Close Open Privacy Scan

link https://github.com/microsoft/DeepSpeed
bolt Snapshot: commit 4c275f9
science engine v1.21
schedule 2026-07-19T20:06:43.112701+00:00
update Scan engine updated since this result

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

App Privacy Score

97 /100
Low privacy risk

Low risk · 305 finding(s)

Dependency score: 100 (Low risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 0 medium 305 low
First-party packages: 1
Dependency packages: 0
Ecosystem: python

swap_horiz External domains

arxiv.orgazure.github.iodeepspeed.aideepspeed.readthedocs.iodiscuss.pytorch.orgdocs.nvidia.comdocs.wandb.aidoi.orgdownload.pytorch.orggithub.comhuggingface.cokellerjordan.github.iokexue.fmnedbatchelder.comopenreview.netpytorch.orgstackoverflow.comtridao.mewww.apache.orgwww.comet.comwww.deepspeed.aiwww8.cs.umu.se

</> First-Party Code

first-party (python)

python first-party
expand_more 305 low-confidence finding(s)
low env_fs production #05a6ef588d302d0d — Environment-variable access.
repo/accelerator/cpu_accelerator.py:65 
        return os.environ.get('LOCAL_RANK', 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99a599f91baf0c87 — Environment-variable access.
repo/accelerator/cpu_accelerator.py:71 
        device_count = int(os.environ.get('LOCAL_SIZE', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f88a2cfb649dbb1e — Environment-variable access.
repo/accelerator/cuda_accelerator.py:187 
        if "CUDA_VISIBLE_DEVICES" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df3b5c608df526c1 — Environment-variable access.
repo/accelerator/cuda_accelerator.py:188 
            ids = list(map(int, os.environ.get("CUDA_VISIBLE_DEVICES", "").split(",")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #faef0a151c52bf0a — Environment-variable access.
repo/accelerator/cuda_accelerator.py:214 
        allow_deprecated_fp16 = os.environ.get('DS_ALLOW_DEPRECATED_FP16', '0') == '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68c1f020a5f96798 — Environment-variable access.
repo/accelerator/hpu_accelerator.py:37 
            if key not in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #857f2a29dcc666f6 — Environment-variable access.
repo/accelerator/hpu_accelerator.py:38 
                os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33a8145f56f399da — Environment-variable access.
repo/accelerator/real_accelerator.py:59 
    if "DS_ACCELERATOR" in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0c7e9b9b0b3c32f — Environment-variable access.
repo/accelerator/real_accelerator.py:60 
        accelerator_name = os.environ["DS_ACCELERATOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72e182fe6f7936d4 — Environment-variable access.
repo/bin/ds_bench:11 
if not all(map(lambda v: v in os.environ, required_env)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #197ef52eabadc90f — Filesystem access.
repo/bin/ds_elastic:14 
    ds_config = json.load(open(args.config, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed0e0b781fde575c — Filesystem access.
repo/ci/test_tests_fetcher.py:91 
        p.write_text(content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3472f541c3430a96 — Filesystem access.
repo/ci/tests_fetcher.py:351 
            tree = ast.parse(path.read_text(encoding="utf-8"), filename=str(path))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a478b64abc01ee5b — Environment-variable access.
repo/ci/tests_fetcher.py:622 
    gh_out = os.environ.get("GITHUB_OUTPUT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7ab35ffe018aeca — Filesystem access.
repo/ci/tests_fetcher.py:625 
    with open(gh_out, "a", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f622aee5c684053b — Environment-variable access.
repo/ci/tests_fetcher.py:633 
    path = os.environ.get("GITHUB_STEP_SUMMARY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7b8be85ca0c1d3b — Filesystem access.
repo/ci/tests_fetcher.py:661 
        with open(path, "a", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63bad5ec9677ddee — Filesystem access.
repo/ci/tests_fetcher.py:725 
    out_path.write_text("\n".join(targets) + ("\n" if targets else ""), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5de0ac2d2748358 — Environment-variable access.
repo/ci/torch_latest.py:56 
    selected_preset = os.environ.get("MODAL_TORCH_PRESET") or DEFAULT_MODAL_TORCH_PRESET

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd317b432b471765 — Environment-variable access.
repo/ci/torch_latest.py:70 
    transformers_source = os.environ.get("MODAL_TRANSFORMERS_SOURCE") or DEFAULT_MODAL_TRANSFORMERS_SOURCE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6797b85b180257f3 — Environment-variable access.
repo/ci/torch_latest.py:77 
    transformers_ref = os.environ.get("MODAL_TRANSFORMERS_REF") or ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #310d961cd0ebac32 — Environment-variable access.
repo/ci/torch_latest.py:139 
    env_path = os.environ.get("DS_TEST_LIST_FILE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13950f80aa4b6635 — Filesystem access.
repo/ci/torch_latest.py:144 
        targets = [line.strip() for line in list_file.read_text().splitlines() if line.strip()]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9bcafe5c4024e443 — Environment-variable access.
repo/ci/torch_latest.py:206 
    selected_tests = os.environ.get("DS_SELECTED_TESTS", DEFAULT_TEST_TARGET).split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5de5bf0d7f9f1002 — Filesystem access.
repo/csrc/aio/py_test/aio_bench_perf_sweep.py:107 
    with open(sweep_config_json) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0360213c854e047e — Filesystem access.
repo/csrc/aio/py_test/ds_aio_job.py:34 
            self.output_fd = open(self.output_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0aef67a40be27b2 — Filesystem access.
repo/csrc/aio/py_test/parse_aio_stats.py:90 
    with open(file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50f7d37ea442f5bd — Environment-variable access.
repo/deepspeed/__init__.py:14 
os.environ.setdefault("PYTORCH_NVML_BASED_CUDA_CHECK", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ad73259fc41a9eb — Filesystem access.
repo/deepspeed/__init__.py:386 
        with open(config, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5d0e6dc38acb900 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:136 
            with open(os.path.join(self.results_dir, 'summary.txt'), 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27665b4b71393d0e — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:152 
            with open(os.path.join(self.results_dir, 'summary.txt'), 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6543e2a5196e0c8 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:184 
                return json.load(open(user_config_file, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #09cf1858cdb85f1c — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:332 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9eb3dc78b827ba15 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:337 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d3fbbd68bf9f700 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:342 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4500334bd6263113 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:347 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9de4ce6c9ca4b6c0 — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:408 
            self.mlflow_parent_id = os.environ['MLFLOW_RUN_ID']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9afe6b2ffc54d56f — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:689 
        with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a9446294221a217 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:704 
            with open(model_info_path, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8bd0706974478e4 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:768 
            with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b200f947492601f — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:782 
                    with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d69504deee911fd — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:789 
                            os.environ.pop('MLFLOW_RUN_ID')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33ddf642b21140c1 — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:794 
                            os.environ['MLFLOW_RUN_ID'] = self.mlflow_parent_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34e0cdeb591ac97c — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:828 
                with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67a7232516f1f9fa — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:832 
                        os.environ.pop('MLFLOW_RUN_ID')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b87959e564868b7 — Environment-variable access.
repo/deepspeed/autotuning/autotuner.py:837 
                        os.environ['MLFLOW_RUN_ID'] = self.mlflow_parent_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20bb5c3b5b01af98 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1065 
        with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d19fced680cb457 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1083 
            with open(os.path.join(exp_dir, "cmd.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c31b7ed6cc0beb9 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1086 
            ds_config = hjson.load(open(os.path.join(exp_dir, "ds_config.json"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a1622211765efef — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1090 
            json.dump(ds_config, open(ds_config_path, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc76d44d5e438c16 — Filesystem access.
repo/deepspeed/autotuning/autotuner.py:1093 
            with open(cmd_path, "w") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97f5ea1ec5cdfffc — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:64 
                with open(exp_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0aefb87eaebf32cc — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:207 
            with open(path, 'a') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ba81dfc32c1b50d — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:232 
                with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18f44b3105ce394b — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:291 
    if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a63e9cfa41ff3e9 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:292 
        infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50f01b9813379517 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:293 
    elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35a588cd517ada8a — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:294 
        infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f9918013008257bc — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:303 
    if "USER" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee6e123078d72a32 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:304 
        user = os.environ["USER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73f1a40302ce9406 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:341 
    with open(exp["ds_config_path"], "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #feb59507f05ed67a — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:348 
    with open(os.path.join(exp_dir, "exp.json"), "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee7a42eaf21e4586 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:374 
    with open(os.path.join(exp_dir, "cmd.txt"), "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c15d34d91de17275 — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:384 
    with open(os.path.join(exp_dir, "stdout.log"), "wb") as out, open(os.path.join(exp_dir, "stderr.log"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c576e11716fc8a4f — Filesystem access.
repo/deepspeed/autotuning/scheduler.py:384 
    with open(os.path.join(exp_dir, "stdout.log"), "wb") as out, open(os.path.join(exp_dir, "stderr.log"),
                                                                      "wb") as err:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33314ce338db96c6 — Environment-variable access.
repo/deepspeed/autotuning/scheduler.py:402 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3492e0fba11f996a — Filesystem access.
repo/deepspeed/autotuning/tuner/model_based_tuner.py:136 
            with open(p, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6fae085eef40a5f — Filesystem access.
repo/deepspeed/autotuning/utils.py:20 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20b7c13a65b1b4e2 — Filesystem access.
repo/deepspeed/autotuning/utils.py:32 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3c79e0275ca5b81 — Filesystem access.
repo/deepspeed/autotuning/utils.py:157 
    with open(hostfile_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41b0916e8007633a — Filesystem access.
repo/deepspeed/autotuning/utils.py:409 
        with open(exp_path, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6129f689b32102ec — Filesystem access.
repo/deepspeed/checkpoint/ds_to_universal.py:904 
    with open(latest_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ce8b08d607f6264 — Environment-variable access.
repo/deepspeed/comm/comm.py:155 
    rank = int(os.getenv('RANK', '-1'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #347802034d574dc4 — Environment-variable access.
repo/deepspeed/comm/comm.py:156 
    size = int(os.getenv('WORLD_SIZE', '-1'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a8cd202ce37073b — Environment-variable access.
repo/deepspeed/comm/comm.py:838 
        if auto_mpi_discovery and not all(map(lambda v: v in os.environ, required_env)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a6f32f0a15c5bfe — Environment-variable access.
repo/deepspeed/comm/comm.py:849 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31c4d5d349a1852f — Environment-variable access.
repo/deepspeed/comm/comm.py:855 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b547d2790d923cc9 — Environment-variable access.
repo/deepspeed/comm/comm.py:888 
    os.environ['RANK'] = str(rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #acdb79fe663e461a — Environment-variable access.
repo/deepspeed/comm/comm.py:889 
    os.environ['WORLD_SIZE'] = str(world_size)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b185039de36b3f2 — Environment-variable access.
repo/deepspeed/comm/comm.py:890 
    os.environ['LOCAL_RANK'] = str(local_rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81ca757281517ffd — Environment-variable access.
repo/deepspeed/comm/comm.py:891 
    os.environ['MASTER_ADDR'] = master_addr

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ea80cd8469090a3 — Environment-variable access.
repo/deepspeed/comm/comm.py:892 
    os.environ['MASTER_PORT'] = str(distributed_port)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #164a25013e2b0dbd — Environment-variable access.
repo/deepspeed/comm/comm.py:897 
            format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #889d304a3a952302 — Environment-variable access.
repo/deepspeed/comm/comm.py:898 
                   os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9bea04132cf80af — Environment-variable access.
repo/deepspeed/comm/comm.py:908 
    return 'AZUREML_EXPERIMENT_ID' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58bac327c45e7771 — Environment-variable access.
repo/deepspeed/comm/comm.py:913 
    return 'SM_TRAINING_ENV' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d4f182b09337e2a — Environment-variable access.
repo/deepspeed/comm/comm.py:918 
    return 'DLTS_JOB_ID' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65a12ec89f16bc8e — Environment-variable access.
repo/deepspeed/comm/comm.py:926 
    os.environ["RANK"] = os.environ["OMPI_COMM_WORLD_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c536132102c53bc6 — Environment-variable access.
repo/deepspeed/comm/comm.py:927 
    os.environ["WORLD_SIZE"] = os.environ["OMPI_COMM_WORLD_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd2abc4a6cdf1bc6 — Environment-variable access.
repo/deepspeed/comm/comm.py:928 
    single_node = int(os.environ["OMPI_COMM_WORLD_LOCAL_SIZE"]) == int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #176247f342ef56b9 — Environment-variable access.
repo/deepspeed/comm/comm.py:931 
        master_node_params = os.environ["AZ_BATCH_MASTER_NODE"].split(":")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a77d638d13514718 — Environment-variable access.
repo/deepspeed/comm/comm.py:932 
        os.environ["MASTER_ADDR"] = master_node_params[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b60cb8edb2c2c1a — Environment-variable access.
repo/deepspeed/comm/comm.py:934 
        if "MASTER_PORT" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #557a083256fc408f — Environment-variable access.
repo/deepspeed/comm/comm.py:935 
            os.environ["MASTER_PORT"] = str(master_port)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccd3c5e5c93a16be — Environment-variable access.
repo/deepspeed/comm/comm.py:937 
        os.environ["MASTER_ADDR"] = os.environ["AZ_BATCHAI_MPI_MASTER_NODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba8e609260397c5b — Environment-variable access.
repo/deepspeed/comm/comm.py:938 
        os.environ["MASTER_PORT"] = DEFAULT_AML_MASTER_PORT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9031b18b0f55111f — Environment-variable access.
repo/deepspeed/comm/comm.py:941 
        utils.logger.info("NCCL_SOCKET_IFNAME original value = {}".format(os.environ["NCCL_SOCKET_IFNAME"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab24de4afb725ffd — Environment-variable access.
repo/deepspeed/comm/comm.py:943 
    os.environ["NCCL_SOCKET_IFNAME"] = DEFAULT_AML_NCCL_SOCKET_IFNAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69fefb175e698a53 — Environment-variable access.
repo/deepspeed/comm/comm.py:944 
    os.environ['LOCAL_RANK'] = os.environ["OMPI_COMM_WORLD_LOCAL_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dafbed15655db7f2 — Environment-variable access.
repo/deepspeed/comm/comm.py:949 
            .format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf12dde91057a162 — Environment-variable access.
repo/deepspeed/comm/comm.py:950 
                    os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f82c3835c6f6956 — Environment-variable access.
repo/deepspeed/comm/comm.py:956 
    os.environ["RANK"] = os.environ["OMPI_COMM_WORLD_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f24d37ab66acea7 — Environment-variable access.
repo/deepspeed/comm/comm.py:957 
    os.environ['LOCAL_RANK'] = os.environ["OMPI_COMM_WORLD_LOCAL_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5de34bc4396370c1 — Environment-variable access.
repo/deepspeed/comm/comm.py:958 
    os.environ["WORLD_SIZE"] = os.environ["OMPI_COMM_WORLD_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ded4d650dc0a8b8 — Environment-variable access.
repo/deepspeed/comm/comm.py:963 
            .format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c782cd0f511013e — Environment-variable access.
repo/deepspeed/comm/comm.py:964 
                    os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3939a90065e07ac — Environment-variable access.
repo/deepspeed/comm/mori.py:103 
    return os.environ.get("DS_SDMA_ALLGATHER", "0") in _TRUTHY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e64fb82c842444a6 — Environment-variable access.
repo/deepspeed/comm/mori.py:107 
    raw = os.environ.get("DS_SDMA_ALLGATHER_MAX_NUMEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40932d3800c048bd — Environment-variable access.
repo/deepspeed/comm/mori.py:142 
    os.environ.setdefault("MORI_ENABLE_SDMA", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53384cba5e04a68f — Environment-variable access.
repo/deepspeed/comm/torch.py:175 
                local_rank = int(os.environ.get('LOCAL_RANK', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5b7e310b2358235 — Environment-variable access.
repo/deepspeed/comm/torch.py:211 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe19a0aa2b8ce3ca — Environment-variable access.
repo/deepspeed/comm/torch.py:219 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d30a4ebf13e64407 — Environment-variable access.
repo/deepspeed/comm/torch.py:232 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a75a7475d6bfd7d5 — Environment-variable access.
repo/deepspeed/comm/torch.py:245 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #362375526d39e1cf — Environment-variable access.
repo/deepspeed/comm/torch.py:271 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20b4581c0a4f12b3 — Environment-variable access.
repo/deepspeed/comm/utils.py:14 
    rank = os.environ.get('LOCAL_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ae8d3d148ab9516 — Environment-variable access.
repo/deepspeed/comm/utils.py:17 
        rank = os.environ.get('OMPI_COMM_WORLD_LOCAL_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2af2c8c3af69982f — Environment-variable access.
repo/deepspeed/comm/utils.py:29 
    rank = os.environ.get('RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c937c1dc0117d1e — Environment-variable access.
repo/deepspeed/comm/utils.py:32 
        rank = os.environ.get('OMPI_COMM_WORLD_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1751d9bddc08f5c8 — Environment-variable access.
repo/deepspeed/comm/utils.py:43 
    size = os.environ.get('WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #653d950abb0a35ee — Environment-variable access.
repo/deepspeed/comm/utils.py:44 
    rank = os.environ.get('RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a2502a51df583d0 — Environment-variable access.
repo/deepspeed/comm/utils.py:47 
        size = os.environ.get('OMPI_COMM_WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0328dadc82b0dd9 — Environment-variable access.
repo/deepspeed/compile/profilers/comm_profile.py:157 
    local_rank = int(os.environ['LOCAL_RANK'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1d30d945eb5ff1a — Filesystem access.
repo/deepspeed/compile/util.py:358 
    with open(csv_filename, mode='w', newline='') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a8b96f4595f0e6c — Filesystem access.
repo/deepspeed/compression/compress.py:24 
        return json.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07d9beffcac8ab2e — Environment-variable access.
repo/deepspeed/constants.py:19 
default_pg_timeout = timedelta(minutes=int(os.getenv("DEEPSPEED_TIMEOUT", default=30)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a143b65671bec9f7 — Environment-variable access.
repo/deepspeed/elasticity/elastic_agent.py:96 
                "NCCL_ASYNC_ERROR_HANDLING": os.getenv("NCCL_ASYNC_ERROR_HANDLING", str(1)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1251679d5aba2950 — Environment-variable access.
repo/deepspeed/elasticity/elastic_agent.py:99 
            if "OMP_NUM_THREADS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06a986d0a2430ab8 — Environment-variable access.
repo/deepspeed/elasticity/elastic_agent.py:100 
                worker_env_ds["OMP_NUM_THREADS"] = os.environ["OMP_NUM_THREADS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7b1252ba334ae81 — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:212 
    if DEEPSPEED_ELASTICITY_CONFIG in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05f8f194afd4fc92 — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:213 
        scheduler_elastic_config_dict = json.loads(os.environ[DEEPSPEED_ELASTICITY_CONFIG])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cae122854961c259 — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:319 
            if "WORLD_SIZE" in os.environ and \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1ab4f300a836426 — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:320 
                os.getenv('WORLD_SIZE').isnumeric():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2dc0e8afc2cdae76 — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:321 
                current_num_gpus = int(os.getenv('WORLD_SIZE'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3ab73f3a961e07b — Environment-variable access.
repo/deepspeed/elasticity/elasticity.py:323 
                WORLD_SIZE = os.getenv('WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d710d29887b4ba8 — Environment-variable access.
repo/deepspeed/env_report.py:78 
    if "ASCEND_HOME_PATH" in os.environ or os.path.exists(os.environ["ASCEND_HOME_PATH"]):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d225be999d97dd9 — Environment-variable access.
repo/deepspeed/env_report.py:79 
        return os.environ["ASCEND_HOME_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11897f900df7c6c9 — Filesystem access.
repo/deepspeed/env_report.py:95 
            with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fce65b635291e8f — Filesystem access.
repo/deepspeed/git_version_info.py:13 
        version = open('version.txt', 'r').read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7f31a7204f9f98d — Environment-variable access.
repo/deepspeed/inference/engine.py:251 
            local_rank = int(os.getenv('LOCAL_RANK', '0'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3232e55658922ddb — Filesystem access.
repo/deepspeed/inference/engine.py:421 
                    with open(latest_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd3c8d1733160818 — Filesystem access.
repo/deepspeed/inference/v2/checkpoint/huggingface_engine.py:94 
            param_map = json.load(open(model_param_json, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e78f3ac144fba7f5 — Filesystem access.
repo/deepspeed/inference/v2/engine_factory.py:55 
    metadata = json.load(open(metadata_filename, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3393acf5c808fa8 — Filesystem access.
repo/deepspeed/inference/v2/engine_factory.py:65 
    model_config = pickle.load(open(os.path.join(path, "ds_model_config.pkl"), "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d757e21da54034da — Environment-variable access.
repo/deepspeed/inference/v2/engine_v2.py:98 
        local_rank = int(os.getenv("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fc23245bfb8fb17 — Filesystem access.
repo/deepspeed/inference/v2/engine_v2.py:265 
        json.dump(self._model.flattened_param_metadata.json(), open(metadata_file_name, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2dcc9d223fcc752 — Filesystem access.
repo/deepspeed/inference/v2/engine_v2.py:268 
            pickle.dump(self._model._config, open(os.path.join(save_path, "ds_model_config.pkl"), "wb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33f5450bf4e667e3 — Filesystem access.
repo/deepspeed/inference/v2/model_implementations/inference_policy_base.py:209 
            metadata = json.load(open(metadata_path, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50698ed45ecaa4a2 — Filesystem access.
repo/deepspeed/io/fast_file_writer.py:166 
        fp = open(self._file_path, 'ab')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f516f8db049aa02 — Filesystem access.
repo/deepspeed/io/mock_file_writer.py:15 
        self._fp = open(file_path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #415436d197192066 — Filesystem access.
repo/deepspeed/io/py_file_writer.py:15 
        self._fp = open(file_path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2fcf1ca4facf8fba — Environment-variable access.
repo/deepspeed/launcher/launch.py:147 
    current_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f6e7aba8d4f7390 — Filesystem access.
repo/deepspeed/launcher/launch.py:202 
        with open(pid_file, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5807bb1dfcf567fc — Filesystem access.
repo/deepspeed/launcher/launch.py:212 
        with open(DLTS_POD_ENV_PATH) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e225c43da959c424 — Filesystem access.
repo/deepspeed/launcher/launch.py:267 
                log_fd = open(log_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4fed5de75473298 — Environment-variable access.
repo/deepspeed/launcher/launch.py:304 
        run_id = os.environ.get("ELASTIC_RUN_ID", ELASTIC_TRAINING_ID_DEFAULT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e734240105ba0314 — Environment-variable access.
repo/deepspeed/launcher/launcher_helper.py:84 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #668af490208fb6eb — Filesystem access.
repo/deepspeed/launcher/multinode_runner.py:453 
        with open(MVAPICH_TMP_HOSTFILE, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f6c380dbd580a82 — Environment-variable access.
repo/deepspeed/launcher/runner.py:39 
DEEPSPEED_ENVIRONMENT_NAME = os.getenv("DS_ENV_FILE", ".deepspeed_env")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22915d02c39f9426 — Filesystem access.
repo/deepspeed/launcher/runner.py:237 
    with open(hostfile_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc869e3dc6e84e81 — Environment-variable access.
repo/deepspeed/launcher/runner.py:450 
    visible_devices = os.environ.get(visible_devices_env, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b99d15160c14f64 — Environment-variable access.
repo/deepspeed/launcher/runner.py:460 
        del os.environ[visible_devices_env]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #592e02f2d0059dcf — Environment-variable access.
repo/deepspeed/launcher/runner.py:480 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bba737c59834f963 — Filesystem access.
repo/deepspeed/launcher/runner.py:620 
                with open(environ_file, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6fdc11c61edf001d — Filesystem access.
repo/deepspeed/module_inject/replace_module.py:542 
            with open(f"{config.save_mp_checkpoint_path}/ds_inference_config.json", "w") as cfg:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9216191fcb5c2d76 — Environment-variable access.
repo/deepspeed/moe/ep_tp_dispatch.py:168 
    if os.environ.get("AUTOEP_FOLDING_DEBUG_PAYLOAD", "0") not in {"1", "true", "TRUE", "yes"}:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3210e0da6a24a38 — Environment-variable access.
repo/deepspeed/moe/ep_tp_dispatch.py:185 
    sample_limit = int(os.environ.get("AUTOEP_FOLDING_DEBUG_SAMPLE_LIMIT", "12"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #919192aa8318db51 — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:28 
                if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2a703ea195e1501 — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:29 
                    infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #825ba8e944668fcc — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:30 
                elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ceea8f7aa77e1bd — Environment-variable access.
repo/deepspeed/monitor/csv_monitor.py:31 
                    infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39ba232a1497ff4d — Filesystem access.
repo/deepspeed/monitor/csv_monitor.py:62 
                with open(fname, 'a+') as csv_monitor_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa23f9bdb20935c8 — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:34 
                if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c6c5a0772e28813 — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:35 
                    infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa370f5b8646abbe — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:36 
                elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc094278f09dcbd3 — Environment-variable access.
repo/deepspeed/monitor/tensorboard.py:37 
                    infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82ca22f34050fb4b — Filesystem access.
repo/deepspeed/nvme/ds_aio_job.py:34 
            self.output_fd = open(self.output_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68bc789c7a6daa90 — Filesystem access.
repo/deepspeed/nvme/parse_nvme_stats.py:90 
    with open(file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2503b26b8a34852d — Filesystem access.
repo/deepspeed/nvme/perf_run_sweep.py:130 
    with open(sweep_config_json) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48a143f234081622 — Filesystem access.
repo/deepspeed/ops/sparse_attention/trsrc/__init__.py:36 
    with open(fname, 'r') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61eb43ac351eebf7 — Filesystem access.
repo/deepspeed/ops/transformer/inference/config.py:131 
        with open(json_file, "r", encoding='utf-8') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c7a522e7d76c3a5 — Filesystem access.
repo/deepspeed/ops/transformer/inference/moe_inference.py:104 
        with open(json_file, "r", encoding='utf-8') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5aff001e888548b — Environment-variable access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:64 
        tt_home = os.environ.get('TRITON_HOME') or os.path.join(Path.home(), ".triton")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96a30f94cb69278b — Environment-variable access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:98 
        self.cache_dir = os.environ.get('TRITON_CACHE_DIR', TritonCacheDir.default_cache_dir())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5e506fe1f5a736d — Filesystem access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:112 
                with open(self.file_path + ".tmp", 'wb') as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8debb0d8af8aeb17 — Filesystem access.
repo/deepspeed/ops/transformer/inference/triton/matmul_ext.py:118 
            with open(self.file_path, 'rb') as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6a7d2a75c56af93 — Filesystem access.
repo/deepspeed/ops/transformer/transformer.py:138 
        with open(json_file, "r", encoding='utf-16') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7c14546754ff593 — Filesystem access.
repo/deepspeed/profiling/flops_profiler/profiler.py:307 
            f = open(output_file, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32ef4ecfc94f8e8a — Filesystem access.
repo/deepspeed/runtime/config.py:669 
        self.data = json.load(open(filename, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dba6c7e7a2e65dee — Filesystem access.
repo/deepspeed/runtime/config.py:672 
        with open(filename, "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b2d4916e6b1f211 — Filesystem access.
repo/deepspeed/runtime/config.py:683 
            self._param_dict = hjson.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1e98b4eed123b56 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:122 
                        with open(f"{metric_fname}_{m_value}.csv", 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b58a9b4f9c58b95f — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:142 
                        with open(f"{metric_fname}_{m_value}.csv", 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07f5af2caae5fcba — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:271 
                        with open(w_metric_to_sample_fname, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9644f8192bf4004 — Environment-variable access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:828 
        worker_id=int(os.environ['RANK']),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b985439f78c0703 — Environment-variable access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:829 
        num_workers=int(os.environ['WORLD_SIZE']),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd5c0a5e6805ab98 — Environment-variable access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:838 
        device=f"cuda:{int(os.environ['LOCAL_RANK'])}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b5f27bd6adee0ed — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:865 
            with open(os.path.join(da.save_path, path), 'rb') as f1, \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce5dd3ee961f071d — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:866 
                open(os.path.join(dda.save_path, path), 'rb') as f2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ac6b20e672aaa29 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:46 
        with open(index_file_path(path), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c481525370157c0 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:150 
        with open(index_file_path(path), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db83b7664a228072 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:166 
        self.data_file = open(data_file_path(path), 'rb', buffering=0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #676b375e9c5bf30e — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:275 
        self.out_file = open(out_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cef8bf5c0220aaef — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:308 
        with open(data_file_path(another_file), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e1a69a879a0cbc0 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:318 
        index = open(index_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de14812f2053d760 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:332 
    with open(path, 'rb') as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9111e4ef68d2736c — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:380 
                    self._file = open(path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e36ec6aa275daa9 — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:422 
            with open(path, 'rb') as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56cd69f2b3901a6a — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:578 
        self._data_file = open(out_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8963d483e60e2aaf — Filesystem access.
repo/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:618 
        with open(data_file_path(another_file), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4fb366fbc1c772a — Environment-variable access.
repo/deepspeed/runtime/engine.py:1522 
        if "OMPI_COMM_WORLD_LOCAL_RANK" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea8ccc6b4c9fcf1b — Environment-variable access.
repo/deepspeed/runtime/engine.py:1523 
            ompi_local_rank = os.environ.get("OMPI_COMM_WORLD_LOCAL_RANK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86e5902029f7567f — Environment-variable access.
repo/deepspeed/runtime/engine.py:1524 
            local_rank = os.environ.get('LOCAL_RANK', ompi_local_rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #889f25c99d45c38b — Environment-variable access.
repo/deepspeed/runtime/engine.py:1527 
            os.environ['LOCAL_RANK'] = local_rank

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a8c9ba767b5543f — Environment-variable access.
repo/deepspeed/runtime/engine.py:1529 
        self.local_rank = int(os.environ['LOCAL_RANK'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bd1ee18451adf8d — Environment-variable access.
repo/deepspeed/runtime/engine.py:1535 
        assert "LOCAL_RANK" in os.environ or "OMPI_COMM_WORLD_LOCAL_RANK" in os.environ, "DeepSpeed requires the LOCAL_RANK environment " \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2d1bc7c02eca54b — Environment-variable access.
repo/deepspeed/runtime/engine.py:1543 
                env_local_rank = int(os.environ.get("LOCAL_RANK"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bfd560c9b02d6e2 — Filesystem access.
repo/deepspeed/runtime/engine.py:4115 
                with open(latest_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e963438e80fd339 — Filesystem access.
repo/deepspeed/runtime/engine.py:4649 
                with open(os.path.join(save_dir, 'latest'), 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98b66c6168f6b98a — Filesystem access.
repo/deepspeed/runtime/engine.py:4667 
            with open(os.path.join(commit_info.save_dir, 'latest'), 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4c5324c050cc87f — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:71 
                                 local_rank=int(os.environ[LOCAL_RANK]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bac86ceed7e2aa9d — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:76 
                                 num_machines=int(os.environ[CROSS_SIZE]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #247af543807ff91d — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:77 
                                 machine_rank=int(os.environ[CROSS_RANK]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4fabf8a77ac2015 — Environment-variable access.
repo/deepspeed/runtime/model_checkpointing/utils.py:78 
                                 num_sockets=int(os.environ[CROSS_SIZE]) * SOCKETS_PER_MACHINE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ccabaedac15ae6e — Environment-variable access.
repo/deepspeed/runtime/pipe/module.py:166 
        self.local_rank = int(os.environ.get("LOCAL_RANK", None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aae8f26a0e552122 — Filesystem access.
repo/deepspeed/runtime/state_dict_factory.py:26 
            with open(json_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aab44398f4a3f5b3 — Filesystem access.
repo/deepspeed/runtime/tensor_parallel/init_utils.py:24 
            return hjson.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #247152fb28edfc01 — Environment-variable access.
repo/deepspeed/runtime/zenflow/zenflow_utils.py:119 
    os.environ['OMP_NUM_THREADS'] = str(len(zf_affinity))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d301092a1b47aab — Environment-variable access.
repo/deepspeed/runtime/zenflow/zenflow_utils.py:188 
    os.environ['OMP_NUM_THREADS'] = str(len(pt_affinity))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ad91c3e1e7df11f — Environment-variable access.
repo/deepspeed/runtime/zero/mics_utils.py:62 
    ndevices_per_node = int(os.environ.get("NDEV_PER_NODE", get_accelerator().device_count()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df5851b494db2818 — Environment-variable access.
repo/deepspeed/runtime/zero/partition_parameters.py:1059 
        self.local_device = torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3b4eee1c38282ce — Environment-variable access.
repo/deepspeed/runtime/zero/utils.py:77 
        device=torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"])),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf725881dddd3d23 — Environment-variable access.
repo/deepspeed/runtime/zero/utils.py:97 
        device=torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"])),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4012586057abf203 — Filesystem access.
repo/deepspeed/utils/debug.py:112 
    with open(__file__, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aaae9122c516ec96 — Filesystem access.
repo/deepspeed/utils/debug.py:149 
        fh = open(f"log_rank_{rank}.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77c26a3b35ac1e6b — Environment-variable access.
repo/deepspeed/utils/groups.py:149 
    if os.environ.get("TORCH_DISTRIBUTED_DEBUG", "").upper() == "DETAIL":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ada92e023a608cd — Environment-variable access.
repo/deepspeed/utils/logging.py:49 
        if required_torch_version(min_version=2.6) and os.getenv("DISABLE_LOGS_WHILE_COMPILING", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0eb766288b46e90a — Environment-variable access.
repo/deepspeed/utils/logging.py:52 
                for item in os.getenv("LOGGER_METHODS_TO_EXCLUDE_FROM_DISABLE", "").split(",")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1c04108497b9454 — Filesystem access.
repo/deepspeed/utils/logging.py:178 
        with open(path, 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac68b2a4f3333604 — Environment-variable access.
repo/deepspeed/utils/numa.py:107 
    if 'KMP_AFFINITY' in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e956b263b243521 — Filesystem access.
repo/deepspeed/utils/zero_to_fp32.py:611 
            with open(latest_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06a5bfec3baab8e9 — Filesystem access.
repo/deepspeed/utils/zero_to_fp32.py:708 
        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7acf3fef23de114 — Filesystem access.
repo/docs/code-docs/source/conf.py:28 
with open("../../../version.txt", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #30c7f7161728174b — Environment-variable access.
repo/examples/sdma_allgather/test_sdma_allgather_zero3.py:105 
    parser.add_argument("--local_rank", type=int, default=int(os.environ.get("LOCAL_RANK", 0)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #138b38a8de10003d — Environment-variable access.
repo/examples/sdma_allgather/train_qwen3_zero3.py:123 
    max_chunks = int(os.environ.get("QWEN3_MAX_CHUNKS", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67758714f6b3c8c7 — Environment-variable access.
repo/op_builder/builder.py:102 
        elif os.getenv("DS_SKIP_CUDA_CHECK", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28896dfcbfe44c2b — Filesystem access.
repo/op_builder/builder.py:231 
                with open(rocm_ver_file, 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e665513681b0456 — Filesystem access.
repo/op_builder/builder.py:242 
                    with open(rocm_ver_file, 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07b22fdcb2fd8bc1 — Filesystem access.
repo/op_builder/builder.py:347 
            with open(filename, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d3258f98ae204a7 — Filesystem access.
repo/op_builder/builder.py:352 
                filestderr = open(os.path.join(tempdir, 'stderr.txt'), 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3efa8bce40c61620 — Environment-variable access.
repo/op_builder/builder.py:363 
            cflags = shlex.split(os.environ.get('CFLAGS', ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ea884fbca330f9f — Environment-variable access.
repo/op_builder/builder.py:368 
            ldflags = shlex.split(os.environ.get('LDFLAGS', ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c1135efde36478a — Environment-variable access.
repo/op_builder/builder.py:561 
        torch_arch_list_present = "TORCH_CUDA_ARCH_LIST" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b2551dae029aca4 — Environment-variable access.
repo/op_builder/builder.py:562 
        torch_arch_list = os.environ.get("TORCH_CUDA_ARCH_LIST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97a4a715d1a6ccd3 — Environment-variable access.
repo/op_builder/builder.py:587 
                os.environ["PYTORCH_ROCM_ARCH"] = self.get_rocm_gpu_arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f59e4963216c0639 — Environment-variable access.
repo/op_builder/builder.py:608 
                os.environ["TORCH_CUDA_ARCH_LIST"] = torch_arch_list

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53faa4ddcf6b7c84 — Environment-variable access.
repo/op_builder/builder.py:610 
                os.environ.pop("TORCH_CUDA_ARCH_LIST", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51879dae42a96077 — Environment-variable access.
repo/op_builder/builder.py:668 
                arch_string = os.environ.get('TORCH_CUDA_ARCH_LIST', '').strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6082b3fc5e5a706c — Environment-variable access.
repo/op_builder/builder.py:693 
            cross_compile_archs_env = os.environ.get('TORCH_CUDA_ARCH_LIST', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #908d03d325626782 — Environment-variable access.
repo/op_builder/builder.py:737 
        os.environ["TORCH_CUDA_ARCH_LIST"] = ";".join(arch_tokens)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33f27d2d11168795 — Environment-variable access.
repo/op_builder/builder.py:806 
                os.environ["PYTORCH_ROCM_ARCH"] = self.get_rocm_gpu_arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfbfa49624ecca3a — Environment-variable access.
repo/op_builder/builder.py:863 
                nvcc_threads = int(os.getenv("DS_NVCC_THREADS", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3f58ef8485b1d22 — Environment-variable access.
repo/op_builder/builder.py:882 
            if os.environ.get('DS_DEBUG_CUDA_BUILD', '0') == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca0a23a67859c9f5 — Environment-variable access.
repo/op_builder/cpu/comm.py:37 
        ccl_root_path = os.environ.get("CCL_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3ff306feb079491 — Environment-variable access.
repo/op_builder/evoformer_attn.py:22 
        self.cutlass_path = os.environ.get("CUTLASS_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c6b789b72d855b8 — Environment-variable access.
repo/op_builder/evoformer_attn.py:39 
        if os.environ.get("DS_EVOFORMER_GPU_ARCH"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #187463eab653bcbd — Filesystem access.
repo/op_builder/evoformer_attn.py:78 
                with open(changelog_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62ac78b0109ad1b6 — Environment-variable access.
repo/op_builder/evoformer_attn.py:86 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a281d5cd1026b3d — Environment-variable access.
repo/op_builder/evoformer_attn.py:121 
            value = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adbd781a4de75140 — Environment-variable access.
repo/op_builder/fp_quantizer.py:35 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b1c0d9f8d903286 — Environment-variable access.
repo/op_builder/inference_core_ops.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f52d9b6d12ab406f — Environment-variable access.
repo/op_builder/inference_cutlass_builder.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a802e0554b96534c — Environment-variable access.
repo/op_builder/npu/builder.py:42 
        if "ASCEND_HOME_PATH" in os.environ or os.path.exists(os.environ["ASCEND_HOME_PATH"]):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4bd7e8b98cb142f9 — Environment-variable access.
repo/op_builder/npu/builder.py:43 
            return os.environ["ASCEND_HOME_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a16b6745fce0de6a — Filesystem access.
repo/op_builder/npu/builder.py:56 
                with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0db1b84a15583577 — Environment-variable access.
repo/op_builder/ragged_ops.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d076de66ca0f6b7b — Environment-variable access.
repo/op_builder/ragged_utils.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9ac7534af42a0fd — Environment-variable access.
repo/op_builder/spatial_inference.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1170b19c7ea66ee — Environment-variable access.
repo/op_builder/transformer_inference.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #008970e488b3dafd — Environment-variable access.
repo/op_builder/xpu/builder.py:89 
        if os.environ.get('USE_MKL_GEMM'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50c14095bf4eb516 — Environment-variable access.
repo/op_builder/xpu/builder.py:152 
            saved_env[var] = os.environ.get(var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4be1090e7942143c — Environment-variable access.
repo/op_builder/xpu/builder.py:153 
        os.environ['CXX'] = 'icpx'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b46920e4efc44f97 — Environment-variable access.
repo/op_builder/xpu/builder.py:159 
            lib_path = os.environ.get('LIBRARY_PATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05d3a9cf5c5ac790 — Environment-variable access.
repo/op_builder/xpu/builder.py:160 
            os.environ['LIBRARY_PATH'] = f'{sycl_lib}:{lib_path}' if lib_path else sycl_lib

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e98953f7966b84ff — Environment-variable access.
repo/op_builder/xpu/builder.py:162 
            cpath = os.environ.get('CPATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6474f8c8dffeb16 — Environment-variable access.
repo/op_builder/xpu/builder.py:163 
            os.environ['CPATH'] = f'{sycl_inc}:{cpath}' if cpath else sycl_inc

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86f0d6cb2961b60b — Environment-variable access.
repo/op_builder/xpu/builder.py:176 
                    os.environ.pop(var, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87c1ea86aa06118c — Environment-variable access.
repo/op_builder/xpu/builder.py:178 
                    os.environ[var] = val

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ace6ae09b2f38150 — Filesystem access.
repo/release/bump_patch_version.py:19 
with open('./version.txt', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7bc1511d2963fc3 — Filesystem access.
repo/release/check_release_version.py:17 
with open('./version.txt') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #860e642df3b9501d — Filesystem access.
repo/scripts/replace_copyright.py:66 
    with open(fp, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #397f884aae4aa0a4 — Filesystem access.
repo/scripts/replace_copyright.py:103 
    with open(fp, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #734c11772c9487a2 — Filesystem access.
repo/scripts/replace_copyright.py:132 
    with open(fp, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3fb3e26feded977e — Filesystem access.
repo/scripts/replace_copyright.py:203 
    with open(fp, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd975b4b00ed91f4 — Filesystem access.
repo/setup.py:61 
    with open(path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c590f7dd3faf0de5 — Environment-variable access.
repo/setup.py:69 
    return bool(os.environ.get(key, None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0aaf8ded07a3612 — Environment-variable access.
repo/setup.py:78 
    return os.environ.get(key, None) or default

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9304f63a7291d15a — Environment-variable access.
repo/setup.py:148 
        os.environ["TORCH_CUDA_ARCH_LIST"] = get_default_compute_capabilities()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85072ef436a3fa78 — Filesystem access.
repo/setup.py:239 
version_str = open('version.txt', 'r').read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19e7cc2ddefd8124 — Filesystem access.
repo/setup.py:247 
    with open('build.txt', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #117a4176e5f91d9e — Environment-variable access.
repo/setup.py:248 
        fd.write(os.environ['DS_BUILD_STRING'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fc54d349dfdddd1 — Environment-variable access.
repo/setup.py:249 
    version_str += os.environ['DS_BUILD_STRING']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a13f31630012e5b — Filesystem access.
repo/setup.py:252 
    with open('build.txt', 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c56896fca8526f5f — Filesystem access.
repo/setup.py:286 
with open('deepspeed/git_version_info_installed.py', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e11782e640460d83 — Filesystem access.
repo/setup.py:299 
with open(os.path.join(thisdir, 'README.md'), encoding='utf-8') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.