_idx")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a0c0cb25fffe0ce9 — Environment-variable access.

repo/utils/check_bad_commit.py:346

    n_runners = os.environ.get("n_runners")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0c7a2d98cfaa0706 — Filesystem access.

repo/utils/check_bad_commit.py:361

        with open(args.output_file, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5af5d500eb568f4e — Filesystem access.

repo/utils/check_bad_commit.py:364

        with open(args.file, "r", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c051a11c6ce884fc — Filesystem access.

repo/utils/check_bad_commit.py:428

        with open(args.output_file, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #712deb6515d2c023 — Filesystem access.

repo/utils/check_config_attributes.py:383

            with open(path, encoding="utf8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3048183482e7b76e — Filesystem access.

repo/utils/check_copies.py:443

    with open(os.path.join(base_path, f"{module}.py"), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e93bb83ed4b1c92b — Filesystem access.

repo/utils/check_copies.py:665

    with open(filename, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #135ee35c1d40fd94 — Filesystem access.

repo/utils/check_copies.py:837

        with open(filename, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e8f83a4d607f72c5 — Filesystem access.

repo/utils/check_copies.py:887

    with open(os.path.join(REPO_PATH, filename), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #390e74a2fdae2f66 — Filesystem access.

repo/utils/check_doc_toc.py:131

    with open(TOCTREE_PATH, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06a2950c2b77e374 — Filesystem access.

repo/utils/check_doc_toc.py:166

            with open(TOCTREE_PATH, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0ab842c2767790ed — Filesystem access.

repo/utils/check_docstrings.py:415

        with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f5341fd12ee160a9 — Filesystem access.

repo/utils/check_docstrings.py:818

    with open(obj_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b758c786c1de947 — Filesystem access.

repo/utils/check_docstrings.py:830

    with open(obj_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #287c8f4326a5bca0 — Filesystem access.

repo/utils/check_docstrings.py:934

            with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a9b637873740c8e — Filesystem access.

repo/utils/check_docstrings.py:1040

        with open(modular_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b2ab290bf9689c5 — Filesystem access.

repo/utils/check_docstrings.py:1043

        with open(generated_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec937da9e2f9351c — Filesystem access.

repo/utils/check_docstrings.py:1179

        with open(modular_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d469e980e4164a7c — Filesystem access.

repo/utils/check_docstrings.py:1687

    with open(candidate_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8709576b284a862d — Filesystem access.

repo/utils/check_docstrings.py:1872

        with open(candidate_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #490133e20ba0b0ad — Filesystem access.

repo/utils/check_docstrings.py:1958

        with open(candidate_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8de6c21e55a5d721 — Filesystem access.

repo/utils/check_docstrings.py:1995

        with open(candidate_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #25862009e1bb05f9 — Filesystem access.

repo/utils/check_doctest_list.py:70

    with open(doctest_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #621f91ef169acd19 — Filesystem access.

repo/utils/check_doctest_list.py:89

        with open(doctest_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16da136a4d86697a — Filesystem access.

repo/utils/check_dummies.py:111

    with open(os.path.join(PATH_TO_TRANSFORMERS, "__init__.py"), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e95604f58395c1fb — Filesystem access.

repo/utils/check_dummies.py:217

            with open(file_path, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #259556790edf947d — Filesystem access.

repo/utils/check_dummies.py:230

                with open(dummy_file_paths[backend], "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #924cf623f274dc47 — Filesystem access.

repo/utils/check_inits.py:111

    with open(init_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e1301a8c447804e8 — Filesystem access.

repo/utils/check_inits.py:338

    with open(os.path.join(PATH_TO_TRANSFORMERS, "__init__.py"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c88369d4246d0f2 — Filesystem access.

repo/utils/check_modular_conversion.py:45

    with open(file_path, "r", encoding="utf-8") as modeling_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e77c51f83acdba47 — Filesystem access.

repo/utils/check_modular_conversion.py:60

        with open(file_path, "w", encoding="utf-8", newline="\n") as modeling_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1307991930aee076 — Filesystem access.

repo/utils/check_modular_conversion.py:88

        with open(temp_file_name, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d88382dd1a2fd18 — Filesystem access.

repo/utils/check_modular_conversion.py:92

        with open(temp_file_name, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c72bab4075546aa — Filesystem access.

repo/utils/check_pipeline_typing.py:39

    with open(pipeline_file_path, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d5f3adebb2cddb71 — Filesystem access.

repo/utils/check_pipeline_typing.py:78

        with open(pipeline_file_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4de7baf618aca806 — Environment-variable access.

repo/utils/check_repo.py:609

        if os.getenv("TRANSFORMERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9323999abf3e7388 — Filesystem access.

repo/utils/check_repo.py:639

            if (Path(model_dir) / "__init__.py").read_text().strip() == "":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6bb7f21020258c6e — Filesystem access.

repo/utils/check_repo.py:798

    with open(os.path.join(PATH_TO_TESTS, test_file), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #65100ed392f57a08 — Filesystem access.

repo/utils/check_repo.py:1110

    with open(filename, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #204b10cbffa2d46d — Filesystem access.

repo/utils/check_repo.py:1154

        with open(doc_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #295e5e42bcba36c9 — Filesystem access.

repo/utils/check_repo.py:1449

            with open(modeling_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3749ce3cbdcee28e — Filesystem access.

repo/utils/check_self_hosted_runner.py:29

    with open("offline_runners.txt", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52668a5074679e5e — Filesystem access.

repo/utils/checkers.py:123

            tree = ast.parse(py_file.read_text(encoding="utf-8"), filename=str(py_file))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa9f4439d458dbe8 — Filesystem access.

repo/utils/checkers.py:249

            return json.loads(self._path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bf3904b40e6cf380 — Filesystem access.

repo/utils/checkers.py:255

            self._path.write_text(json.dumps(self._data, sort_keys=True, indent=2) + "\n", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #722cc2dd555d5069 — Filesystem access.

repo/utils/checkers.py:269

                h.update(p.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2c9bfa4b4dda35b — Filesystem access.

repo/utils/checkers.py:292

    return hashlib.md5(path.read_bytes()).hexdigest()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1de2687d52c93c00 — Environment-variable access.

repo/utils/checkers.py:394

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d26c8e61dda63a2 — Environment-variable access.

repo/utils/checkers.py:568

    is_ci = os.environ.get("GITHUB_ACTIONS") == "true" or os.environ.get("CIRCLECI") == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5eba555c749df888 — Environment-variable access.

repo/utils/checkers.py:584

    job = os.environ.get("TRANSFORMERS_TEST_OTEL_JOB", "local_checks")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #34914fedb9c5116d — Environment-variable access.

repo/utils/collated_reports.py:116

    if os.getenv("GITHUB_EVENT_NAME") != "schedule":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aeea7307803154f2 — Environment-variable access.

repo/utils/collated_reports.py:117

        report_repo_subfolder = f"{os.getenv('GITHUB_RUN_NUMBER')}-{os.getenv('GITHUB_RUN_ID')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d4e4686a0f8979c — Environment-variable access.

repo/utils/collated_reports.py:121

        token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_run_id=os.getenv("GITHUB_RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #77779d2471307855 — Environment-variable access.

repo/utils/collated_reports.py:134

        token=os.getenv("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9642871b3e34ea17 — Filesystem access.

repo/utils/collated_reports.py:180

        with open(model_dir / "summary_short.txt", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d632fd3642d8280 — Filesystem access.

repo/utils/collated_reports.py:202

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #685d8e90f557b3a0 — Filesystem access.

repo/utils/compare_test_runs.py:36

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d086b30f5c17ada — Filesystem access.

repo/utils/create_dependency_mapping.py:76

    with open(file_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56e8d58ba58ddfff — Environment-variable access.

repo/utils/create_dummy_models.py:62

os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #167f7c8a34461b03 — Filesystem access.

repo/utils/create_dummy_models.py:1657

    with open(os.path.join(report_path, "tiny_model_summary.json")) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #edbe4a6b8cecc262 — Filesystem access.

repo/utils/create_dummy_models.py:1659

    with open("tests/utils/tiny_model_summary.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6932fb940557aa4 — Filesystem access.

repo/utils/create_dummy_models.py:1679

    with open(os.path.join(report_path, "updated_tiny_model_summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5bafd0f58b51bc64 — Filesystem access.

repo/utils/create_dummy_models.py:1767

        with open(os.path.join(report_path, "failed_uploads.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a39cbf07cba3dfb0 — Filesystem access.

repo/utils/create_dummy_models.py:1776

    with open(os.path.join(report_path, "tiny_model_summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db68eb9130520ead — Filesystem access.

repo/utils/create_dummy_models.py:1779

    with open(os.path.join(report_path, "tiny_model_creation_report.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c53bbf1a31841a7 — Filesystem access.

repo/utils/create_dummy_models.py:1785

    with open(os.path.join(report_path, "failed_report.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c2c651f4524bce3 — Filesystem access.

repo/utils/create_dummy_models.py:1791

    with open(os.path.join(report_path, "simple_report.txt"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #adccf261db5ad68f — Filesystem access.

repo/utils/create_dummy_models.py:1795

    with open(os.path.join(report_path, "simple_failed_report.txt"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6fbe7274eccf5df — Filesystem access.

repo/utils/custom_init_isort.py:251

    with open(file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c839a08260042d9e — Filesystem access.

repo/utils/custom_init_isort.py:312

            with open(file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #6283ffe20e5df289 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/utils/deprecate_models.py:31

    release_data = httpx.get(url).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #0ec912e27047a986 — Filesystem access.

repo/utils/deprecate_models.py:61

    with open(model_doc_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ae65872c05b33fe — Filesystem access.

repo/utils/deprecate_models.py:75

    with open(model_doc_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3dac78ff07e4e58c — Filesystem access.

repo/utils/deprecate_models.py:112

    with open(filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #118ef16464e0496d — Filesystem access.

repo/utils/deprecate_models.py:122

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #94446c71217f6e76 — Filesystem access.

repo/utils/deprecate_models.py:132

        with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #54f362a5e581f2e4 — Filesystem access.

repo/utils/deprecate_models.py:141

        with open(file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #59617f011e3911d0 — Filesystem access.

repo/utils/deprecate_models.py:180

    with open(filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b9a54b802fcdcdc — Filesystem access.

repo/utils/deprecate_models.py:188

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #92acda86845316eb — Filesystem access.

repo/utils/deprecate_models.py:205

    with open(filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae2b69834936e950 — Filesystem access.

repo/utils/deprecate_models.py:214

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #058d0bff2069d42f — Filesystem access.

repo/utils/deprecate_models.py:226

    with open(filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a30c5c9f53bdd43 — Filesystem access.

repo/utils/deprecate_models.py:264

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13dde290780312c7 — Filesystem access.

repo/utils/deprecate_models.py:274

    with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4894f1f4e1b87bf3 — Filesystem access.

repo/utils/deprecate_models.py:298

    with open(filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33e6f159f1d8bd34 — Filesystem access.

repo/utils/download_glue_data.py:78

    with open(os.path.join(mrpc_dir, "dev_ids.tsv"), encoding="utf8") as ids_fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32fe92a494ee853b — Filesystem access.

repo/utils/download_glue_data.py:83

        open(mrpc_train_file, encoding="utf8") as data_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b089a3e623b5097 — Filesystem access.

repo/utils/download_glue_data.py:84

        open(os.path.join(mrpc_dir, "train.tsv"), "w", encoding="utf8") as train_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2676626115a9e594 — Filesystem access.

repo/utils/download_glue_data.py:85

        open(os.path.join(mrpc_dir, "dev.tsv"), "w", encoding="utf8") as dev_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4bfc2cdac5c5dc40 — Filesystem access.

repo/utils/download_glue_data.py:98

        open(mrpc_test_file, encoding="utf8") as data_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d766005e8c57c67 — Filesystem access.

repo/utils/download_glue_data.py:99

        open(os.path.join(mrpc_dir, "test.tsv"), "w", encoding="utf8") as test_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1173ba0221f1007d — Environment-variable access.

repo/utils/extract_pr_number_from_circleci.py:22

    pr = os.environ.get("CIRCLE_PULL_REQUEST", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc708761f3a24277 — Environment-variable access.

repo/utils/extract_pr_number_from_circleci.py:26

        pr = os.environ.get("CIRCLE_BRANCH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00524511f82f5405 — Filesystem access.

repo/utils/extract_warnings.py:47

                with open(file_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2777d3694306878 — Filesystem access.

repo/utils/extract_warnings.py:118

        with open(os.path.join(args.output_dir, "artifacts.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b95725f2a0af916 — Filesystem access.

repo/utils/extract_warnings.py:133

    with open(os.path.join(args.output_dir, "selected_warnings.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47b3b814f9852c93 — Environment-variable access.

repo/utils/fetch_hub_objects_for_ci.py:27

_staging_mode = os.environ.pop("HUGGINGFACE_CO_STAGING", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #853d8829d5409642 — Environment-variable access.

repo/utils/fetch_hub_objects_for_ci.py:40

    os.environ["HUGGINGFACE_CO_STAGING"] = _staging_mode

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e8efb9e2625c66cc — Filesystem access.

repo/utils/fetch_hub_objects_for_ci.py:142

    with open(filepath, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b396680e1f99b9cf — Filesystem access.

repo/utils/fetch_hub_objects_for_ci.py:197

                with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab8a43139cee4ff6 — Filesystem access.

repo/utils/format_extras_slack_message.py:42

    with open(failures_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f7ed2408e0bbac6 — Environment-variable access.

repo/utils/format_extras_slack_message.py:73

        output_file = os.environ.get("GITHUB_ENV")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3d612a5ddd33b002 — Filesystem access.

repo/utils/format_extras_slack_message.py:79

    with open(output_file, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d2645ff61efa28a1 — Filesystem access.

repo/utils/get_ci_error_statistics.py:113

    with open(file_path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c380e06ce9b4397 — Filesystem access.

repo/utils/get_ci_error_statistics.py:275

    with open(os.path.join(args.output_dir, "job_links.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f6467dd63de6d78 — Filesystem access.

repo/utils/get_ci_error_statistics.py:279

    with open(os.path.join(args.output_dir, "artifacts.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #82de1f55190143bb — Filesystem access.

repo/utils/get_ci_error_statistics.py:298

    with open(os.path.join(args.output_dir, "errors.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #334f1ab4aafbed3a — Filesystem access.

repo/utils/get_ci_error_statistics.py:307

    with open(os.path.join(args.output_dir, "reduced_by_error.txt"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1fc650afe9568257 — Filesystem access.

repo/utils/get_ci_error_statistics.py:309

    with open(os.path.join(args.output_dir, "reduced_by_model.txt"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #578eb9d415d5a4c9 — Filesystem access.

repo/utils/get_pr_run_slow_jobs.py:15

    with open("pr_files.txt") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2294594782c6529f — Filesystem access.

repo/utils/get_pr_run_slow_jobs.py:98

        with open(filename) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b2c57f6d275bbbd — Environment-variable access.

repo/utils/get_previous_daily_ci.py:23

        workflow_run_id = os.environ["GITHUB_RUN_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3aa6abcaad78a701 — Filesystem access.

repo/utils/get_previous_daily_ci.py:155

                    with open(file_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #acf5ea39bf41b610 — Environment-variable access.

repo/utils/get_test_reports.py:69

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6b080ed992d9846 — Environment-variable access.

repo/utils/get_test_reports.py:219

        os.environ["RUN_SLOW"] = "yes"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac97a0de434885fe — Environment-variable access.

repo/utils/get_test_reports.py:240

        os.environ["PATCH_TESTING_METHODS_TO_COLLECT_OUTPUTS"] = "yes"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #017e40826ebb2a21 — Environment-variable access.

repo/utils/get_test_reports.py:242

        os.environ["_PATCHED_TESTING_METHODS_OUTPUT_DIR"] = str(reports_dir)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e817891dbb1cdcf8 — Filesystem access.

repo/utils/models_to_deprecate.py:192

        with open("models_info.json", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #38183e7e709c9319 — Filesystem access.

repo/utils/models_to_deprecate.py:277

        with open("models_info.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50d728d8abf42b11 — Filesystem access.

repo/utils/modular_model_converter.py:67

    with open(file_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #818881b93c6aa24e — Filesystem access.

repo/utils/modular_model_converter.py:1996

        with open(modular_file, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4fa0c1d4d4c89a5d — Filesystem access.

repo/utils/modular_model_converter.py:2046

        with open(new_file_name, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b7d6d55633fe2f7f — Filesystem access.

repo/utils/modular_model_converter.py:2053

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f4d275b6f9bd1c9 — Filesystem access.

repo/utils/modular_model_converter.py:2073

            with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85d2d6e34c052631 — Environment-variable access.

repo/utils/modular_model_detector.py:135

os.environ["HF_HUB_DISABLE_PROGRESS_BARS"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ece63526b006a86 — Environment-variable access.

repo/utils/modular_model_detector.py:136

os.environ["TRANSFORMERS_VERBOSITY"] = "error"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a6ff94b02e7da881 — Filesystem access.

repo/utils/modular_model_detector.py:329

        source = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b2af40e6475119b — Filesystem access.

repo/utils/modular_model_detector.py:447

        with open(INDEX_MAP_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #246959267b933d6d — Filesystem access.

repo/utils/modular_model_detector.py:449

        with open(TOKENS_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad38d51e3f4ed70b — Filesystem access.

repo/utils/modular_model_detector.py:540

        with open(self._resolve_index_path(INDEX_MAP_PATH), "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b92e755c47187478 — Filesystem access.

repo/utils/modular_model_detector.py:543

        with open(self._resolve_index_path(TOKENS_PATH), "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a099aa284beb0a9 — Filesystem access.

repo/utils/modular_model_detector.py:605

            text = md_path.read_text(encoding="utf-8", errors="ignore")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #07c0888a4bf73209 — Filesystem access.

repo/utils/modular_model_detector.py:663

        source = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5461566bdab5e01b — Environment-variable access.

repo/utils/notification_service.py:236

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #92a0ed25d376eb7a — Environment-variable access.

repo/utils/notification_service.py:256

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #94b334fef396e1b5 — Environment-variable access.

repo/utils/notification_service.py:265

        job_link = f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2e03da6dcf7545c3 — Filesystem access.

repo/utils/notification_service.py:487

        with open(file_path, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0100f80c89bc98f — Filesystem access.

repo/utils/notification_service.py:497

        with open(file_path, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c38dcc4f5d88b09 — Filesystem access.

repo/utils/notification_service.py:518

                    with open(file_path, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #270fd14547174c60 — Environment-variable access.

repo/utils/notification_service.py:593

            include_all = os.environ.get("GITHUB_EVENT_NAME") in ["issue_comment", "pull_request"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5fd3a0e587d84525 — Filesystem access.

repo/utils/notification_service.py:603

                with open(file_path, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d81315fa28e8219f — Environment-variable access.

repo/utils/notification_service.py:613

                    token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a880b81004a887cb — Environment-variable access.

repo/utils/notification_service.py:683

            result = os.environ.get("OFFLINE_RUNNERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e7e9dcb1e5ef220 — Environment-variable access.

repo/utils/notification_service.py:716

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a93c475983dfb3e — Filesystem access.

repo/utils/notification_service.py:943

                with open(os.path.join(artifact_path, file)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #153fd784fd01763f — Environment-variable access.

repo/utils/notification_service.py:1035

    client = WebClient(token=os.environ["CI_SLACK_BOT_TOKEN"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49b1619f951290e0 — Environment-variable access.

repo/utils/notification_service.py:1037

    SLACK_REPORT_CHANNEL_ID = os.environ["SLACK_REPORT_CHANNEL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #95246f17e36ce924 — Environment-variable access.

repo/utils/notification_service.py:1041

    setup_status = os.environ.get("SETUP_STATUS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9a067d68b979bd19 — Environment-variable access.

repo/utils/notification_service.py:1056

    ci_event = os.environ["CI_EVENT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #685ebb907104e2f1 — Environment-variable access.

repo/utils/notification_service.py:1062

    ci_title = os.environ.get("CI_TITLE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #645b318d130fda57 — Environment-variable access.

repo/utils/notification_service.py:1063

    ci_sha = os.environ.get("CI_SHA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0ddb2e75ebb8a374 — Environment-variable access.

repo/utils/notification_service.py:1079

        github_token = os.environ.get("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #709ed195aa03bdba — Environment-variable access.

repo/utils/notification_service.py:1151

        workflow_run_id=os.environ["GITHUB_RUN_ID"], token=os.environ["ACCESS_REPO_INFO_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43c263728fb0eb3a — Environment-variable access.

repo/utils/notification_service.py:1176

    job_name = os.getenv("CI_TEST_JOB")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #737204964bfbeca5 — Environment-variable access.

repo/utils/notification_service.py:1313

    report_repo_id = os.getenv("REPORT_REPO_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #785b543463ce35ab — Environment-variable access.

repo/utils/notification_service.py:1317

    if os.getenv("GITHUB_EVENT_NAME") != "schedule":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ffe61a6b7171d317 — Environment-variable access.

repo/utils/notification_service.py:1318

        report_repo_subfolder = f"{os.getenv('GITHUB_RUN_NUMBER')}-{os.getenv('GITHUB_RUN_ID')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b64d1c87312f3df0 — Environment-variable access.

repo/utils/notification_service.py:1322

        token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_run_id=os.getenv("GITHUB_RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e3dd9a98aae94aa — Filesystem access.

repo/utils/notification_service.py:1403

            with open(os.path.join(directory, "selected_warnings.json")) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #702af36f95ea075c — Environment-variable access.

repo/utils/notification_service.py:1417

    is_nvidia_daily_ci_workflow = os.environ.get("GITHUB_WORKFLOW_REF").startswith(nvidia_daily_ci_workflow)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bbe50b66d0b79672 — Environment-variable access.

repo/utils/notification_service.py:1418

    is_amd_daily_ci_workflow = os.environ.get("GITHUB_WORKFLOW_REF").startswith(amd_daily_ci_workflows)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #45c95eacbb3ad143 — Environment-variable access.

repo/utils/notification_service.py:1420

    is_scheduled_ci_run = os.environ.get("GITHUB_EVENT_NAME") == "schedule"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a833950b0eab86d0 — Environment-variable access.

repo/utils/notification_service.py:1423

    if os.environ.get("GITHUB_EVENT_NAME") == "workflow_run":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #67c866a6a3bd388f — Environment-variable access.

repo/utils/notification_service.py:1425

        event_payload_path = os.environ.get("GITHUB_EVENT_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #688fdd1a6c3ea976 — Filesystem access.

repo/utils/notification_service.py:1427

        with open(event_payload_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c40edd711f4e46a — Filesystem access.

repo/utils/notification_service.py:1442

        with open(f"ci_results_{job_name}/{test_to_result_name[test_name]}_results.json", "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da55767990677959 — Environment-variable access.

repo/utils/notification_service.py:1450

            token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f54969284ab8d87 — Filesystem access.

repo/utils/notification_service.py:1454

        with open(
            f"ci_results_{job_name}/{test_to_result_name[test_name]}_results_extra.json", "w", encoding="UTF-8"
        ) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dae1e9676b271716 — Environment-variable access.

repo/utils/notification_service.py:1464

            token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fbfc54d232a2f13d — Filesystem access.

repo/utils/notification_service.py:1496

    with open(f"ci_results_{job_name}/job_links.json", "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c21a977a2458b9e — Environment-variable access.

repo/utils/notification_service.py:1504

        token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #58921c5749c1f56f — Environment-variable access.

repo/utils/notification_service.py:1512

            token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_id=workflow_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a923e0e8b2c8a28f — Environment-variable access.

repo/utils/notification_service.py:1520

                token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_id=other_workflow_id, commit_sha=ci_sha

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #813d083eba7cba14 — Environment-variable access.

repo/utils/notification_service.py:1524

        prev_workflow_run_id = os.environ["PREV_WORKFLOW_RUN_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08084c46afe810d4 — Environment-variable access.

repo/utils/notification_service.py:1525

        other_workflow_run_id = os.environ["OTHER_WORKFLOW_RUN_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6c6ce9bc6cc344f — Environment-variable access.

repo/utils/notification_service.py:1542

                token=os.environ["ACCESS_REPO_INFO_TOKEN"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aceb7bb4d5dd965b — Environment-variable access.

repo/utils/notification_service.py:1558

                token=os.environ["ACCESS_REPO_INFO_TOKEN"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fbb537860556c394 — Filesystem access.

repo/utils/notification_service.py:1575

            with open(f"ci_results_{job_name}/test_results_diff.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #889e5355d9312b45 — Environment-variable access.

repo/utils/notification_service.py:1584

                token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e156981827219bf9 — Environment-variable access.

repo/utils/notification_service_doc_tests.py:24

client = WebClient(token=os.environ["CI_SLACK_BOT_TOKEN"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10b03a70f1b16842 — Environment-variable access.

repo/utils/notification_service_doc_tests.py:107

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ffd35ed6488e875 — Environment-variable access.

repo/utils/notification_service_doc_tests.py:126

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5bc85f05f26f7601 — Environment-variable access.

repo/utils/notification_service_doc_tests.py:195

                    "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30f26ab058f515dc — Filesystem access.

repo/utils/notification_service_doc_tests.py:283

                with open(os.path.join(name, file), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #076eefd3c6ee8688 — Environment-variable access.

repo/utils/notification_service_doc_tests.py:317

    SLACK_REPORT_CHANNEL_ID = os.environ["SLACK_REPORT_CHANNEL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6f0e373365e3519d — Environment-variable access.

repo/utils/notification_service_doc_tests.py:320

        workflow_run_id=os.environ["GITHUB_RUN_ID"], token=os.environ["ACCESS_REPO_INFO_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dc72f5c6c29deaf9 — Filesystem access.

repo/utils/notification_service_doc_tests.py:379

    with open("doc_test_results/doc_test_results.json", "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #411c691858e86ad4 — Environment-variable access.

repo/utils/process_bad_commit_report.py:27

    job_name = os.environ.get("JOB_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #159281441473e470 — Environment-variable access.

repo/utils/process_bad_commit_report.py:32

    if os.getenv("GITHUB_EVENT_NAME") != "schedule":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86f38be6316175b2 — Environment-variable access.

repo/utils/process_bad_commit_report.py:33

        report_repo_subfolder = f"{os.getenv('GITHUB_RUN_NUMBER')}-{os.getenv('GITHUB_RUN_ID')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #26a7047dddef2f70 — Environment-variable access.

repo/utils/process_bad_commit_report.py:37

        token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_run_id=os.getenv("GITHUB_RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #34bc30123414cbe5 — Environment-variable access.

repo/utils/process_bad_commit_report.py:46

    report_repo_id = os.getenv("REPORT_REPO_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a4bf06c6e2f3527 — Filesystem access.

repo/utils/process_bad_commit_report.py:48

    with open("new_failures_with_bad_commit.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2e7b6df160b487b — Filesystem access.

repo/utils/process_bad_commit_report.py:51

    with open(f"ci_results_{job_name}/job_links.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #808aaacc9e75d974 — Filesystem access.

repo/utils/process_bad_commit_report.py:64

    with open("new_failures_with_bad_commit.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #51a9e8908245f428 — Environment-variable access.

repo/utils/process_bad_commit_report.py:72

        token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a415db03684082c — Filesystem access.

repo/utils/process_bad_commit_report.py:76

    with open("new_failures_with_bad_commit_url.txt", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b519b1c3a4c590a — Filesystem access.

repo/utils/process_bad_commit_report.py:132

    with open("new_failures_with_bad_commit_grouped_by_authors.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76e8688fad3591ca — Environment-variable access.

repo/utils/process_bad_commit_report.py:139

        token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9d5147e720bff0b3 — Environment-variable access.

repo/utils/process_circleci_workflow_test_reports.py:30

        headers={"Circle-Token": os.environ.get("CIRCLE_TOKEN", "")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f3d9d03f663cee6 — Environment-variable access.

repo/utils/process_circleci_workflow_test_reports.py:41

            r = requests.get(url, headers={"Circle-Token": os.environ.get("CIRCLE_TOKEN", "")})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b1fa037bc82c4119 — Environment-variable access.

repo/utils/process_circleci_workflow_test_reports.py:52

                    r = requests.get(url, headers={"Circle-Token": os.environ.get("CIRCLE_TOKEN", "")})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #095c704fa60f4891 — Environment-variable access.

repo/utils/process_circleci_workflow_test_reports.py:55

                    r = requests.get(url, headers={"Circle-Token": os.environ.get("CIRCLE_TOKEN", "")})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df04bbfd81408f65 — Filesystem access.

repo/utils/process_circleci_workflow_test_reports.py:69

            with open(f"outputs/{job['name']}/test_summary.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6fb1215d7edf7c3f — Filesystem access.

repo/utils/process_circleci_workflow_test_reports.py:112

    with open("outputs/test_summary.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d00cc719d8fbdb22 — Filesystem access.

repo/utils/process_circleci_workflow_test_reports.py:145

    with open("outputs/failure_summary.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d32a281c38b830aa — Filesystem access.

repo/utils/process_test_artifacts.py:32

        with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11a221cb245c97a6 — Filesystem access.

repo/utils/process_test_artifacts.py:48

    with open(input_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e7ef3ccc76ef24b8 — Filesystem access.

repo/utils/process_test_artifacts.py:67

    with open(output_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6eebefebabd9979 — Filesystem access.

repo/utils/release.py:89

    with open(fname, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #debfc7a4574b2e0f — Filesystem access.

repo/utils/release.py:94

    with open(fname, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c299819e7e931820 — Filesystem access.

repo/utils/release.py:112

                if UV_SCRIPT_MARKER in Path(folder, fname).read_text():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33381129230ac558 — Filesystem access.

repo/utils/release.py:157

    with open(REPLACE_FILES["init"], "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1afe8b43cbc19ea8 — Filesystem access.

repo/utils/scan_skipped_tests.py:38

        content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e5eb793b685ee6d — Filesystem access.

repo/utils/scan_skipped_tests.py:83

        file_content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b6df2a8e0ccdc82 — Filesystem access.

repo/utils/scan_skipped_tests.py:90

    output_path.write_text(json.dumps(obj, indent=2), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4a6fb0b8d0a64e4 — Environment-variable access.

repo/utils/set_cuda_devices_for_ci.py:21

    elif "CUDA_VISIBLE_DEVICES" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7229f75e1c4e9b7a — Environment-variable access.

repo/utils/set_cuda_devices_for_ci.py:22

        cuda_visible_devices = os.environ.get("CUDA_VISIBLE_DEVICES")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f810f63a9cf1a2e — Filesystem access.

repo/utils/sort_auto_mappings.py:67

    with open(fname, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d9b2c4bf2de4b0e — Filesystem access.

repo/utils/sort_auto_mappings.py:101

        with open(fname, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a91e6abbddc6f42 — Filesystem access.

repo/utils/tests_fetcher.py:208

        with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bacf49c2f9e102cb — Filesystem access.

repo/utils/tests_fetcher.py:211

    with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e65c7180a5b4bb68 — Filesystem access.

repo/utils/tests_fetcher.py:234

        with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6ca05c5fb486675 — Filesystem access.

repo/utils/tests_fetcher.py:237

    with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13265fc9c0609c21 — Filesystem access.

repo/utils/tests_fetcher.py:279

            with open(folder / "tests/utils/tiny_model_summary.json", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a45da9191bdbc68e — Filesystem access.

repo/utils/tests_fetcher.py:282

        with open(folder / "tests/utils/tiny_model_summary.json", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4628b151a23e7184 — Filesystem access.

repo/utils/tests_fetcher.py:458

    with open("utils/not_doctested.txt") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d096e9c6499ab0a6 — Filesystem access.

repo/utils/tests_fetcher.py:482

            with open(folder / "utils/not_doctested.txt", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78e65ec3e9986a6d — Filesystem access.

repo/utils/tests_fetcher.py:484

        with open(folder / "utils/not_doctested.txt", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b4c5ef21f8442b6 — Filesystem access.

repo/utils/tests_fetcher.py:530

    with open("utils/slow_documentation_tests.txt") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e040bb19f6d42c2e — Filesystem access.

repo/utils/tests_fetcher.py:582

    with open(PATH_TO_REPO / module_fname, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #610e99fdf06d861b — Filesystem access.

repo/utils/tests_fetcher.py:824

        with open(test_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #851669d87cd70e71 — Filesystem access.

repo/utils/tests_fetcher.py:1032

        with open(doctest_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d3a3fdf456924cb — Filesystem access.

repo/utils/tests_fetcher.py:1047

    with open(output_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4cb905ae33d14353 — Filesystem access.

repo/utils/tests_fetcher.py:1059

    with open(output_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d3b99502f1d38f7 — Filesystem access.

repo/utils/tests_fetcher.py:1123

        with open(file_name, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5d57a8b459e472d4 — Filesystem access.

repo/utils/update_metadata.py:285

    with open(hub_frameworks_json) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #309f46d34ecf6004 — Filesystem access.

repo/utils/update_metadata.py:294

    with open(hub_pipeline_tags_json) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3dc9bbe6d945eefa — Filesystem access.

repo/utils/update_metadata.py:301

        with open(os.path.join(tmp_dir, "frameworks.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d44af00b403272c — Filesystem access.

repo/utils/update_metadata.py:303

        with open(os.path.join(tmp_dir, "pipeline_tags.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e6ea34f9951787b6 — Environment-variable access.

repo/utils/update_pr_ci_dashboard_recap.py:331

    token = os.environ["GITHUB_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c28a2bd599ef8d19 — Environment-variable access.

repo/utils/update_pr_ci_dashboard_recap.py:332

    repo = os.environ["GITHUB_REPOSITORY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5505ceb3df9a6199 — Environment-variable access.

repo/utils/update_pr_ci_dashboard_recap.py:333

    event_path = os.environ["GITHUB_EVENT_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ae4f16dfa7148f1 — Filesystem access.

repo/utils/update_pr_ci_dashboard_recap.py:335

    with open(event_path, encoding="utf-8") as event_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3b458262b6aa6d9 — Filesystem access.

repo/utils/update_tiny_models.py:60

    with open("tests/utils/tiny_model_summary.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5b907db5022b7fc — Filesystem access.

repo/utils/update_tiny_models.py:143

        with open(os.path.join(output_path, "hub_tiny_model_summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c200ff579fa98c68 — Environment-variable access.

repo/utils/update_tiny_models.py:171

        token=os.environ.get("TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Close Open Privacy Scan

verified_user Application data leak confirmed

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Confirmed data exfiltration in application code

</> First-Party Code

first-party (python)