Close Open Privacy Scan

link https://github.com/stitionai/devika

bolt Snapshot: commit 80bb343

science engine v1.22

schedule 2026-07-23T16:12:07.568536+00:00

smart_toy AI deps detected: anthropic, google-generativeai, mistralai, openai — detected in dependencies, not a safety judgment.

App Privacy Score

82 /100

Low privacy risk

Low risk · 1611 finding(s)

Dependency score: 0 (High risk)

bar_chart Score Breakdown

egress −15

env_fs −3

list Scan Summary

0 high 29 medium 1582 low

First-party packages: 1

Dependency packages: 27

Ecosystem: python

swap_horiz Application data flows

External domains: 0001:002:003:0004::11.2.3.4aiplatform.eu.rep.googleapis.comaiplatform.googleapis.comaiplatform.us.rep.googleapis.comapi.anthropic.comapi.eu.mistral.aiapi.github.comapi.groq.comapi.mistral.aiapi.netlify.comapi.openai.comapi.us.mistral.aiauth.openai.combjoern.hoehrmann.debugs.python.orgcdnjs.cloudflare.comclaude.googleapis.comcloud.google.comcode.activestate.comconsole.groq.comconsole.mistral.aicookbook.openai.comcreativecommons.orgcryptography.iocurl.sedatatracker.ietf.orgdeveloper.mozilla.orgdocs.anthropic.comdocs.cohere.aidocs.mathjax.orgdocs.mistral.aidocs.pydantic.devdocs.python.orgdocutils.sourceforge.netduckduckgo.comen.wikipedia.orgengineering.salesforce.comeventlet.readthedocs.ioexample-resource.azure.openai.comexample-resource.services.ai.azure.comflask.palletsprojects.comgit-scm.comgithub.bloggithub.comgithub.github.comgoogle.comgoogle.github.iohelp.openai.comhtml.duckduckgo.comhtml.spec.whatwg.orghttpbin.orghttpwg.orghuggingface.coimg.website.comjira.atlassian.comjson-schema.orgjsonlines.orglangchain.readthedocs.iolearn.microsoft.comlinks.duckduckgo.comlite.duckduckgo.commanagement.azure.commaruku.rubyforge.orgmichelf.commodel-spec.openai.commodelcontextprotocol.ionginx.orgnodatime.orgnull.python.orgocsp.verisign.comollama.comopenai.comopenaipublic.blob.core.windows.netopensource.orgopentelemetry.iopackaging.python.orgpartners.adobe.complatform.claude.complatform.openai.compygments.orgpypi.orgpypi.python.orgpython-markdown.github.iopython.example.orgpython.orgrequests.readthedocs.iosetuptools.readthedocs.iosome.hostnamespeakeasy.comspec.commonmark.orgstackoverflow.comsvrintl-g3-aia.verisign.comsvrintl-g3-crl.verisign.comtestca.pythontest.nettfhub.devtimeapi.iotools.ietf.orgtowardsdatascience.comtwitter.comtyping-extensions.readthedocs.iounpkg.comurllib3.readthedocs.iowebsockets.readthedocs.iowww.anthropic.comwww.apache.orgwww.bing.comwww.blackhat.comwww.cacert.orgwww.cracker.comwww.ctan.orgwww.djangoproject.comwww.dnspython.orgwww.gevent.orgwww.github.comwww.gitlab.comwww.google.comwww.googleapis.comwww.iana.orgwww.itu.intwww.libpng.orgwww.linuxprogrammingblog.comwww.microsoft.comwww.openssl.orgwww.opentable.comwww.perl.orgwww.pyopenssl.orgwww.python.orgwww.rfc-editor.orgwww.sbert.netwww.w3.orgwwwsearch.sf.netyahoo.comzopecomponent.readthedocs.io

medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

repo/src/services/github.py:10 → repo/src/services/github.py:12

</> First-Party Code

first-party (python)

python first-party

medium pii_flow production #9bb05d3031cd9347 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

repo/src/services/github.py:12 · flow /tmp/closeopen-l4_hgnin/repo/src/services/github.py:10 → /tmp/closeopen-l4_hgnin/repo/src/services/github.py:12

            "https://api.github.com/user/repos", headers=headers

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

expand_more 30 low-confidence finding(s)

low env_fs production #402506be3d68fef2 — Environment-variable access.

repo/devika.py:44

os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9d3ea4912e23bb7e — Filesystem access.

repo/src/agents/action/action.py:9

PROMPT = open("src/agents/action/prompt.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #03328f8e73e2ace6 — Filesystem access.

repo/src/agents/answer/answer.py:9

PROMPT = open("src/agents/answer/prompt.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a63a236de4ebe93 — Filesystem access.

repo/src/agents/coder/coder.py:14

PROMPT = open("src/agents/coder/prompt.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7579ce67fd7e5b85 — Filesystem access.

repo/src/agents/coder/coder.py:77

            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b011a1d4d6b64ad — Filesystem access.

repo/src/agents/decision/decision.py:8

PROMPT = open("src/agents/decision/prompt.jinja2").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa0107279de797cd — Filesystem access.

repo/src/agents/feature/feature.py:13

PROMPT = open("src/agents/feature/prompt.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce7e9e94acd9eb47 — Filesystem access.

repo/src/agents/feature/feature.py:75

            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #498b7eeed91798d9 — Filesystem access.

repo/src/agents/formatter/formatter.py:5

PROMPT = open("src/agents/formatter/prompt.jinja2").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f2aa053b8894aaa — Filesystem access.

repo/src/agents/internal_monologue/internal_monologue.py:8

PROMPT = open("src/agents/internal_monologue/prompt.jinja2").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #15920e0f843bf47b — Filesystem access.

repo/src/agents/patcher/patcher.py:13

PROMPT = open("src/agents/patcher/prompt.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c258009929519d3 — Filesystem access.

repo/src/agents/patcher/patcher.py:78

            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #99f7c97169482efe — Filesystem access.

repo/src/agents/planner/planner.py:5

PROMPT = open("src/agents/planner/prompt.jinja2").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c62a5cddc33309d — Filesystem access.

repo/src/agents/reporter/reporter.py:8

PROMPT = open("src/agents/reporter/prompt.jinja2").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d03240f36bdf41e — Filesystem access.

repo/src/agents/researcher/researcher.py:10

PROMPT = open("src/agents/researcher/prompt.jinja2").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #15791b20b169748c — Filesystem access.

repo/src/agents/runner/runner.py:15

PROMPT = open("src/agents/runner/prompt.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2d07ce5bff22e9c — Filesystem access.

repo/src/agents/runner/runner.py:16

RERUNNER_PROMPT = open("src/agents/runner/rerunner.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #0f581f216cfaadac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/browser/search.py:22

            response = requests.get(self.bing_api_endpoint, headers=headers, params=params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #5a859ef3bc9371db — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/browser/search.py:49

            response = requests.get(self.google_search_api_endpoint, params=params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #8775b2781dc36449 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/browser/search.py:101

            resp = self.asession.request(method, url, data=data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #3aab02e4e8479892 — Filesystem access.

repo/src/config.py:17

            with open("sample.config.toml", "r") as f_in, open("config.toml", "w+") as f_out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3dca9bdf751e7f11 — Filesystem access.

repo/src/config.py:23

            with open("sample.config.toml", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d122a7fe8c04a38 — Filesystem access.

repo/src/config.py:26

            with open("config.toml", "r+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #75f9d41f71b46a6a — Filesystem access.

repo/src/config.py:183

        with open("config.toml", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ed99bce4e97ead3 — Filesystem access.

repo/src/config.py:189

                with open("config.toml", "r+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e2cab5a78f91f65 — Filesystem access.

repo/src/documenter/pdf.py:17

        with open(out_file_path, "wb") as out_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #221a4426a38478a9 — Filesystem access.

repo/src/filesystem/read_code.py:21

                    with open(file_path, 'r') as file_content:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e0e362123cbf59fc — Filesystem access.

repo/src/logger.py:16

        with open(self.logger.pathName, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b31749796a3a6438 — Filesystem access.

repo/src/project.py:168

                    with open(os.path.join(root, filename), 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #37cc3df907b91da0 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/services/github.py:11

        response = requests.get(
            "https://api.github.com/user/repos", headers=headers
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

</> Dependencies

mistralai

python dependency

medium telemetry dependency Excluded from app score #d701843ca59cbb2f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/client/_hooks/traceparent.py:5

from opentelemetry.propagate import inject

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9469259db499dc04 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/client/_hooks/tracing.py:8

from opentelemetry import context as context_api

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #08279c0f511d829e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/client/_hooks/tracing.py:9

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #923e7ee9192c11e9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/client/_hooks/tracing.py:10

from opentelemetry.trace import Span, Status, StatusCode, set_span_in_context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cdbd8f97c058e5bd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/__init__.py:4

from opentelemetry import trace as otel_trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #41a32df0a0dc1d4c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:17

import opentelemetry.semconv._incubating.attributes.gen_ai_attributes as gen_ai_attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #01b1d0755a76382b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:18

import opentelemetry.semconv._incubating.attributes.http_attributes as http_attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #94c95ca3de547a84 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:19

import opentelemetry.semconv.attributes.error_attributes as error_attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8e734fbc09a8e54a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:20

import opentelemetry.semconv.attributes.server_attributes as server_attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d9e0a0e22f94ab00 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:21

from opentelemetry import context as context_api

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #13fb992392cf0531 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:22

from opentelemetry import propagate, trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #298f511c58ce70ad — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:23

from opentelemetry.baggage import get_baggage

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6c5a5571cda73b1a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:24

from opentelemetry.trace import Span, Status, StatusCode, Tracer, set_span_in_context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c52f06d9979305c9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/redaction.py:26

    from opentelemetry.sdk.trace import ReadableSpan

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a00b09461df5e78f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/redaction.py:27

    from opentelemetry.sdk.trace.export import SpanExporter, SpanExportResult

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6ed9e1c7e2bf23b4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/redaction.py:102

        from opentelemetry.sdk.resources import Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9a7a88f4e0a9af7b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/redaction.py:103

        from opentelemetry.sdk.trace import Event, ReadableSpan

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #117f60e838315a79 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/redaction.py:104

        from opentelemetry.trace import Link, SpanKind, Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #33b5db0b10749dee — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/redaction_policies.py:14

from opentelemetry.util.types import AttributeValue

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bdfa284820638052 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:10

from opentelemetry import trace as otel_trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1ace0478f4eabea5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:22

    from opentelemetry.sdk.trace import TracerProvider as SDKTracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #95b193deaf35e0af — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:346

        from opentelemetry.exporter.otlp.proto.http.trace_exporter import (
            OTLPSpanExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #156b602be300f85a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:349

        from opentelemetry.sdk.resources import Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3aaf9ffa0d86efc8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:350

        from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #791a7986449e1605 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:351

        from opentelemetry.sdk.trace.export import BatchSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1b2b99529fa7bdba — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/run/tools.py:8

import opentelemetry.semconv._incubating.attributes.gen_ai_attributes as gen_ai_attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7b7abb2e79455d2a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/run/tools.py:16

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f2d9027412549fb2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/src/mistralai/extra/run/tools.py:17

from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 11 low-confidence finding(s)

low env_fs dependency Excluded from app score #2358cfa7cd2467ae — Environment-variable access.

pkgs/python/[email protected]/packages/azure/src/mistralai/azure/client/utils/values.py:63

    env_value = os.getenv(env_key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #645cfd61cc5b205e — Environment-variable access.

pkgs/python/[email protected]/packages/gcp/src/mistralai/gcp/client/utils/values.py:63

    env_value = os.getenv(env_key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2a5f76e98988829 — Environment-variable access.

pkgs/python/[email protected]/src/mistralai/client/utils/logger.py:25

    if os.getenv("MISTRAL_DEBUG"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3074be56bd9c7dcf — Environment-variable access.

pkgs/python/[email protected]/src/mistralai/client/utils/security.py:80

    if os.getenv("MISTRAL_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7664601a522928b9 — Environment-variable access.

pkgs/python/[email protected]/src/mistralai/client/utils/security.py:81

        security_dict["api_key"] = os.getenv("MISTRAL_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a170dc3673e00353 — Environment-variable access.

pkgs/python/[email protected]/src/mistralai/client/utils/values.py:64

    env_value = os.getenv(env_key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #7523f73e785a83b3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/mistralai/extra/mcp/auth.py:109

    response = await async_client.post(register_endpoint, json=registration_payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #981b4c07c7ca10a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/mistralai/extra/mcp/sse.py:133

        response = httpx.get(
            self._sse_params.url,
            headers=self._format_headers(),
            timeout=self._sse_params.timeout,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #5d9aef91b10da2b1 — Environment-variable access.

pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:40

    os.getenv("MISTRAL_SDK_DEBUG_TRACING", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1bc33490df19188b — Environment-variable access.

pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:80

    env_value = os.getenv(MISTRAL_SDK_TELEMETRY_ENV)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd4a5e07323e9b71 — Environment-variable access.

pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:363

    return os.getenv(
        MISTRAL_OTLP_TRACES_ENDPOINT_ENV,
        MISTRAL_TELEMETRY_ENDPOINT,
    ).strip() or MISTRAL_TELEMETRY_ENDPOINT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Flask-SocketIO

python dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #e2fad8c9c22d7e24 — Environment-variable access.

pkgs/python/[email protected]/src/flask_socketio/__init__.py:254

        if os.environ.get('FLASK_RUN_FROM_CLI'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

GitPython

python dependency

expand_more 55 low-confidence finding(s)

low env_fs dependency Excluded from app score #87eb19c88ec93134 — Filesystem access.

pkgs/python/[email protected]/doc/source/conf.py:50

with open(os.path.join(os.path.dirname(__file__), "..", "..", "VERSION")) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #141e316db691440a — Environment-variable access.

pkgs/python/[email protected]/git/cmd.py:668

    GIT_PYTHON_TRACE = os.environ.get("GIT_PYTHON_TRACE", False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0432db05a98d9e8 — Environment-variable access.

pkgs/python/[email protected]/git/cmd.py:784

            new_git = os.environ.get(cls._git_exec_env_var, cls.git_exec_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5c9f405db69029d — Environment-variable access.

pkgs/python/[email protected]/git/cmd.py:833

                mode = os.environ.get(cls._refresh_env_var, "raise").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7529f8ef874ad8c3 — Environment-variable access.

pkgs/python/[email protected]/git/cmd.py:1376

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd7cb726413f35e0 — Filesystem access.

pkgs/python/[email protected]/git/cmd.py:1398

        stdout_sink = PIPE if with_stdout else getattr(subprocess, "DEVNULL", None) or open(os.devnull, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f1a2b845ed6e7c0 — Environment-variable access.

pkgs/python/[email protected]/git/config.py:259

        config_home = os.environ.get("XDG_CONFIG_HOME") or osp.join(os.environ.get("HOME", "~"), ".config")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3de92209fe8fbd2 — Filesystem access.

pkgs/python/[email protected]/git/config.py:652

                    with open(file_path, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #617b8847d6bddf60 — Filesystem access.

pkgs/python/[email protected]/git/config.py:770

            with open(fp, "wb") as fp_open:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #284066402b2d1b5a — Filesystem access.

pkgs/python/[email protected]/git/index/base.py:706

                return open(filepath, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c097c612cc70bb0d — Filesystem access.

pkgs/python/[email protected]/git/index/base.py:1181

        with open(self._commit_editmsg_filepath(), "wb") as commit_editmsg_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b527e40a5fbe0a8 — Filesystem access.

pkgs/python/[email protected]/git/index/base.py:1188

        with open(self._commit_editmsg_filepath(), "rb") as commit_editmsg_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fb7c449a987dcb8 — Environment-variable access.

pkgs/python/[email protected]/git/index/fun.py:100

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #796886ad8af3651a — Environment-variable access.

pkgs/python/[email protected]/git/objects/commit.py:681

        env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #555dc07d2defb2fe — Filesystem access.

pkgs/python/[email protected]/git/objects/submodule/base.py:429

        with open(git_file, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb0c926fc24037a7 — Filesystem access.

pkgs/python/[email protected]/git/refs/log.py:267

        with open(filepath, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b507143d5a899d43 — Filesystem access.

pkgs/python/[email protected]/git/refs/log.py:363

            fd = open(filepath, "ab")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1612854d56e71617 — Filesystem access.

pkgs/python/[email protected]/git/refs/symbolic.py:152

            with open(cls._get_packed_refs_path(repo), "rt", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47b09a06f283af1a — Filesystem access.

pkgs/python/[email protected]/git/refs/symbolic.py:265

            with open(os.path.join(repodir, ref_path), "rt", encoding="UTF-8") as fp:  # type: ignore[arg-type]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #829f4ad0431a73f5 — Filesystem access.

pkgs/python/[email protected]/git/refs/symbolic.py:668

                with open(pack_file_path, "rb") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64e93186b3151fa0 — Filesystem access.

pkgs/python/[email protected]/git/refs/symbolic.py:696

                    with open(pack_file_path, "wb") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52c83de0ce18df0d — Filesystem access.

pkgs/python/[email protected]/git/refs/symbolic.py:738

            with open(abs_ref_path, "rb") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cef72f406f7bcd46 — Filesystem access.

pkgs/python/[email protected]/git/refs/symbolic.py:822

                with open(new_abs_path, "rb") as fd1:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e46df744c7fff78 — Filesystem access.

pkgs/python/[email protected]/git/refs/symbolic.py:824

                with open(cur_abs_path, "rb") as fd2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #183dce31fce1edd7 — Filesystem access.

pkgs/python/[email protected]/git/remote.py:918

        with open(fetch_head.abspath, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #119e747eceeed5f4 — Environment-variable access.

repo/base.py:235

        epath = path or os.getenv("GIT_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b91db1ebdf616e0 — Environment-variable access.

repo/base.py:271

                if "GIT_WORK_TREE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b5acb326c226188 — Environment-variable access.

repo/base.py:272

                    self._working_tree_dir = os.getenv("GIT_WORK_TREE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a572dc41b747f437 — Filesystem access.

repo/base.py:276

                    with open(osp.join(git_dir, "gitdir")) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f9fce4826b27696 — Environment-variable access.

repo/base.py:299

                if os.environ.get("GIT_COMMON_DIR") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1701b71b9ed9eed9 — Environment-variable access.

repo/base.py:303

                if "GIT_WORK_TREE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #886c0c18ce1b3e69 — Environment-variable access.

repo/base.py:304

                    self._working_tree_dir = os.getenv("GIT_WORK_TREE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54f073c916c6a875 — Filesystem access.

repo/base.py:341

            common_dir = (Path(self.git_dir) / "commondir").read_text().splitlines()[0].strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4405f84575b4c845 — Filesystem access.

repo/base.py:402

        with open(filename, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c1646a8a82e3960 — Filesystem access.

repo/base.py:408

        with open(filename, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6111a3238681bffc — Environment-variable access.

repo/base.py:683

            config_home = os.environ.get("XDG_CONFIG_HOME") or osp.join(os.environ.get("HOME", "~"), ".config")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d46db6f9c0b3c772 — Filesystem access.

repo/base.py:957

            with open(alternates_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #076a5a94d673a1b4 — Filesystem access.

repo/base.py:980

            with open(alternates_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db2adcb680b99293 — Filesystem access.

repo/base.py:1734

        with open(rebase_head_file, "rt") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b29dc381060bb3c8 — Filesystem access.

repo/fun.py:55

    with open(filename, "ab"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #040f774eb38925e4 — Environment-variable access.

repo/fun.py:69

        if (osp.isdir(osp.join(d, "objects")) or "GIT_OBJECT_DIRECTORY" in os.environ) and osp.isdir(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8d7390e918adcfd — Filesystem access.

repo/fun.py:93

        lines = Path(dotgit).read_text().splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #866657706248b310 — Filesystem access.

repo/fun.py:108

        with open(d) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f39f30933a57eae4 — Environment-variable access.

pkgs/python/[email protected]/git/util.py:122

        value = os.environ[name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7060f7945bf9caad — Environment-variable access.

pkgs/python/[email protected]/git/util.py:201

    old_value = os.getenv(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76b78f159c5db91d — Environment-variable access.

pkgs/python/[email protected]/git/util.py:202

    os.environ[name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c917b2bfa26fd232 — Environment-variable access.

pkgs/python/[email protected]/git/util.py:207

            del os.environ[name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #142b116c1343644d — Environment-variable access.

pkgs/python/[email protected]/git/util.py:209

            os.environ[name] = old_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f6891a153b829c3 — Environment-variable access.

pkgs/python/[email protected]/git/util.py:338

    PATHEXT = os.environ.get("PATHEXT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00a731d8d989f31b — Environment-variable access.

pkgs/python/[email protected]/git/util.py:374

        path = os.environ["PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66986b8f6eed4347 — Environment-variable access.

pkgs/python/[email protected]/git/util.py:870

                val = os.environ[evar]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc2fd89980dc73f3 — Filesystem access.

pkgs/python/[email protected]/git/util.py:1060

            with open(lock_file, mode="w"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c914f77951db081 — Filesystem access.

pkgs/python/[email protected]/setup.py:14

    return (Path(__file__).parent / path).read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2637de45861633ca — Filesystem access.

pkgs/python/[email protected]/setup.py:49

        with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc39ad04dcf7fcec — Filesystem access.

pkgs/python/[email protected]/setup.py:59

        with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Jinja2

python dependency

expand_more 7 low-confidence finding(s)

low env_fs dependency Excluded from app score #c5c34eec70a24dde — Filesystem access.

pkgs/python/[email protected]/src/jinja2/bccache.py:270

            f = open(filename, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #61c231235b4c74bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/jinja2/bccache.py:390

            code = self.client.get(self.prefix + bucket.key)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #2872152ef03df841 — Filesystem access.

pkgs/python/[email protected]/src/jinja2/environment.py:860

                with open(os.path.join(target, filename), "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdff6c7eb7e09c4e — Filesystem access.

pkgs/python/[email protected]/src/jinja2/environment.py:1611

            real_fp: t.IO[bytes] = open(fp, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d12993c9e85364eb — Filesystem access.

pkgs/python/[email protected]/src/jinja2/loaders.py:214

        with open(filename, encoding=self.encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32f8697572180643 — Filesystem access.

pkgs/python/[email protected]/src/jinja2/loaders.py:382

            with open(p, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09881e3827fee9bc — Filesystem access.

pkgs/python/[email protected]/src/jinja2/utils.py:171

    return open(filename, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Markdown

python dependency

expand_more 4 low-confidence finding(s)

low env_fs dependency Excluded from app score #c3242ad051a83740 — Filesystem access.

pkgs/python/[email protected]/markdown/__main__.py:106

        with open(
            options.configfile, mode="r", encoding=options.encoding
        ) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b22fe2f7ce9d18d4 — Filesystem access.

pkgs/python/[email protected]/markdown/core.py:434

                input_file = open(input, mode="r", encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #183e70d6abf43636 — Filesystem access.

pkgs/python/[email protected]/markdown/test_tools.py:151

                with open(infile, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bafc4ae8e09f88e — Filesystem access.

pkgs/python/[email protected]/markdown/test_tools.py:153

                with open(outfile, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

anthropic

python dependency

expand_more 122 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #a2d53aa7fe80296d — Environment-variable access.

pkgs/python/[email protected]/examples/agents.py:9

    anthropic = Anthropic(api_key=os.environ.get("ANTHROPIC_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow tooling Excluded from app score unreachable #9fd616ce1452d1c2 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents.py:15 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents.py:9 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents.py:15

    print("Created environment:", environment.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #e48ccfd443d93bd8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents.py:22 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents.py:9 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents.py:22

    print("Created agent:", agent.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #cb5913738532a9eb — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents.py:29 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents.py:9 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents.py:29

    print("Created session:", session.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #861b1a52a9f39ec8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents.py:45 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents.py:9 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents.py:45

            print(event.to_json(indent=2))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs tooling Excluded from app score unreachable #2b8309dbe3b95f38 — Environment-variable access.

pkgs/python/[email protected]/examples/agents_comprehensive.py:18

    anthropic = Anthropic(api_key=os.environ.get("ANTHROPIC_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ef34d75e99b8fe27 — Environment-variable access.

pkgs/python/[email protected]/examples/agents_comprehensive.py:20

    github_token = os.environ.get("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow tooling Excluded from app score unreachable #a3317c32d6950458 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:28 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:28

    print("Created environment:", environment.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #ba8603caa3a43209 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:32 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:32

    print("Created vault:", vault.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #0ca778b44d9f8213 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:43 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:43

    print("Created credential:", credential.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs tooling Excluded from app score unreachable #baddd58b91ec4b5f — Filesystem access.

pkgs/python/[email protected]/examples/agents_comprehensive.py:47

    with open(skill_md_path, "rb") as skill_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow tooling Excluded from app score unreachable #8045e647889bd8e0 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:52 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:52

    print("Created skill:", skill.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #ae2c8bd508c52af9 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:75 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:75

    print("Created agent v1:", agent_v1.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #4e5ab647a9ac7a90 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:86 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:86

    print("Patched agent to v2:", agent.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #f62e011b8aa03cb7 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:89 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:89

    print("Agent versions:", versions.data)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #1446d9a121320f42 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:97 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:97

    print("Created session:", session.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #fffa7c3fca8e9c75 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_comprehensive.py:108 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_comprehensive.py:108

            print(event.to_json(indent=2))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs tooling Excluded from app score unreachable #3efa627181bf5b87 — Environment-variable access.

pkgs/python/[email protected]/examples/agents_with_files.py:10

    anthropic = Anthropic(api_key=os.environ.get("ANTHROPIC_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow tooling Excluded from app score unreachable #a234da87ce12e2bd — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_with_files.py:16 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_with_files.py:16

    print("Created environment:", environment.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #8a4d9f4f9e028e80 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_with_files.py:32 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_with_files.py:32

    print("Created agent:", agent.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #171cf4c475f11ffc — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_with_files.py:38 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_with_files.py:38

    print("Uploaded file:", file.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #32a43360f9391fd8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_with_files.py:52 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_with_files.py:52

    print("Created session:", session.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #fd31ca32359b4d62 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_with_files.py:55 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_with_files.py:55

    print("Listed session resources:", resources.data)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow tooling Excluded from app score unreachable #476213f37a6fb2ba — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

pkgs/python/[email protected]/examples/agents_with_files.py:76 · flow /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-l4_hgnin/pkgs/python/[email protected]/examples/agents_with_files.py:76

            print(event.to_json(indent=2))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs tooling Excluded from app score unreachable #121a192709bf30b5 — Environment-variable access.

pkgs/python/[email protected]/examples/managed-agents-observe-tool-calls.py:46

    val = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #bb131ac2603fa885 — Environment-variable access.

pkgs/python/[email protected]/examples/managed-agents-observe-tool-calls.py:64

    workdir = os.environ.get("ANTHROPIC_WORKDIR", ".")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #52ea5b54378ac59a — Environment-variable access.

pkgs/python/[email protected]/examples/managed-agents-self-hosted-sandbox-worker.py:48

    val = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #9a3748077a780fa2 — Environment-variable access.

pkgs/python/[email protected]/examples/managed-agents-self-hosted-sandbox-worker.py:60

    workdir = os.environ.get("ANTHROPIC_WORKDIR", ".")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e87fb793dc9c84d5 — Environment-variable access.

pkgs/python/[email protected]/examples/workload_identity.py:70

        identity_token_provider=lambda: os.environ["ANTHROPIC_IDENTITY_TOKEN"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #3c49f8524caf70d1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/anthropic/_base_client.py:325

        return await self._client.request(self._page_cls, self._options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #a740abd41a8f8282 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:107

    if api_key is not None and os.environ.get("ANTHROPIC_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffe1d03fed23908b — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:109

    if auth_token is not None and os.environ.get("ANTHROPIC_AUTH_TOKEN"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f39263aa98dd2c7c — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:214

            api_key = os.environ.get("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #699682f718a448c7 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:215

            auth_token = os.environ.get("ANTHROPIC_AUTH_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53e18d40b3f8deac — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:221

            webhook_key = os.environ.get("ANTHROPIC_WEBHOOK_SIGNING_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d0b699afbdebb73 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:225

            base_url = os.environ.get("ANTHROPIC_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3759a7968a5decd0 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:234

        custom_headers_env = os.environ.get("ANTHROPIC_CUSTOM_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08ceab5cc2437abe — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:634

            api_key = os.environ.get("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ffe779c68d3f1ca — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:635

            auth_token = os.environ.get("ANTHROPIC_AUTH_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2648c03696cc0d91 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:641

            webhook_key = os.environ.get("ANTHROPIC_WEBHOOK_SIGNING_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abf471a92150f185 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:645

            base_url = os.environ.get("ANTHROPIC_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b0837737299e8f6 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_client.py:654

        custom_headers_env = os.environ.get("ANTHROPIC_CUSTOM_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #beb490e9e347637d — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_files.py:69

            return (path.name, path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0648250d5f0f623f — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_files.py:81

        return pathlib.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #052c2faf8dab5ca6 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_files.py:111

            return (path.name, await path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #550265e6d00df433 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_files.py:123

        return await anyio.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51d6d5817e500f0b — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_legacy_response.py:464

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00393d6638016e4a — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_legacy_response.py:477

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #061cf4fa78812d5a — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_models.py:120

            extra="allow", defer_build=coerce_boolean(os.environ.get("DEFER_PYDANTIC_BUILD", "true"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11b4c70b623db0cb — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_response.py:537

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01673f8f7e3acd5c — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_response.py:579

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #771f11084d68a43a — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/_utils/_logs.py:17

    env = os.environ.get("ANTHROPIC_LOG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc32614c063e4825 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_utils/_transform.py:250

            binary = data.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a32b3e360981dd20 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_utils/_transform.py:418

            binary = await anyio.Path(data).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #108fc0ecedaaae74 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/_utils/_utils.py:379

    contents = Path(path).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae80240d4fdcf953 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/_files.py:25

        files.append((path.relative_to(relative_to).as_posix(), path.read_bytes()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdd87a52dfcef7ce — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/_files.py:42

        files.append((path.relative_to(relative_to).as_posix(), await path.read_bytes()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2103eca87740f706 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/aws/_credentials.py:25

        value = os.environ.get(var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7f15dc0d6e232e2 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/aws/_credentials.py:90

    return os.environ.get("AWS_REGION") or os.environ.get("AWS_DEFAULT_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ef3bcad986d0223 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:77

    aws_region = os.environ.get("AWS_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50c7ec7534e3a2f7 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:165

            api_key = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #483ec1466a6278eb — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:190

            base_url = os.environ.get("ANTHROPIC_BEDROCK_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39d2d33e94c1d4ba — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:345

            api_key = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56b89bbff3e4a76c — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:370

            base_url = os.environ.get("ANTHROPIC_BEDROCK_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9567335ab188d392 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/bedrock/_mantle.py:144

        base_url = os.environ.get("ANTHROPIC_BEDROCK_MANTLE_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #801d38afbf519a56 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:33

    federation_rule_id = os.environ.get(ENV_FEDERATION_RULE_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #709f2db4360c17d0 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:34

    organization_id = os.environ.get(ENV_ORGANIZATION_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b98441fa93259990 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:35

    has_literal_token = ENV_IDENTITY_TOKEN in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c09c3fa26bade45d — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:50

            value = os.environ.get(ENV_IDENTITY_TOKEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76de3282136e0a1d — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:65

        service_account_id=os.environ.get(ENV_SERVICE_ACCOUNT_ID),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #007b27f2992c5822 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:69

        workspace_id=os.environ.get(ENV_WORKSPACE_ID) or None,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b085ddbc575bf64 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:70

        scope=os.environ.get(ENV_SCOPE),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #386ce25c60094037 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:108

    if os.environ.get(ENV_API_KEY):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1c345995b71b1e8 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:112

    auth_token = os.environ.get(ENV_AUTH_TOKEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90c0ff03a7dd7309 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:119

    env_explicit = bool(os.environ.get(ENV_PROFILE) or os.environ.get(ENV_CONFIG_DIR))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf6bf3680718c857 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:78

    env = os.environ.get(ENV_CONFIG_DIR)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c83ab60a51a8f7e0 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:82

        appdata = os.environ.get("APPDATA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bff0ea95a364a7ea — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:92

        name = (_config_dir() / "active_config").read_text(encoding="utf-8").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b90ea222a4eb476 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:105

    env = os.environ.get(ENV_PROFILE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa61c90befee02b9 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:224

    env = os.environ.get(ENV_IDENTITY_TOKEN_FILE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72a76146d3a98f0d — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:240

    if os.environ.get(ENV_PROFILE) or os.environ.get(ENV_CONFIG_DIR):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24c277c421d123ed — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:244

    if os.environ.get(ENV_FEDERATION_RULE_ID) and os.environ.get(ENV_ORGANIZATION_ID):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3ab1234f21c3e7b — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:245

        if os.environ.get(ENV_IDENTITY_TOKEN_FILE) or os.environ.get(ENV_IDENTITY_TOKEN):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8696c57f599f5d7a — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:96

            v = os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #131e2ccef05c256b — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:110

            v = os.environ.get(ENV_IDENTITY_TOKEN_FILE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a0efdc0e7a1ef40 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:136

        value = os.environ.get(self._env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd8a68f81327894d — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:284

            raw = self._config_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e27f54ec02a45ee — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:374

            creds: Dict[str, Any] = _wrap_secret_fields(json.loads(path.read_text(encoding="utf-8")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #99024b4881e20a6d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:538

            resp = self._get_http_client().post(
                f"{self._base_url}{TOKEN_ENDPOINT}",
                # Serialized inline so the raw request bytes are never bound
                # to a local here; SecretStr values unwrap at dump time.
                content=_json_dumps_secrets(body),
                headers={
                    "Content-Type": "application/json",
                    # oauth-2025-04-20 unlocks the token endpoint family. Do
                    # NOT send oidc-federation-2026-04-01 — that's a routing
                    # switch that misroutes refresh_token grants to the Go
                    # userauth handler, which only accepts jwt-bearer.
                    "anthropic-beta": OAUTH_API_BETA_HEADER,
                    "User-Agent": _user_agent(),
                },
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #1143dab08dfbb9be — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:746

            content = self._path.read_text(encoding="utf-8").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #e97376fd6a701833 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/anthropic/lib/credentials/_workload.py:259

            resp = self._http_client.post(
                url,
                # Serialized inline so the raw request bytes are never bound
                # to a local here; SecretStr values unwrap at dump time.
                content=_json_dumps_secrets(body),
                headers={
                    "anthropic-beta": _JWT_BEARER_BETA_HEADER,
                    "Content-Type": "application/json",
                    "User-Agent": _user_agent(),
                },
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #a95edb11ae0eff61 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/environments/_worker.py:160

    resolved = value or os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b78b6d6f0ea9cb72 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/foundry.py:157

        api_key = api_key if api_key is not None else os.environ.get("ANTHROPIC_FOUNDRY_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d744522e1dd22ce5 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/foundry.py:158

        resource = resource if resource is not None else os.environ.get("ANTHROPIC_FOUNDRY_RESOURCE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6371e053c821036 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/foundry.py:159

        base_url = base_url if base_url is not None else os.environ.get("ANTHROPIC_FOUNDRY_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9be1be64a2f8f01d — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/foundry.py:382

        api_key = api_key if api_key is not None else os.environ.get("ANTHROPIC_FOUNDRY_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eaea649d71c3ba4d — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/foundry.py:383

        resource = resource if resource is not None else os.environ.get("ANTHROPIC_FOUNDRY_RESOURCE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69bdc99e6dcac4f2 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/foundry.py:384

        base_url = base_url if base_url is not None else os.environ.get("ANTHROPIC_FOUNDRY_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1163b869c2d00295 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:247

            location = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_LOCATION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1c1d8a7c8c41141 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:252

            project = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #851351e885010542 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:254

            project = os.environ.get("GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #324a7ee14e50b5b1 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:260

            base_url = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #feca87562cabb8d5 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:266

            workspace_id = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aebdb601199a5a15 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:493

            location = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_LOCATION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7fa867e808826082 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:498

            project = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47b1f336c0a09377 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:500

            project = os.environ.get("GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #699c62b34f82cc28 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:506

            base_url = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e25b9036a189bd3f — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:510

            workspace_id = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #4893ebd0ed70e435 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/_beta_builtin_memory_tool.py:356

        return full_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #8704c676d08b50e4 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/_beta_builtin_memory_tool.py:653

        return await full_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #957bed387301699f — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/_skills.py:138

                with zf.open(info) as src, open(target, "wb") as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #1d44e145303355da — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/_skills.py:164

            with extracted as src, open(target, "wb") as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #033fcbfcd9da4e8e — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:123

    return {k: v for k, v in os.environ.items() if not k.startswith("ANTHROPIC_")}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #bc4a46988f220987 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:512

            text = target.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #c00437b5d51870d5 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:540

            target.write_text(content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #c8551666125caab7 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:570

            text = target.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #07e0f9947e1726b2 — Filesystem access.

pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:582

            target.write_text(updated)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3807a039c32f20e4 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:46

        project_id = os.environ.get("ANTHROPIC_VERTEX_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b828cb777bb24aaa — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:114

            region = os.environ.get("CLOUD_ML_REGION", NOT_GIVEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0b3bcfe8f8aa17b — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:121

            base_url = os.environ.get("ANTHROPIC_VERTEX_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67b3eb64d292f170 — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:278

            region = os.environ.get("CLOUD_ML_REGION", NOT_GIVEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac065e55a148188b — Environment-variable access.

pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:285

            base_url = os.environ.get("ANTHROPIC_VERTEX_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

colorama

python dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #18b94dd7595e2d63 — Environment-variable access.

pkgs/python/[email protected]/colorama/ansitowin32.py:51

        if 'PYCHARM_HOSTED' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

curl_cffi

python dependency

expand_more 14 low-confidence finding(s)

low env_fs dependency Excluded from app score #2925e617c62177ed — Filesystem access.

pkgs/python/[email protected]/curl_cffi/cli/output.py:213

        with open(output_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89debc5bc96ba5ff — Filesystem access.

pkgs/python/[email protected]/curl_cffi/cli/request.py:105

            files[field_name] = open(filepath, "rb")  # noqa: SIM115

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #218c7e502b75a3a5 — Filesystem access.

pkgs/python/[email protected]/curl_cffi/cli/run.py:113

                        with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e7aa6ae78141d5c — Filesystem access.

pkgs/python/[email protected]/curl_cffi/cli/run.py:240

        with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5612b361cd2bc535 — Environment-variable access.

pkgs/python/[email protected]/curl_cffi/curl.py:25

        path = os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4c48a3c6c1801c5 — Environment-variable access.

pkgs/python/[email protected]/curl_cffi/requests/session.py:289

                os.environ.get("REQUESTS_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a58ff3df592ffc3c — Environment-variable access.

pkgs/python/[email protected]/curl_cffi/requests/session.py:290

                or os.environ.get("CURL_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0a24d0162c05d51b — Environment-variable access.

pkgs/python/[email protected]/scripts/build.py:21

        or os.environ.get("CIBW_PLATFORM") == "android"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ec9666ea40f567e8 — Environment-variable access.

pkgs/python/[email protected]/scripts/build.py:22

        or os.environ.get("ANDROID_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7b05c18e0767860c — Environment-variable access.

pkgs/python/[email protected]/scripts/build.py:23

        or os.environ.get("ANDROID_DATA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f02b85950828a636 — Environment-variable access.

pkgs/python/[email protected]/scripts/build.py:24

        or os.environ.get("TERMUX_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #41278eecd644d815 — Filesystem access.

pkgs/python/[email protected]/scripts/build.py:29

    with open(Path(__file__).parent.parent / "libs.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c6913e1f28848b28 — Environment-variable access.

pkgs/python/[email protected]/scripts/build.py:53

                if "CI" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #44baa605c21ddd4f — Filesystem access.

pkgs/python/[email protected]/scripts/build.py:194

with open(root_dir / "ffi/cdef.c") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

duckduckgo-search

python dependency

expand_more 5 low-confidence finding(s)

low env_fs dependency Excluded from app score #0825cc158de7ece2 — Filesystem access.

pkgs/python/[email protected]/duckduckgo_search/cli.py:50

    with open(jsonfile, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87fc4e0419fb7823 — Filesystem access.

pkgs/python/[email protected]/duckduckgo_search/cli.py:55

    with open(csvfile, "w", newline="", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aed0f555816f6606 — Filesystem access.

pkgs/python/[email protected]/duckduckgo_search/cli.py:100

            with open(os.path.join(dir_path, filename[:200]), "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #718fa75218693fa8 — Environment-variable access.

pkgs/python/[email protected]/duckduckgo_search/duckduckgo_search.py:60

        ddgs_proxy: str | None = os.environ.get("DDGS_PROXY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #8249bb63a565f755 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/duckduckgo_search/duckduckgo_search.py:119

            resp = self.client.request(
                method,
                url,
                params=params,
                content=content,
                data=data,
                headers=headers,
                cookies=cookies,
                json=json,
                timeout=timeout or self.timeout,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

eventlet

python dependency

expand_more 20 low-confidence finding(s)

low env_fs dependency Excluded from app score #9003873f1e235d17 — Environment-variable access.

pkgs/python/[email protected]/eventlet/__init__.py:107

if os.environ.get("EVENTLET_TESTS") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #d0526fc595508148 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/eventlet/db_pool.py:407

            self._pool.put(self)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #36ca04c02cb85d31 — Filesystem access.

pkgs/python/[email protected]/eventlet/green/http/cookiejar.py:1839

        with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9a1406260fdd0fe — Filesystem access.

pkgs/python/[email protected]/eventlet/green/http/cookiejar.py:1931

        with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d5001d0c9120639 — Filesystem access.

pkgs/python/[email protected]/eventlet/green/http/cookiejar.py:2126

        with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0d14cfe13f54f49 — Filesystem access.

pkgs/python/[email protected]/eventlet/green/http/server.py:738

            f = open(path, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7cf409cf7e80fa41 — Environment-variable access.

pkgs/python/[email protected]/eventlet/green/http/server.py:1088

        env = copy.deepcopy(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b92e6304b89a584 — Environment-variable access.

pkgs/python/[email protected]/eventlet/green/socket.py:20

if os.environ.get("EVENTLET_NO_GREENDNS", '').lower() != 'yes':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f29bb0b8621d0a86 — Filesystem access.

pkgs/python/[email protected]/eventlet/greenio/py3.py:43

            with open(name, mode) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70e33d426d8c277e — Environment-variable access.

pkgs/python/[email protected]/eventlet/hubs/__init__.py:66

        mod = os.environ.get('EVENTLET_HUB', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e7f9fd94a69eeb0 — Environment-variable access.

pkgs/python/[email protected]/eventlet/patcher.py:492

    if "PYTEST_CURRENT_TEST" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6941ae4ea5a31e68 — Filesystem access.

pkgs/python/[email protected]/eventlet/patcher.py:745

    with open(sys.argv[0]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91433261139cf931 — Environment-variable access.

pkgs/python/[email protected]/eventlet/support/greendns.py:94

if (os.environ.get('EVENTLET_DEPRECATED_EAI_NODATA', '').lower() in ('1', 'y', 'yes')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87c7a8b843b1816a — Filesystem access.

pkgs/python/[email protected]/eventlet/support/greendns.py:211

            with open(self.fname, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9944207defb3e4bd — Environment-variable access.

pkgs/python/[email protected]/eventlet/tpool.py:45

_nthreads = int(os.environ.get('EVENTLET_THREADPOOL_SIZE', 20))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #75e23108e27d3309 — Filesystem access.

pkgs/python/[email protected]/examples/distributed_websocket_chat.py:97

        return [open(os.path.join(
                     os.path.dirname(__file__),
                     'websocket_chat.html')).read() % dict(port=port)]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #5a9fb35def29fd3c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/feedscraper.py:12

    d = feedparser.parse(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #d726b5ebfa989ae0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/producer_consumer.py:26

        data = urlopen(url).read().decode()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #da72f14bfd25569e — Filesystem access.

pkgs/python/[email protected]/examples/websocket.py:34

        return [open(os.path.join(
                     os.path.dirname(__file__),
                     'websocket.html')).read()]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #66ccf75fcb317306 — Filesystem access.

pkgs/python/[email protected]/examples/websocket_chat.py:33

        return [open(html_path).read() % {'port': PORT}]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

fastlogging

python dependency

expand_more 9 low-confidence finding(s)

low env_fs dependency Excluded from app score #e11e3973caf92c6d — Filesystem access.

pkgs/python/[email protected]/fastlogging/fastlogging.py:173

                    self.F = open(pathName, "a", encoding=Logger.encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #483c58a37cdbdf75 — Filesystem access.

pkgs/python/[email protected]/fastlogging/fastlogging.py:334

            with open(path_join(dirName, dstFileName), "wb") as Z:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de1902dde25e5f87 — Filesystem access.

pkgs/python/[email protected]/fastlogging/fastlogging.py:335

                Z.write(Logger.compress[0].compress(open(pathName, "rb").read()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0215e59606d739b2 — Filesystem access.

pkgs/python/[email protected]/fastlogging/fastlogging.py:337

        self.F = open(pathName, "a", encoding=Logger.encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d040b72810d8fddd — Filesystem access.

pkgs/python/[email protected]/fastlogging/optimize.py:221

    tree = ast.parse(open(fileName).read())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d8c433e57d93610 — Filesystem access.

pkgs/python/[email protected]/fastlogging/optimize.py:241

    with open(os.path.splitext(fileName)[0] + ".pyc", 'wb') as F:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6bc9406a7a8e208 — Filesystem access.

pkgs/python/[email protected]/pyorcy.py:34

    with open(path_out, 'w') as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c7d1a4ca47cfbe5 — Filesystem access.

pkgs/python/[email protected]/pyorcy.py:35

        for line in open(path_in):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bad1fc1d8eaf40b — Filesystem access.

pkgs/python/[email protected]/setup.py:102

with open(os.path.join(BASEDIR, 'README.rst'), encoding='utf-8') as F:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

flask

python dependency

expand_more 21 low-confidence finding(s)

low env_fs dependency Excluded from app score #a32fcff7f73a2bd8 — Filesystem access.

pkgs/python/[email protected]/src/flask/app.py:359

            return open(path, mode)  # pyright: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #141b8a5b228df191 — Filesystem access.

pkgs/python/[email protected]/src/flask/app.py:361

        return open(path, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90444ddfc9b5ce82 — Filesystem access.

pkgs/python/[email protected]/src/flask/app.py:381

            return open(path, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5fd9b3ed8ea432f — Filesystem access.

pkgs/python/[email protected]/src/flask/app.py:383

        return open(path, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8ce128733fdf157 — Environment-variable access.

pkgs/python/[email protected]/src/flask/app.py:611

        if os.environ.get("FLASK_RUN_FROM_CLI") == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab8fcf57e5381f26 — Environment-variable access.

pkgs/python/[email protected]/src/flask/app.py:627

            if "FLASK_DEBUG" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #556f72f1a68dec64 — Filesystem access.

pkgs/python/[email protected]/src/flask/blueprints.py:126

            return open(path, mode)  # pyright: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c7f0d0a83709adf — Filesystem access.

pkgs/python/[email protected]/src/flask/blueprints.py:128

        return open(path, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2744f50561484bd7 — Environment-variable access.

pkgs/python/[email protected]/src/flask/cli.py:481

    os.environ["FLASK_DEBUG"] = "1" if value else "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfdd27db0e16f2e4 — Environment-variable access.

pkgs/python/[email protected]/src/flask/cli.py:675

        os.environ["FLASK_RUN_FROM_CLI"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0023fa7fb09d9ffe — Environment-variable access.

pkgs/python/[email protected]/src/flask/cli.py:766

        if key in os.environ or value is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd8dde223a68b6b8 — Environment-variable access.

pkgs/python/[email protected]/src/flask/cli.py:769

        os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb81281e3762efff — Environment-variable access.

pkgs/python/[email protected]/src/flask/cli.py:1028

    startup = os.environ.get("PYTHONSTARTUP")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46fb40abd75fbace — Filesystem access.

pkgs/python/[email protected]/src/flask/cli.py:1030

        with open(startup) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7345483b8402d440 — Environment-variable access.

pkgs/python/[email protected]/src/flask/config.py:114

        rv = os.environ.get(variable_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2286063a4ecde9f — Environment-variable access.

pkgs/python/[email protected]/src/flask/config.py:154

        for key in sorted(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc5d30b612143e7e — Environment-variable access.

pkgs/python/[email protected]/src/flask/config.py:158

            value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5bf31a2bd6defcc — Filesystem access.

pkgs/python/[email protected]/src/flask/config.py:208

            with open(filename, mode="rb") as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95e13830ce82f517 — Filesystem access.

pkgs/python/[email protected]/src/flask/config.py:293

            with open(filename, "r" if text else "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ccd6df3036a0c22e — Environment-variable access.

pkgs/python/[email protected]/src/flask/helpers.py:32

    val = os.environ.get("FLASK_DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c123e972977242be — Environment-variable access.

pkgs/python/[email protected]/src/flask/helpers.py:43

    val = os.environ.get("FLASK_SKIP_DOTENV")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

gevent

python dependency

expand_more 996 low-confidence finding(s)

low env_fs dependency Excluded from app score #c214eb1e886d0477 — Environment-variable access.

pkgs/python/[email protected]/_setupares.py:36

cflags = _distutils_cflags + ((' ' + os.environ['CFLAGS']) if os.environ.get("CFLAGS") else '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8483ab880fc946ae — Environment-variable access.

pkgs/python/[email protected]/_setupares.py:52

if 'GEVENT_MANYLINUX' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d99c2d42d87ca23 — Filesystem access.

pkgs/python/[email protected]/_setupares.py:85

            with open('configure-output.txt', 'r') as t:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #080dd87b5daecd8c — Environment-variable access.

pkgs/python/[email protected]/_setuplibev.py:109

        if os.environ.get('GEVENTSETUP_EV_VERIFY') is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3d9016f97f6ad57 — Environment-variable access.

pkgs/python/[email protected]/_setuplibev.py:115

                ('EV_VERIFY', os.environ['GEVENTSETUP_EV_VERIFY']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61dc861cc108160f — Environment-variable access.

pkgs/python/[email protected]/_setuputils.py:30

RUNNING_ON_TRAVIS = os.environ.get('TRAVIS')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bf894feb2edc53b — Environment-variable access.

pkgs/python/[email protected]/_setuputils.py:31

RUNNING_ON_APPVEYOR = os.environ.get('APPVEYOR')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa3535a062be5e68 — Environment-variable access.

pkgs/python/[email protected]/_setuputils.py:32

RUNNING_ON_GITHUB_ACTIONS = os.environ.get('GITHUB_ACTIONS')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51f78cf36e26bab7 — Filesystem access.

pkgs/python/[email protected]/_setuputils.py:52

    with open(os.path.join(THIS_DIR, *names)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f80fad2b8b154054 — Environment-variable access.

pkgs/python/[email protected]/_setuputils.py:85

    value = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28e028afb64876e3 — Environment-variable access.

pkgs/python/[email protected]/_setuputils.py:193

    env = env or os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #506fcb9e27458c81 — Environment-variable access.

pkgs/python/[email protected]/benchmarks/bench_spawn.py:157

        ','.join([k for k in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #60699db3c253fa2e — Environment-variable access.

pkgs/python/[email protected]/docs/conf.py:20

os.environ['PURE_PYTHON'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #e01705174d103ca7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/concurrent_download.py:26

    data = requests.get(url).text

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #4f05fd2bcf54a669 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/psycopg2_pool.py:64

        self.pool.put(item)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #9860ec6bfeca4e23 — Environment-variable access.

pkgs/python/[email protected]/examples/webchat/application.py:9

os.environ['DJANGO_SETTINGS_MODULE'] = 'webchat.settings'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #dec4feb1549e01a8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/webproxy.py:84

            response = urllib2.urlopen(path)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #68e9d4b543e96d21 — Filesystem access.

pkgs/python/[email protected]/scripts/releases/appveyor-download.py:28

    with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #ed793645c3c067b2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/scripts/releases/appveyor-download.py:50

    response = requests.get(url, headers=make_auth_headers())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #bb1d0c7e9047ca16 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/scripts/releases/appveyor-download.py:64

        response = requests.get(url, headers=make_auth_headers())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #d94d42fefe105361 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/scripts/releases/appveyor-download.py:94

    response = requests.get(url, headers=headers, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #82642f0edcec64ff — Filesystem access.

pkgs/python/[email protected]/scripts/releases/appveyor-download.py:96

        with open(filename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #93f68ba23f58c219 — Filesystem access.

pkgs/python/[email protected]/scripts/releases/appveyor-download.py:103

    with open(filename, 'rb') as fzip:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ec7a49edf706057 — Environment-variable access.

pkgs/python/[email protected]/setup.py:42

    if not os.environ.get('PYTHON_EXE'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4348e7adc0409905 — Environment-variable access.

pkgs/python/[email protected]/setup.py:43

        os.environ['PYTHON_EXE'] = 'pypy' if PYPY else 'python'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #024756089ae737d0 — Environment-variable access.

pkgs/python/[email protected]/setup.py:44

    if not os.environ.get('PYEXE'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cda302dcc7032d84 — Environment-variable access.

pkgs/python/[email protected]/setup.py:45

        os.environ['PYEXE'] = os.environ['PYTHON_EXE']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0aab0fcabf6a4e04 — Environment-variable access.

pkgs/python/[email protected]/setup.py:465

if os.getenv('READTHEDOCS'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e852707101ac106d — Environment-variable access.

pkgs/python/[email protected]/setup.py:468

    new_path = os.environ['PATH'] + os.pathsep + os.path.dirname(sys.executable)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #215eb63b14f00fa4 — Environment-variable access.

pkgs/python/[email protected]/setup.py:469

    os.environ['PATH'] = new_path

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8b593a0db1290c2 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/_compat.py:25

GLOBAL_PURE_PYTHON = bool(PYPY or os.environ.get('PURE_PYTHON'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bac61614259896c3 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/_compat.py:48

_GEVENT_PURE_PYTHON = os.environ.get('GEVENT_PURE_PYTHON')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b7250f3fcb79cd8 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/_config.py:139

        result = os.environ.get(self.environment_key, self.default)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66b2e14097b96b28 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/_ffi/__init__.py:24

GEVENT_DEBUG_LEVEL = vars()[os.getenv("GEVENT_DEBUG", 'CRITICAL').upper()]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #356ffb254b85d7d2 — Filesystem access.

pkgs/python/[email protected]/src/gevent/_util.py:330

        with open(path, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc521da5df55ed9c — Filesystem access.

pkgs/python/[email protected]/src/gevent/_util.py:335

            with open(path, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a81ee164a61d50c7 — Filesystem access.

pkgs/python/[email protected]/src/gevent/libev/_corecffi_build.py:36

    with open(os.path.join(thisdir, name), 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #171ac6a0e8c18cd7 — Filesystem access.

pkgs/python/[email protected]/src/gevent/libuv/_corecffi_build.py:41

    with open(os.path.join(thisdir, name), 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca72f973adeeabea — Environment-variable access.

pkgs/python/[email protected]/src/gevent/monkey/__init__.py:286

    DISABLE_QUEUE_PATCH = os.environ.get('GEVENT_MONKEY_DISABLE_QUEUE_QUEUE', 'false')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9740adf038ba4521 — Filesystem access.

pkgs/python/[email protected]/src/gevent/resolver/_hostsfile.py:74

        with open(self.fname, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3418b186a4ccdb5f — Environment-variable access.

pkgs/python/[email protected]/src/gevent/subprocess.py:1230

                comspec = os.environ.get("COMSPEC", "cmd.exe")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6d555765a0212a7 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/coveragesite/sitecustomize.py:8

    if not os.environ.get('GEVENT_TEST_SKIP_COVERAGE'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #d1d98425e4e988e5 — Filesystem access.

pkgs/python/[email protected]/src/gevent/testing/monkey_test.py:134

with open(test_filename, encoding='utf-8') as module_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #f69f05e639f571ac — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/monkey_test.py:148

remove_file = not os.environ.get('GEVENT_DEBUG')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c16d2dc6f8bcd5f — Filesystem access.

pkgs/python/[email protected]/src/gevent/testing/openfiles.py:81

        with open(tmpname) as fobj: # pylint:disable=unspecified-encoding

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1ebaa3e8317b561 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/patched_tests_setup.py:332

if 'thread' in os.getenv('GEVENT_FILE', ''):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c91d669e8dbc89f5 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/resources.py:102

        resource_str = os.environ.get('GEVENTTEST_USE_RESOURCES')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cbbe422044d320ab — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:44

CFFI_BACKEND = PYPY or LIBUV or 'cffi' in os.getenv('GEVENT_LOOP', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #773810acc1b15a7d — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:52

RUN_LEAKCHECKS = os.getenv('GEVENTTEST_LEAKCHECK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04d86d4344a5e947 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:53

RUN_COVERAGE = os.getenv("COVERAGE_PROCESS_START") or os.getenv("GEVENTTEST_COVERAGE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0f48426812b68c7 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:104

RUNNING_ON_GITHUB_ACTIONS = os.environ.get('GITHUB_ACTIONS')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51121f5a9c6173f6 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:105

RUNNING_ON_TRAVIS = os.environ.get('TRAVIS') or RUNNING_ON_GITHUB_ACTIONS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d578a1377dc20f0e — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:106

RUNNING_ON_APPVEYOR = os.environ.get('APPVEYOR')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #935aa88be2f717ae — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:109

RUNNING_ON_MANYLINUX = os.environ.get('GEVENT_MANYLINUX')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efca2ad190c4b921 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:112

RUNNING_ON_MUSLLINUX = 'musllinux' in os.environ.get('GEVENT_MANYLINUX_NAME', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70fefff5a69f6433 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:145

RESOLVER_ARES = os.getenv('GEVENT_RESOLVER') == 'ares'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7fb5044fcff6503 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:146

RESOLVER_DNSPYTHON = os.getenv('GEVENT_RESOLVER') == 'dnspython'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #558fcb9233ed5935 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:40

DEFAULT_NWORKERS = int(os.environ.get('NWORKERS') or max(AVAIL_NWORKERS, 4))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a211b033ac180493 — Filesystem access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:530

            with open(abs_filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #300d1f073df92fda — Filesystem access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:597

        with open(_package_relative_filename(filename, package)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80f61c8da3633fbd — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:725

        return not bool(os.environ.get(key))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f49a2fa12be0a51 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:745

        os.environ['PYTHONWARNINGS'] = ','.join(defaults + [

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55e474702332c7c5 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:776

        os.environ['PYTHONFAULTHANDLER'] = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f2e64bc8e0ff805 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:779

        os.environ['GEVENT_DEBUG'] = 'debug'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1911bdc1da518ac0 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:784

        os.environ['PYTHONTRACEMALLOC'] = '10'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #591c9425d03f42fa — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:788

        os.environ['PYTHONDEVMODE'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c384e37dfa0528c — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:796

        os.environ['PYTHONMALLOC'] = 'debug'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c27f0386191cbc77 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:799

        os.environ['PYTHONMALLOC'] = 'default'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44e65e960562ae8a — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:800

        os.environ['PYTHONDEVMODE'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e978899f46a3719f — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:803

    os.environ.pop('PYTHONSAFEPATH', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c2b8f9e8a0873de — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:806

        k: os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d33c1072b170a73 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:807

        for k in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #147fd35583eb062d — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:890

    os.environ['GEVENTTEST_USE_RESOURCES'] = unparse_resources(options.use)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc51165d39861689 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:898

    if 'GEVENTTEST_QUIET' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee6875bb69718bbe — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:899

        os.environ['GEVENTTEST_QUIET'] = str(options.quiet)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8acbcfd5aff5d915 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:906

    if options.coverage or os.environ.get("GEVENTTEST_COVERAGE"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69be29b9a33cc9cf — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:911

            cov_config = os.environ['COVERAGE_PROCESS_START'] = os.path.abspath(".coveragerc")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32872953a6d780b1 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:913

                cov_config = os.environ['COVERAGE_PROCESS_START'] = os.path.abspath(".coveragerc-pypy")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #391e2810b2b9ca32 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:918

            os.environ['PYTHONPATH'] = site_dir + os.pathsep + os.environ.get("PYTHONPATH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #238268d7638d231b — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:922

            os.environ['COVERAGE_FILE'] = os.path.abspath(".") + os.sep + ".coverage"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fdcb7276896ca22 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:925

            print("Enabling coverage to", os.environ['COVERAGE_FILE'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ea67d0d3bcafac3 — Filesystem access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:936

        with open(options.config) as f: # pylint:disable=unspecified-encoding

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b54a9b9ed41eb0da — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/testrunner.py:965

            os.environ['PYTHONPATH'] = os.environ.get('PYTHONPATH', "") + os.pathsep + package_dir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #361aba2f4fd8de74 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/util.py:27

QUIET = validate_bool(os.environ.get('GEVENTTEST_QUIET', '0'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abda848a3fdf1024 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/util.py:212

    env = (env or os.environ).copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc7c159295bb67b6 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/util.py:235

    if not os.environ.get('DO_NOT_SETPGRP'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a13ee0d9bc2aec51 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/util.py:243

        env = env.copy() if env else os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b9517bdce2c0930 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/util.py:511

    if 'PYTHONPATH' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef9ac4936a005767 — Environment-variable access.

pkgs/python/[email protected]/src/gevent/testing/util.py:514

    path = os.environ['PYTHONPATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe534a998ae80f4d — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_asyncore.py:378

        with open(os_helper.TESTFN, 'wb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #743fb252f0b7dd0d — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_asyncore.py:406

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc0b4a054ec0d5a0 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:777

        with open(__file__, 'rb') as body:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #2fb4356a09927936 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1558

        self.conn = client.HTTPSConnection(HOST, self.port,
                source_address=('', self.source_port))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fb374312a982d996 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1695

        h = client.HTTPSConnection(HOST, TimeoutTest.PORT, timeout=30)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9e8538477cc46959 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1703

            h = client.HTTPSConnection('self-signed.pythontest.net', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bf0480d36a2ad977 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1714

            h = client.HTTPSConnection('self-signed.pythontest.net', 443,
                                       context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #25d54dad75a44c33 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1727

            h = client.HTTPSConnection('www.python.org', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4a57765dacf5ffb5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1746

                h = client.HTTPSConnection(selfsigned_pythontestdotnet, 443,
                                           context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #87c56c13ff50cdff — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1775

            h = client.HTTPSConnection('self-signed.pythontest.net', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5926fa27bfa7405f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1784

        h = client.HTTPSConnection('localhost', server.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e75d3bc7d2bdf0e1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1795

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6e51858ec5f14133 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1808

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #27fff31d5af1c437 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1813

            h = client.HTTPSConnection('localhost', server.port,
                                       context=context, check_hostname=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5e738f571f721f58 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1820

            h = client.HTTPSConnection('localhost', server.port,
                                       context=context, check_hostname=False)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3e7ca5d064fc9441 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1830

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3ab7c5130119898e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1839

            h = client.HTTPSConnection('localhost', server.port,
                                       context=context, check_hostname=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4670e53b9b0b9e3a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1860

            c = client.HTTPSConnection(hp)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7cd2b9fa2a5a21e6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1869

        h = client.HTTPSConnection('localhost', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4d124ec00d3365e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1874

        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #462716eca42667c4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1881

            h = client.HTTPSConnection('localhost', 443, context=context,
                                       cert_file=CERT_localhost)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #8c38fb062382b63b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1955

        with open(os_helper.TESTFN, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd96e4ae0558912e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1957

        with open(os_helper.TESTFN, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf1e507389f0bd94 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1970

        with open(os_helper.TESTFN, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c6aa6817a0e5a1c — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1972

        with open(os_helper.TESTFN, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca077a3999786b99 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_select.py:32

        with open(__file__, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #974d4195fc12ffd6 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:59

        with open("/dev/vsock", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ffef5780edb4eac — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:5758

        f = open("/proc/modules", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d86b79d7abcd917 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6132

        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47dd0ae716196ae9 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6135

        with open(os_helper.TESTFN, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f916c85e5187111 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6168

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4a0cd553105f0e8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6204

        with open(filename, 'wb'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08e87baa05b4544b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6206

        file = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d568a147e03b364 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6222

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #085008dd61a98075 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6239

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8abdd5d8a79f6bd3 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6260

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbbb39ffb81837b4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6281

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd4514bd0b813bc2 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6300

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6988ecc4cdae814 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6316

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be48c984fbcdd607 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6334

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46dc3790d3fb5a05 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6351

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #097b076fd8602904 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6356

        with open(os_helper.TESTFN, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58dd6f5fcc81cd77 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6361

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d15a253a09e2c6b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:168

        with open("/etc/os-release", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43cf2ddbc3624883 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:508

        with open(CAFILE_CACERT, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81c01b0ab4475dc0 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:1476

        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2791fc9bb2ac641a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:1479

        with open(CAFILE_NEURONIO) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b6f741b119ecca6 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:1647

        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c09337a85426544 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:1714

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29fac57aada5fe91 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:2139

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f6a5d9eedabf493 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:3575

        with open(CERTFILE, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #69706f1b5cd8e6da — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:3582

        f = urllib.request.urlopen(url, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #2d789a862f9c6fb2 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:4365

        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f8651c139629ad8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:4374

                with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6fd77aee746dc75e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:4769

        with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e8db5120594e141 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:4838

        with unittest.mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e56a638a33fdca7 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:4839

            os.environ['SSLKEYLOGFILE'] = os_helper.TESTFN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5276df55dcdac8f — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:4840

            self.assertEqual(os.environ['SSLKEYLOGFILE'], os_helper.TESTFN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61403391d1d1c28a — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:277

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f46e2220098df35 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:761

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1803dde5944f6858 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:814

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #838d0a9d09c15593 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:820

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee6ad3ed2395fd0d — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:826

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8826c7129d5fc91 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:832

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f65d335913035c4 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:1627

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #517f73b86c1eb927 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:1949

                                  cwd=os.curdir, env=os.environ, user=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f08fde01eae20533 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:1996

                                  cwd=os.curdir, env=os.environ, group=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4cc8cc9d9a0abcf0 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2048

                                  cwd=os.curdir, env=os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a63bf15ef272048f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2225

        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd8f6ce430f9eb23 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2248

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aad98a3294a26564 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2258

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a0d6d852f954df0 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2270

        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f12b18ea40b303b — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2634

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57066b4372e444fb — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2649

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d781c3d5276a2d4 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2673

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdbc426e58f74157 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2970

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2e72e03148f26fa — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2976

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9ce8e32cacfbd24 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2982

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #319681bb7ad96b04 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:3207

                open(os.devnull, 'wb') as dev_null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cebc13d248de1597 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:3335

            with open(os.devnull, 'w') as null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c834087917fce85 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:3447

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #259fb3ce2009a077 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:3457

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eeaf26a1cd06e9f8 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:3468

            newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d44deed406caaa63 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.10/test_threading.py:1397

            with open(os_helper.TESTFN, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc6660dc04fcf386 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.10/test_wsgiref.py:536

    os_environ = dict(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53932bc8bc49dabd — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:134

        with open(req_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bf381ecd8562fd8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:163

        with open(cert_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32974249780fb4dd — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:165

        with open(key_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58e658cf1e42cb67 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:179

    with open(os.path.join('cadir','index.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfbd4a41d42fe72f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:181

    with open(os.path.join('cadir','crl.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2287a728417398e8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:183

    with open(os.path.join('cadir','index.txt.attr'),'w+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e96f1eba14fad7cd — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:186

    with open(os.path.join('cadir','serial'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf10523d1c816b53 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:229

    with open('ssl_cert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b12c5122991361e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:231

    with open('ssl_key.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d89aa07063d0c2fc — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:237

    with open('keycert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38e12eef23bb396e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:241

    with open('keycert.passwd.pem', 'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #677e375d7948afd9 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:247

    with open('keycert2.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36dc40d643ecb59e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:252

    with open('keycert3.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bab072fecc236da — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:257

    with open('keycert4.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0362d7f168306f8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:264

    with open('keycertecc.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72c2e8ff19065fad — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:283

    with open('allsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5416a24d3a1baf46 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:300

    with open('idnsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3b72731a4f3322c — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:305

    with open('nosan.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #927bd3d786362de4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_asyncore.py:377

        with open(os_helper.TESTFN, 'wb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5f760df92652e17 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_asyncore.py:405

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b82e2d1608c894d8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:941

        with open(__file__, 'rb') as body:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #c627a0390396819b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1734

        self.conn = client.HTTPSConnection(HOST, self.port,
                source_address=('', self.source_port))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fa8fe3dc5936b146 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1871

        h = client.HTTPSConnection(HOST, TimeoutTest.PORT, timeout=30)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d4f735e46830ad10 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1879

            h = client.HTTPSConnection('self-signed.pythontest.net', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #de04653b5400a90e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1890

            h = client.HTTPSConnection('self-signed.pythontest.net', 443,
                                       context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ebda61971af776bb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1903

            h = client.HTTPSConnection('www.python.org', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #aa6467cc5d8c442a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1922

                h = client.HTTPSConnection(selfsigned_pythontestdotnet, 443,
                                           context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9f171cc0e008f7ef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1952

            h = client.HTTPSConnection('self-signed.pythontest.net', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4480ba7bd784c661 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1961

        h = client.HTTPSConnection('localhost', server.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3909e14499ea9c37 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1972

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f3cbddc537288340 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1985

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #048d5f7a5934fe7d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1990

            h = client.HTTPSConnection('localhost', server.port,
                                       context=context, check_hostname=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #59a8f93c69352751 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1997

            h = client.HTTPSConnection('localhost', server.port,
                                       context=context, check_hostname=False)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #de5c5cbed4da75f1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2007

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ebddaa68feeb4476 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2016

            h = client.HTTPSConnection('localhost', server.port,
                                       context=context, check_hostname=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dd0b42adf1502acf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2037

            c = client.HTTPSConnection(hp)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #417f8be94168eba7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2046

        h = client.HTTPSConnection('localhost', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9d6b94b132e341fd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2051

        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #35660fed217298bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2058

            h = client.HTTPSConnection('localhost', 443, context=context,
                                       cert_file=CERT_localhost)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #1cf6aaef43483904 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2132

        with open(os_helper.TESTFN, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9dfcb0149fdea2a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2134

        with open(os_helper.TESTFN, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9fb9b8016188b97c — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2147

        with open(os_helper.TESTFN, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7eac87badb7741de — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2149

        with open(os_helper.TESTFN, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97e279f8ab241e66 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_select.py:34

        with open(__file__, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e33054cfc58cc4f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:62

        with open("/dev/vsock", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab3d8bf3129737a4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:5817

        f = open("/proc/modules", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d9b0ca2fd89134b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6191

        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e0ce6f7ab6def2d — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6194

        with open(os_helper.TESTFN, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d6f0f22ff1dad8a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6227

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34629fe3b93c241b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6263

        with open(filename, 'wb'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2dfd08e52ea3c2a9 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6265

        file = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b793b93202828ccf — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6281

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80d8041b1f1b855a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6298

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #950f36a366af73e7 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6319

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d50e38c6d5600a1e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6340

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f7902b321e490f0 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6359

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #694b37b1d75e1530 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6375

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc8781dfb3dc546b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6393

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e10269a605f8189 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6411

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #064ee2f5e54bcb9f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6416

        with open(os_helper.TESTFN, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09f4b7836655c98d — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6421

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0287f82b6260f006 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:168

        with open("/etc/os-release", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e344a45d836dd2a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:518

        with open(CAFILE_CACERT, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27a61f3e549d1c68 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:1502

        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #925615f00dade1cb — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:1505

        with open(CAFILE_NEURONIO) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #509663f8cd19cbae — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:1673

        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c91ff822a77823bb — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:1740

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05794982b4e02809 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:2168

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfc5aaefaf732e28 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:3608

        with open(__file__, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #0ba1846b3c8ea662 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:3614

        f = urllib.request.urlopen(url, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #082e63e20d039144 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:4417

        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8edf849e09f8ace7 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:4426

                with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee308f19ba4f948e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:4821

        with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50b41efcc95c2d29 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:4890

        with unittest.mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31ece20638000581 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:4891

            os.environ['SSLKEYLOGFILE'] = os_helper.TESTFN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a67fde155d91122 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:4892

            self.assertEqual(os.environ['SSLKEYLOGFILE'], os_helper.TESTFN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16e35bff7546bb42 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:289

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88ea3056535dcc5c — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:782

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b540c10f515b54d1 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:794

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be9917efd66c84a4 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:868

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ed8a14bc9902e01 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:874

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a397d0fcb8eedab8 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:880

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #295e0bfb648da2af — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:886

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86d54198aff65d28 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:899

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a1d2938be48e955a — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:904

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6fbc1a2853ed1470 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:1728

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dda1cd67dfe5756b — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2067

                                  cwd=os.curdir, env=os.environ, user=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4302b37640746b3d — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2114

                                  cwd=os.curdir, env=os.environ, group=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b0b6da07b2285a7 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2167

                                  cwd=os.curdir, env=os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3fb65e54f360f1f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2344

        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b350c3861c24830 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2367

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c7216ced2ce7947 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2377

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1fee8329804f338 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2389

        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #647e9f3b0a02a625 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2753

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8c7679a6984974e — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2768

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87ff01f129cde8b9 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2792

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #908f7a1eee81bfdf — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3089

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5be9fd84280f0d8e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3095

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bf5aa372a3a490b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3101

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #952a83ba731f0138 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3326

                open(os.devnull, 'wb') as dev_null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #809d5c8e70e1ded4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3455

            with open(os.devnull, 'w') as null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca40b148f4710b9b — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3567

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2991b108bf10a5c — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3577

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90bc8839d754f1ca — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3588

            newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70f77327d44f671d — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.11/test_threading.py:1513

            with open(os_helper.TESTFN, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68ed4881f5256df3 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.11/test_wsgiref.py:512

    os_environ = dict(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0bfaea79b632851e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:134

        with open(req_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9faafe3e9e034c49 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:163

        with open(cert_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e5fb675cdde26d2 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:165

        with open(key_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9d8c06062731a2b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:179

    with open(os.path.join('cadir','index.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #228e1ef6cca3f6cb — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:181

    with open(os.path.join('cadir','crl.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1ffac1c35aa1f3e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:183

    with open(os.path.join('cadir','index.txt.attr'),'w+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #753fb84675f50456 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:186

    with open(os.path.join('cadir','serial'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bad942ba6ebb71aa — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:229

    with open('ssl_cert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8258b1310237559d — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:231

    with open('ssl_key.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9815080964926cb1 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:237

    with open('keycert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec500c360a458f4e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:241

    with open('keycert.passwd.pem', 'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16b1d831df065b81 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:247

    with open('keycert2.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64eb443e9f56d85a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:252

    with open('keycert3.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #728a5a5e7d82abb4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:257

    with open('keycert4.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54dbb1e7597a39ef — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:264

    with open('keycertecc.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0109b47d81c230e2 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:283

    with open('allsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1eae6aaffdf79d17 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:300

    with open('idnsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75afc0999412e9ca — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:305

    with open('nosan.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91f86994d66495b9 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:984

        with open(__file__, 'rb') as body:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #85c79e6367b77eab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:1796

        self.conn = client.HTTPSConnection(HOST, self.port,
                source_address=('', self.source_port))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8c2bda911386671e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:1933

        h = client.HTTPSConnection(HOST, TimeoutTest.PORT, timeout=30)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #21a5fe43105ca743 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:1941

            h = client.HTTPSConnection('self-signed.pythontest.net', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e6ed822242b87b2c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:1952

            h = client.HTTPSConnection('self-signed.pythontest.net', 443,
                                       context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9844a38ecb8bb517 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:1965

            h = client.HTTPSConnection('www.python.org', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8cabf84a35b2680a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:1984

                h = client.HTTPSConnection(selfsigned_pythontestdotnet, 443,
                                           context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8ffd7981956e9101 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2014

            h = client.HTTPSConnection('self-signed.pythontest.net', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #23b09a6d55fece65 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2023

        h = client.HTTPSConnection('localhost', server.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1b5746dc179e8117 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2034

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d600e7763d7c8afc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2047

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7ff1bc629f89fb6b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2053

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5cacfa5fffec2fee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2059

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #12eee5d114f37f35 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2082

            c = client.HTTPSConnection(hp)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #90650cc5cdafa5a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2091

        h = client.HTTPSConnection('localhost', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #adb20a4f2d968000 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2096

        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4c4891b8fa791426 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2102

        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #f5c70ea111e8b302 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2175

        with open(os_helper.TESTFN, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d732e6787e7f487 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2177

        with open(os_helper.TESTFN, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #034192bf29f85d66 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2190

        with open(os_helper.TESTFN, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab50983ee50753f4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2192

        with open(os_helper.TESTFN, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23f76a6e0a447011 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_interpreters.py:29

    return wrapped, open(r, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0261f14dc8e76b54 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_interpreters.py:64

    with open(w, 'w') as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51af689491e9c344 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_interpreters.py:669

        with open(filename, 'w', encoding='utf-8') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddd192108104f370 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_select.py:33

        with open(__file__, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ba61e080e5045f1 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:63

        with open("/dev/vsock", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e27de6a297fefec1 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:5966

        f = open("/proc/modules", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97cf99f4b69ffee6 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6340

        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fcbb5379c0db3d6 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6343

        with open(os_helper.TESTFN, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fdaedd6d70760d9 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6376

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67e91788b5b0da55 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6412

        with open(filename, 'wb'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f67bbb3c821cb42 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6414

        file = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9045d05e173cb300 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6430

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab20525be643eaaf — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6447

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55a7ca83292da427 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6468

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ee250fd0687c159 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6489

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #160d68275b37515f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6508

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #453422eebfb11558 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6524

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51212f7fb477d38e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6542

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9f7f07dc6c787f8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6560

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #108d8d3a90cc324a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6565

        with open(os_helper.TESTFN, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03501e097651bd63 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6570

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b446d0bbf64f439 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:165

        with open("/etc/os-release", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c15ed11f18040091 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:506

        with open(CAFILE_CACERT, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e892848e6863886b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:1267

        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce5ca1f221fff62f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:1270

        with open(CAFILE_NEURONIO) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3cbe67f532d065c8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:1444

        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df225ad231e4bd37 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:1514

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3354c7cd44fa3ec3 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:1960

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9fe78553b3d7c2f2 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:3392

        with open(__file__, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #3e675d5cb9f54d2c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:3398

        f = urllib.request.urlopen(url, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #0322c5e37002ea78 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:4229

        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85c51ed65464bf45 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:4238

                with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d66a4bf91b534eb4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:4633

        with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59e59a962789502a — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:4710

        with unittest.mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24ec0bf56ab5a7ff — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:4711

            os.environ['SSLKEYLOGFILE'] = os_helper.TESTFN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9428823101c680aa — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:4712

            self.assertEqual(os.environ['SSLKEYLOGFILE'], os_helper.TESTFN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7a6c9c97d2b4e35 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:281

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a05d0d8b9593d38 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:775

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #475378f16ed10f83 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:787

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99af2989c81ab118 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:861

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53cab2890606dba9 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:867

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9116cd7bedc45f09 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:873

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd6f02d55731e4ea — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:879

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #966b666925a70065 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:892

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ceb73e9d9c8575a — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:897

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df7c0a54daab2555 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:1710

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93cd38ddbc6d01d4 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2049

                                  cwd=os.curdir, env=os.environ, user=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #968e10b0354e0df7 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2096

                                  cwd=os.curdir, env=os.environ, group=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ccf0e4370c9b165 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2155

                                  cwd=os.curdir, env=os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #447768bd17e9c9ab — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2322

        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b03070f5009eacdc — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2345

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dafc3a3a8d08f146 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2355

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53288a1bb0fc3aef — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2367

        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22c628d43dbaba4c — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2731

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d480a6ae97c14aec — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2746

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb279cd04be88e44 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2770

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d11472819340e81 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3067

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2eff520271405894 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3073

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b5da6ecf26100eb — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3079

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #242e27bc1af4d568 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3304

                open(os.devnull, 'wb') as dev_null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0539408131e2eb1 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3452

            with open(os.devnull, 'w') as null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3cce0a020c8fdd8 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3564

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4cc0529a78069291 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3574

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90ab04e06f3e320a — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3585

            newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ee4bfe6f1dd76b7 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_threading.py:1783

            with open(os_helper.TESTFN, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20ee7911d4f233b7 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.12/test_threading.py:1993

            with open(filename, 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f38a8f45a51badca — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.12/test_wsgiref.py:512

    os_environ = dict(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e722113d20fda02f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:135

        with open(req_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c67d23d06108f15d — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:164

        with open(cert_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6499c29b5bff6e5e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:166

        with open(key_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba8dfbf3ffa43114 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:180

    with open(os.path.join('cadir','index.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff72f21e1ccdc4ba — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:182

    with open(os.path.join('cadir','crl.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5323fc170f170561 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:184

    with open(os.path.join('cadir','index.txt.attr'),'w+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b5f22c06acbb722 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:187

    with open(os.path.join('cadir','serial'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03a0086254f40435 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:230

    with open('ssl_cert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #217dffd390af6b35 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:232

    with open('ssl_key.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4b51fa00487d3f8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:238

    with open('keycert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #819dd5e048efae3a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:242

    with open('keycert.passwd.pem', 'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2647af696537adeb — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:248

    with open('keycert2.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #912343e6559c4a60 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:253

    with open('keycert3.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a79282b7e8d67f47 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:260

    with open('keycert4.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95f86711828ff3be — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:267

    with open('keycertecc.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ec85032d8a708a4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:286

    with open('allsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fe2ac58d3055d1a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:303

    with open('idnsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #392a147ed03e738e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:308

    with open('nosan.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7704a4e9d06429e5 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:988

        with open(__file__, 'rb') as body:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #b490bfa5a6b79cb1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:1803

        self.conn = client.HTTPSConnection(HOST, self.port,
                source_address=('', self.source_port))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #75f9a6c94f7f4cf2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:1940

        h = client.HTTPSConnection(HOST, TimeoutTest.PORT, timeout=30)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #870be18279a2052e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:1948

            h = client.HTTPSConnection('self-signed.pythontest.net', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6facf9305a48c3ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:1959

            h = client.HTTPSConnection('self-signed.pythontest.net', 443,
                                       context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a5eedaff034f26b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:1972

            h = client.HTTPSConnection('www.python.org', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c171ff55f1a4064e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:1991

                h = client.HTTPSConnection(selfsigned_pythontestdotnet, 443,
                                           context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #61e99a3cf003553c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2021

            h = client.HTTPSConnection('self-signed.pythontest.net', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f73d3dfa10638df6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2030

        h = client.HTTPSConnection('localhost', server.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9fc4c878f563b514 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2041

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6891950c30002bb2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2054

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d4297d223bbb712c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2060

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c4eec94519774540 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2066

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #54efef06401d1d87 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2089

            c = client.HTTPSConnection(hp)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6901326c82c34f21 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2098

        h = client.HTTPSConnection('localhost', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bac5db7bf44f906a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2103

        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bc9df72cf7a6d9a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2109

        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #56d851621f5b9aba — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2182

        with open(os_helper.TESTFN, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #620a0d18c456493e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2184

        with open(os_helper.TESTFN, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #218985ffe4c76b90 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2197

        with open(os_helper.TESTFN, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d370c6f15dceafd7 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2199

        with open(os_helper.TESTFN, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #102200a35c3d0928 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_interpreters.py:29

    return wrapped, open(r, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53dfc5e2330b79c6 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_interpreters.py:64

    with open(w, 'w') as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b538c13d140b59e0 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_interpreters.py:669

        with open(filename, 'w', encoding='utf-8') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b22e1b19080e1351 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_select.py:33

        with open(__file__, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e9a35ced440e994 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:97

        with open("/dev/vsock", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb4b55c003bde083 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6210

        f = open("/proc/modules", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eace22081185bf97 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6584

        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f031a51570db516 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6587

        with open(os_helper.TESTFN, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a4ad320dffa1651 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6620

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db335d7ce964bb6a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6656

        with open(filename, 'wb'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7061e1ad14a2901a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6658

        file = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c17156e2cbd6d91 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6674

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #417769774f1158bc — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6691

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8bff6c2d4dbc6e03 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6712

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #113e382fc7671ddb — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6733

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10b8f0e2dc63d7fc — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6752

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49cf8da1165887d4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6768

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #787b5385347d8800 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6786

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5377234c972b283c — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6804

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24ffd846fabdd07a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6809

        with open(os_helper.TESTFN, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99756e2aa26f70ae — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6814

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa77dc59d3d16cf8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:176

        with open("/etc/os-release", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #817a937080049e5b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:529

        with open(CAFILE_CACERT, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6020c7fcc8736263 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:1290

        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf195979556a68da — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:1293

        with open(CAFILE_NEURONIO) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a83584ae3c39b847 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:1467

        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80e4d303c30e4897 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:1541

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7e8efa96c73e9b3 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:1987

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d9697186c2f2546 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:3510

        with open(__file__, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #f0d4c979bf53d1f3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:3516

        f = urllib.request.urlopen(url, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #01f580c85f7a27c5 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4347

        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d235990432e5f90 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4356

                with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94330482eb8f22b1 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4834

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89dec4c90dec0dde — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4837

        with open(SINGED_CERTFILE_ONLY) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3691590621ff7c1f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4890

        with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d13c82b12c3556c1 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4967

        with unittest.mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0f7c988cbb3c5b1 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4968

            os.environ['SSLKEYLOGFILE'] = os_helper.TESTFN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03f7a5e6ad89d25d — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4969

            self.assertEqual(os.environ['SSLKEYLOGFILE'], os_helper.TESTFN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #984e0e0f8be803ad — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:299

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d320d5b5678079d — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:793

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c96036eab1f5fbe — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:805

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb67eafa60e8262a — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:879

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #287358d0ee0d99bc — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:885

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #466166d8e00a926a — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:891

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ddc642fe01745b0 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:897

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57b33de19c4f26c7 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:910

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6d2fb84ec7dd85b — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:915

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6e30b00b5cca849 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:1725

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08240a5842daba1a — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2071

                                  cwd=os.curdir, env=os.environ, user=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1981396d8c1a3aa5 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2118

                                  cwd=os.curdir, env=os.environ, group=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #121b15fe8a68071a — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2177

                                  cwd=os.curdir, env=os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc7e19ea7d6a4108 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2344

        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60c1972d3aa239f1 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2367

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90ea9558a6ff9631 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2377

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0072170c3668fb8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2389

        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d92886a127d0d497 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2753

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9712f21e573016ac — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2768

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4b205e8a3bc58a5 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2792

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5afe91af5110036 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3089

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63a7fd4c88f5452d — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3095

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7295c21b87705a03 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3101

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af79e5ad5a263d84 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3326

                open(os.devnull, 'wb') as dev_null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e141cc5cffb63fd — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3562

            with open(os.devnull, 'w') as null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31c96102466c9b66 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3674

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbf2a233e68240b0 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3684

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3cf9c3fa97c80ecf — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3695

            newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4632ee00b1f65cdd — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.13/test_threading.py:1839

            with open(os_helper.TESTFN, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac82cc4c1c41ef8b — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.13/test_wsgiref.py:512

    os_environ = dict(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ccf82d746af7aa1 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:138

        with open(req_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a96384881574d7a2 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:166

        with open(cert_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11039320d2b41c1f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:168

        with open(key_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fa54b9f12d170e6 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:182

    with open(os.path.join('cadir','index.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbdd4c6767d7de8a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:184

    with open(os.path.join('cadir','crl.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19e6caf0396e01de — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:186

    with open(os.path.join('cadir','index.txt.attr'),'w+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8bc0cc9da7a8e14 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:189

    with open(os.path.join('cadir','serial'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e80d7d8216ad8b11 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:229

    with open(path + '.reference', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b58a3af2eed82312 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:241

    with open('ssl_cert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #592ce1a70c2e3443 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:243

    with open('ssl_key.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #221611188731f38c — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:249

    with open('keycert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7917ad869729af35 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:253

    with open('keycert.passwd.pem', 'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aee08989e1e07d6d — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:259

    with open('keycert2.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ecbcba7bf69e053 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:264

    with open('keycert3.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce84f6c44f5b661e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:271

    with open('keycert4.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #450200ddefa182b4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:278

    with open('keycertecc.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3cc69d402da3fbb7 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:297

    with open('allsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0b5a35fe7b3228b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:314

    with open('idnsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10027e26865a2086 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:319

    with open('nosan.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c4b15b9e07de4f0 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:30

    return wrapped, open(r, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f6eff31654cf551 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:69

    with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aaac0d98a4e36e50 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:708

        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79e015981b66ce69 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:740

        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7eb37326c5da9bc7 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:762

        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7461b7c38587ee65 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:779

        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #196ffb2ec9eacae9 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:792

        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #180aedfaf9875d02 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:813

        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53c3cc7aae395e0e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:1021

            with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00107c914f53eba8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:1027

        with open(r, encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e598269043a34d86 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:1037

            with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e45af9b238bf2081 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:1054

        with open(r, encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #693d34e893072a9a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:1065

            with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15371c9ec4f3a0e7 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:1072

        with open(r, encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #201ae00e7838936b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:998

        with open(__file__, 'rb') as body:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #c597de1195dbe373 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:1813

        self.conn = client.HTTPSConnection(HOST, self.port,
                source_address=('', self.source_port))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c5e2e2d3371c8dc4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:1950

        h = client.HTTPSConnection(HOST, TimeoutTest.PORT, timeout=30)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cfb1988a842658d9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:1958

            h = client.HTTPSConnection('self-signed.pythontest.net', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0fd12e4224ea2bfb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:1969

            h = client.HTTPSConnection('self-signed.pythontest.net', 443,
                                       context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f8e8e548d6c72f21 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:1982

            h = client.HTTPSConnection('www.python.org', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f2a9689a49566e12 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2001

                h = client.HTTPSConnection(selfsigned_pythontestdotnet, 443,
                                           context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6a50a29b5b498c7c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2031

            h = client.HTTPSConnection('self-signed.pythontest.net', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #099457e6b5411ef5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2040

        h = client.HTTPSConnection('localhost', server.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #16e266e3e43cac89 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2051

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #48fde8f8d3ff27eb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2064

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3db68342c41cf363 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2070

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #299ca0b33ba5702c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2076

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #75cf13dab5fd672d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2099

            c = client.HTTPSConnection(hp)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #43224e1f4c0827c4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2108

        h = client.HTTPSConnection('localhost', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ae9b204bbfc27a0f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2113

        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #49fe0777798c46f5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2119

        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #ad7689b3a94dad9c — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2192

        with open(os_helper.TESTFN, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c530e614fc42454 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2194

        with open(os_helper.TESTFN, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca0910bf49dc214b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2207

        with open(os_helper.TESTFN, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #853c049b2cbb08a4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2209

        with open(os_helper.TESTFN, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab213c40794f35c5 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:116

        os.environ = os_helper.EnvironmentVarGuard()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #829d4c4ef8325e10 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:125

        os.environ.__exit__()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #b56445e65b9f9b15 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:130

        self.connection.request(method, uri, body, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5191dadf6e53698d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:388

        self.connection = http.client.HTTPSConnection(
            self.HOST, self.PORT, context=context
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d1f13f4fd83cc05f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:391

        self.connection.request(method, uri, body, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #fbd3b42fde9058aa — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:479

        with open(tempname, 'wb') as temp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #489f39a1e9d579a9 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:547

            with open(fullpath, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20b74805fcec5acb — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:725

        with open(os.path.join(self.tempdir_name, 'index.html'), 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3427422bd60d6eee — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:936

        with open(self.nocgi_path, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9b3b3149b3bfc92 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:941

        with open(self.file1_path, 'w', encoding='utf-8') as file1:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fba4a6ba632b6d42 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:946

        with open(self.file2_path, 'w', encoding='utf-8') as file2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93c56ce850d38e81 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:951

        with open(self.file3_path, 'w', encoding='utf-8') as file3:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3255870619fb9ba4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:956

        with open(self.file4_path, 'w', encoding='utf-8') as file4:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96f17d6dc378b713 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:961

        with open(self.file5_path, 'w', encoding='utf-8') as file5:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #459f8c1fead6c72b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:966

        with open(self.file6_path, 'w', encoding='utf-8') as file6:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cedbb4b549cce74c — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:1086

        os.environ['SERVER_SOFTWARE'] = signature

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #975f350d0c880e3f — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:1091

        self.assertEqual(os.environ['SERVER_SOFTWARE'], signature)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28c73005071b0109 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_select.py:33

        with open(__file__, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61ad09b9374a868d — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:97

        with open("/dev/vsock", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3e7602e08189d3e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6331

        f = open("/proc/modules", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59cc7677be48af46 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6705

        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f67614a3996be062 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6708

        with open(os_helper.TESTFN, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3de7b9007ec72554 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6741

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3ec74643693c344 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6777

        with open(filename, 'wb'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #632c3698a5d50fc6 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6779

        file = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8dc981b4cf0abb7c — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6795

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffa9ff760e111097 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6812

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6d70db7e2f58cf9 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6833

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #990d628b8fa9ad9c — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6854

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fff6220a820b0c7d — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6873

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a90676695e4953a2 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6889

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9356729eb35299a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6907

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6045fa863beec76a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6925

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7d00dbea7e5b600 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6930

        with open(os_helper.TESTFN, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62d9cc99ea2d0f75 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6935

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2d919553e327840 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socketserver.py:328

        with open(os_helper.TESTFN) as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7118dd7a905c4e8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socketserver.py:346

        with open(os_helper.TESTFN, 'a') as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80a7d947f46b68ff — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_socketserver.py:355

        with open(os_helper.TESTFN, 'a') as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c444b38eb4abc88 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:88

with open(data_file('keycert.pem.reference')) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4219cae1f6615d94 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:99

with open(data_file('keycert3.pem.reference')) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d17591db5d45308 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:148

        with open("/etc/os-release", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25a355e2eff94754 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:502

        with open(CAFILE_CACERT, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce379ce84c2b6286 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:1263

        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d31d52e2e77198e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:1266

        with open(CAFILE_NEURONIO) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c563ec9ea1834fe1 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:1439

        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c847f550d08a0ef — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:1513

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e11ab14bce456f8f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:1959

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d033d82a2d620a9 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:3483

        with open(__file__, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #4f6fb69fad15d4e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:3489

        f = urllib.request.urlopen(url, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #180275766c4168b6 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4320

        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d933385f937776ff — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4329

                with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8407d13f49e1a81 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4808

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07a2466add8625ec — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4811

        with open(SINGED_CERTFILE_ONLY) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f0709f21005b5d1 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4864

        with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a89c41da346de208 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4941

        with unittest.mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f44763c0f90c6b46 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4942

            os.environ['SSLKEYLOGFILE'] = os_helper.TESTFN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab86dd5f662a6d52 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4943

            self.assertEqual(os.environ['SSLKEYLOGFILE'], os_helper.TESTFN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8098b0af94d97f3c — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:300

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #087788b04e0576fb — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:794

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27b5b6fa7e0979cc — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:806

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0526de6c34782e54 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:880

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1fb32ccdf3bf3c15 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:886

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #648aad1e3ef23bc0 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:892

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16577dbde659375e — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:898

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32c736cbe4bd0391 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:911

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c42dbf91b81ccc34 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:916

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7c67f5ca57220f3 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:1726

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e7233c219c14f82 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2072

                                  cwd=os.curdir, env=os.environ, user=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aaeb66f87b6d2620 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2119

                                  cwd=os.curdir, env=os.environ, group=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af03b323d4d3be1b — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2178

                                  cwd=os.curdir, env=os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1cc2b19da9d49a1b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2345

        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14341b18c8fc7dcf — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2368

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55727aada1fcd775 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2378

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9916b65c9f2a03a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2390

        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4fff2e4d198da9f2 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2754

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #035f19b00ffc7665 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2769

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1fefb8c24aa22613 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2793

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd7003d7b11c6be6 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3090

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #360d919f1c43f7b1 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3096

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b38636f4b349fd0f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3102

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1fa7e65a2ad0d763 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3327

                open(os.devnull, 'wb') as dev_null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c06d9bb684b9449e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3531

            with open(os.devnull, 'w') as null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0229e086603882b0 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3643

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b103747e89a2dad — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3653

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76afb5774663c00b — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3664

            newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #704adafe2ec26447 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_threading.py:1983

            with open(os_helper.TESTFN, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #196a6f875ca5a50f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:106

        f = open(os_helper.TESTFN, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #cb4d45dbe7d20b08 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:113

        self.returned_obj = urllib.request.urlopen("file:%s" % self.quoted_pathname)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #d0de114e089d9a05 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:201

        for k in list(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #236a1f151146979f — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:270

        self._saved_env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #684b54cb94a2f8a6 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:272

        os.environ = collections.OrderedDict()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f13e58b579443670 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:275

        os.environ = self._saved_env

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3d336f4affd8dfc — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:279

        os.environ['no_proxy'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bce92f8e673f1be1 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:280

        os.environ['No_Proxy'] = 'localhost'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1a5b992d2270e32 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:283

        os.environ['http_proxy'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60b2213bb7a6f4f9 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:284

        os.environ['HTTP_PROXY'] = 'http://somewhere:3128'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1799130f03196090 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:288

        os.environ['no_proxy'] = 'localhost, noproxy.com, my.proxy:1234'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6a7ef20cdc25d9f — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:289

        os.environ['No_Proxy'] = 'xyz.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f783a288d6bd6e59 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:296

        os.environ['http_proxy'] = 'http://somewhere:3128'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f6fc08ef79eb586 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:297

        os.environ['Http_Proxy'] = 'http://somewhereelse:3128'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #1a00d19c9779d515 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:308

            fp = urllib.request.urlopen("http://python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #76e562d94d566b02 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:321

            fp = urllib.request.urlopen(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c0a48fa5eb025e83 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:329

            resp = urllib.request.urlopen("http://www.python.org")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b4eaf879aa694412 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:351

                    urllib.request.urlopen(f"http:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cd58d30024354369 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:354

                    urllib.request.urlopen(f"https:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8126b428f8b95101 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:390

                    urllib.request.urlopen(f"http:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #881c036bbe931c97 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:392

                    urllib.request.urlopen(f"https:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b28951435984645b — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:432

                urllib.request.urlopen("http://python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f68a0fad52ed8afc — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:449

                urllib.request.urlopen("http://python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b985104ebcd31b93 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:464

                    urllib.request.urlopen("http://something")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #70d1860c7fa3af67 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:492

            with urllib.request.urlopen(tmp_fileurl) as fobj:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #25d52c68bf085d11 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:500

            urllib.request.urlopen(tmp_fileurl)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #90e91e9780800fd3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:546

            urllib.request.urlopen(self.text_url))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c6ea128d8941ce4b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:548

            urllib.request.urlopen(self.text_url_base64))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5a7b4fe30c817d81 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:549

        self.image_url_resp = self.enterContext(urllib.request.urlopen(self.image_url))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #b47a9e437f1d1cbc — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:614

            FILE = open(os_helper.TESTFN, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6fa5fd67f8ba13e4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:668

        FILE = open(second_temp, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #8b860bcbc5c44152 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:68

        with urllib.request.urlopen(file_url) as f:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #90762143eadd2698 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:103

        self.assertEqual(Request(url,
                                 headers={"Spam-eggs": "blah"}
                                 ).headers["Spam-eggs"], "blah")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b6f9f150bbea254a — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:106

        self.assertEqual(Request(url,
                                 headers={"spam-EggS": "blah"}
                                 ).headers["Spam-eggs"], "blah")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8102e2d933b0e052 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:126

        req = Request(url, headers={"Spam-eggs": "blah"})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e6ede8c1326d45fc — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:420

            return Request("http://blah/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #22e73977e16a833e — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:612

        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #04a28b0d43cca79f — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:654

        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a9283f7ae4b7f583 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:670

        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #26620780f1f340dc — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:692

        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #175ebac6523aab33 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:829

            f = open(TESTFN, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0282b758161d4c2f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:863

                f = open(TESTFN, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #36808de472c1d92c — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:935

        req = Request("http://example.com/","badpost")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6b544d5bb94d0e96 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:941

            req = Request("http://example.com/", data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #17e2c48501e856ad — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:978

        with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #1c9f56a177295a06 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:979

            req = Request("http://example.com/", f, {})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #2b0caa85380232eb — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:985

        with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #414ec08cde43040f — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:986

            req = Request("http://example.com/", f, {"Content-Length": 30})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #056f0e4e512a8a7b — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1001

        req = Request("http://example.com/", file_obj, {})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #56083e973d689ad7 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1007

        req = Request("http://example.com/", file_obj, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b325d414b0fcbb4b — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1027

                req = Request("http://example.com/", proc.stdout, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #be47667b47a276d0 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1048

            req = Request("http://example.com/", iterable_body(), headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c8245028654cf707 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1061

        req = h.do_request_(Request("http://example.com/", ()))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d03e097d933d88aa — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1074

            req = Request("http://example.com/", iterable_array, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fba0defddd107ac9 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1149

        r = Request('http://example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2e06984156ebadc8 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1161

        r = Request('http://www.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f8ecd436e8469341 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1175

        req = Request(weird_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #916972368d9766d9 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1181

        req = Request(url_without_path)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f5f9374a2d0717d8 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1191

        req = Request(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f71d8dc4098e2731 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1216

        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cba23e08e9e13f02 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1312

        req = Request(from_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a31f1356c608ad8e — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1334

        req = Request(from_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4f61c174d6cdbd7c — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1383

        fp = urllib.request.urlopen("http://python.org/path")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c93ef7c73efb7083 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1416

                response = opener.open('http://example.com/')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5c92de0421aade20 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1425

        req = Request(from_url, method="HEAD")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #378a0e148a36269f — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1441

            req = Request("http://acme.example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f92d4ed7e0712d8f — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1454

        req = Request("http://www.perl.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c85aafc4dd1b9a3a — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1458

        req = Request("http://www.python.org")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #237e5a982c6b56e8 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1469

        req = Request("http://www.python.org")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d5a3f27dc46c5ff5 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1483

        req = Request("https://www.example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #507673c54f33d66e — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1497

        req = Request("https://www.example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4ef94fcf474249b1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1731

        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2b66be349f9f21f5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1751

        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #eaeb08c7242dd13b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1777

        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a429313138a7336a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1803

        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #abe7fc2213a08535 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1817

        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ec163136a5bfdf52 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1832

            req = Request("http://dummy/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #476bde57a5359776 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1843

        req = Request("http://dummy/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d83183e3481acb55 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2013

        self.get = Request("http://www.python.org/~jeremy/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7a32cb8a432e54c6 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2014

        self.post = Request("http://www.python.org/~jeremy/",
                            "data",
                            headers={"X-Test": "test"})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #35f69daa2eeb728e — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2017

        self.head = Request("http://www.python.org/~jeremy/", method='HEAD')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0bb52f05577b1dd0 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2061

        req = Request("http://www.python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #feeb258771c2d830 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2071

        req = Request("http://www.%70ython.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9c7fb12002a39c75 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2086

        req = Request("http://www.python.org/?qs=query#fragment=true")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d6f2c80e036b1650 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2088

        req = Request("http://www.python.org/#fun=true")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dfdea5ba3e3c8e31 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2093

        req = Request(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3ed84a53fa40fce5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:311

            self.assertTrue(urllib.request.urlopen(self.server_url))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c57a44c1cf3698e7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:320

            urllib.request.urlopen(self.server_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #297bc73f4c699f84 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:336

            os.environ.clear()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67647d0cdb4917f9 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:337

            os.environ.update(old_environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #051023b504aa7c9b — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:338

        self.addCleanup(restore_environ, os.environ.copy())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71745f9fed4ad7dc — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:339

        os.environ['NO_PROXY'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94e8e27d9e463e57 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:340

        os.environ['no_proxy'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #16b00996fb987e3e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:368

            self.opener.open(self.URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #46d5687a1b724d42 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:374

            self.opener.open(self.URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #337a202d1ece8622 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:381

        with self.opener.open(self.URL) as result:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #907e0ad05fa28608 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:390

            result = self.opener.open(self.URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #69c47884643298fb — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:462

            os.environ.clear()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d232e5d1f3a900d — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:463

            os.environ.update(old_environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a124af8da347c14f — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:464

        self.addCleanup(restore_environ, os.environ.copy())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5c6912e27bc1e74 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:465

        os.environ['NO_PROXY'] = '*'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b50e7b16fbb3b3d — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:466

        os.environ['no_proxy'] = '*'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #a45d25a03c8b741e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:470

        f = urllib.request.urlopen(url, data, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f54c5c43c96ffd55 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:592

        with urllib.request.urlopen(req):

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #34a08b7694a27024 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:600

        with urllib.request.urlopen(req):

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ea29edfd748a9f85 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:607

        with urllib.request.urlopen("http://localhost:%s" % handler.port) as open_url:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #16a1b51db4bfa3f1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:614

        open_url = urllib.request.urlopen(
            "http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3aea5532b04116ce — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:626

        open_url = urllib.request.urlopen("http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b4c28b7c5ccc91ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:634

        data = urllib.request.urlopen("http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #eb1b9c5f97bc56cd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:642

        data = urllib.request.urlopen("http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e9eb7f0c0586f2dc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:661

        opener.open(request, "1".encode("us-ascii"))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a4ecdf8bc15d2b91 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:665

        opener.open(request, "1234567890".encode("us-ascii"))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #f8f96c2dba9fc3b4 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.14/test_wsgiref.py:512

    os_environ = dict(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea7bc601ef6b3296 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:138

        with open(req_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef682b7ca711ae84 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:166

        with open(cert_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96f531f6d89e1886 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:168

        with open(key_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b41d3645e15276b1 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:182

    with open(os.path.join('cadir','index.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22c4ded4f9df715e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:184

    with open(os.path.join('cadir','crl.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75b3b5c61f8e9ee9 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:186

    with open(os.path.join('cadir','index.txt.attr'),'w+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54f9b2df957f0260 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:189

    with open(os.path.join('cadir','serial'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #184363ee853516cf — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:229

    with open(path + '.reference', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #418c628d4e546627 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:241

    with open('ssl_cert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28a6557f1beb97dd — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:243

    with open('ssl_key.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d9e6a11862f1d2a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:249

    with open('keycert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #694f8dbdbdee01e5 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:253

    with open('keycert.passwd.pem', 'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee0067471970cfe4 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:259

    with open('keycert2.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #483466d5132c5ae9 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:264

    with open('keycert3.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cddbd9d8a51b8c8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:271

    with open('keycert4.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8094e852b32c2f54 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:278

    with open('keycertecc.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5093681cb0d5d98c — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:297

    with open('allsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a896d646146e50a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:314

    with open('idnsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1727d31f4e359507 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:319

    with open('nosan.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10f5ef7afea702e8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:30

    return wrapped, open(r, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2bec41609f232cfe — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:69

    with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88ce16174d4105c2 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:708

        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db149e25c58fc751 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:740

        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a77d85449bb270b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:762

        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e66850aae1b73ee3 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:779

        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e11956ff51b3c30b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:792

        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #278555779abbb171 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:813

        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97ca2523fb481a35 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:1021

            with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #deba7d083687571b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:1027

        with open(r, encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ccb2f08b9268ed2 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:1037

            with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcf5d413bf13a255 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:1054

        with open(r, encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8296add7936ba59e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:1065

            with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81f25eca82c5e1cf — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:1072

        with open(r, encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89775504e6f3a1d6 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:1089

        with open(__file__, 'rb') as body:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #614fedc1d3c4cc63 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:1970

        self.conn = client.HTTPSConnection(HOST, self.port,
                source_address=('', self.source_port))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6fe4a6047e216d28 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2107

        h = client.HTTPSConnection(HOST, TimeoutTest.PORT, timeout=30)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3eded183fbd12473 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2115

            h = client.HTTPSConnection('self-signed.pythontest.net', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3df969a278f8bc72 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2126

            h = client.HTTPSConnection('self-signed.pythontest.net', 443,
                                       context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e944c23678bf5298 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2139

            h = client.HTTPSConnection('www.python.org', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2ba8dd9a5413f4c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2158

                h = client.HTTPSConnection(selfsigned_pythontestdotnet, 443,
                                           context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2796233884018bfd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2188

            h = client.HTTPSConnection('self-signed.pythontest.net', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #55ae8e6e5852e54b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2197

        h = client.HTTPSConnection('localhost', server.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4071fbb9e046fe01 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2208

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b6122cf00160ee39 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2221

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f8cc29adf33c12f2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2227

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #84966df0f90c53bf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2233

        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6a6f15b5c9aa18a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2256

            c = client.HTTPSConnection(hp)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #93f1ecc41e2406cb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2265

        h = client.HTTPSConnection('localhost', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #edc6194a38df0bf5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2270

        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dff41bea5e912ba7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2276

        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #3186add27620fcc1 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2349

        with open(os_helper.TESTFN, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a304803aaef1a2d — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2351

        with open(os_helper.TESTFN, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23219ed99ab6445f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2364

        with open(os_helper.TESTFN, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #715e37176f86fdaf — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2366

        with open(os_helper.TESTFN, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6359aee696139503 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:121

        os.environ = os_helper.EnvironmentVarGuard()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #137247ee11e64ca9 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:130

        os.environ.__exit__()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #10323608bd4d28f5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:135

        self.connection.request(method, uri, body, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b48a94b83bc0642e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:431

        self.connection = http.client.HTTPSConnection(
            self.HOST, self.PORT, context=context
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5763e61030ceb4a5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:434

        self.connection.request(method, uri, body, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #81f11f6da26ca931 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:565

        with open(tempname, 'wb') as temp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #902bade6e7a3716e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:642

            with open(fullpath, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f7aa494f3affd16 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:820

        with open(os.path.join(self.tempdir_name, 'index.html'), 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d813b07fd7ab2e08 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:936

            with open(os.path.join(self.tempdir_name, 'index.html'), 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03ce2dece05a2182 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:1469

        with open(self.tls_password_file, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99ef52f5b7d2f212 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:1674

        with open(self.served_filename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c22088d10dc057f2 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:1676

        with open(self.tls_password_file, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #649b14f3015b4589 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:1681

        with urllib.request.urlopen(req, context=context) as res:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #8a9f8e156a26d9f5 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_select.py:33

        with open(__file__, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8950fcc67284f110 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:100

        with open("/dev/vsock", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e6b3b940ff60d7a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6458

        f = open("/proc/modules", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00d9a5787603dadb — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6832

        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d233954abf8b68a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6835

        with open(os_helper.TESTFN, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82a24813c37bea73 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6868

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f69828c2baad2970 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6904

        with open(filename, 'wb'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7ac52f4627b3d69 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6906

        file = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b625a7bedcb7f44 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6922

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee0f0743b2aae31a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6939

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2c9d0a03cf76760 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6960

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #790e379b5ebeb093 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6981

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7019bcf63ddffcee — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:7000

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bcad54cff2d15db — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:7016

        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2218cb7ac073b31b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:7034

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef4cd7812cc87020 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:7052

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9dd8feb2544d841 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:7057

        with open(os_helper.TESTFN, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb112d84cfab0709 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:7062

        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ad747cbf05cf56a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socketserver.py:340

        with open(os_helper.TESTFN) as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3e85eb593bbec35 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socketserver.py:358

        with open(os_helper.TESTFN, 'a') as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64c05a72e8567022 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_socketserver.py:367

        with open(os_helper.TESTFN, 'a') as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca66b9b78b0b2d52 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:107

with open(data_file('keycert.pem.reference')) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e1b6430146a42d9 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:118

with open(data_file('keycert3.pem.reference')) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c16343338c710af — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:168

        with open("/etc/os-release", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46f2238f0dab675a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:584

        with open(CAFILE_CACERT, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39d0d7fef7afee27 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:1427

        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0ccb8f2fe0e6ae8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:1430

        with open(CAFILE_NEURONIO) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12dee4c0da2cd782 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:1646

        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dceb9561e031e3a6 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:1720

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8170123beebc67b8 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:2200

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0dc4992842f8045c — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:3821

        with open(__file__, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #da2f26951f1a46e9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:3827

        f = urllib.request.urlopen(url, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #1c70d92264f4cafc — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:4766

        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0b5eeaa30e95f8b — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:4785

                with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fba45148d59734f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5068

                with open(__file__, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ef745ec0b1a197c — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5345

        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #797685abf2d3e05e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5348

        with open(SINGED_CERTFILE_ONLY) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0c8a1060077e726 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5397

        with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a7608b1df4dbe5a — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5474

        with unittest.mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6406d169f849c250 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5475

            os.environ['SSLKEYLOGFILE'] = os_helper.TESTFN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d0ed81dbd9f45a6 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5476

            self.assertEqual(os.environ['SSLKEYLOGFILE'], os_helper.TESTFN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c175d8a35544f3b — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:301

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a74b02becfcbfbe9 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:795

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53a3bb8a8a0cdd25 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:807

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99dc439e1d0ea9e6 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:881

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a69c78fa3381e8d7 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:887

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54a776019e44378e — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:893

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32fcc110a5678eda — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:899

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62753329c2321171 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:912

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe137621837e791e — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:917

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1dd1e3fb1eee52d6 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:1946

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ca4110c8554175a — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2292

                                  cwd=os.curdir, env=os.environ, user=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5acdad44c9e4ebac — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2339

                                  cwd=os.curdir, env=os.environ, group=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc1fbb719acefae5 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2398

                                  cwd=os.curdir, env=os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb621f658fd768f5 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2565

        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd17349eb7e21190 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2588

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6cb6d9d006dae677 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2598

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #573498c5b9927951 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2610

        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c40a3920ec4b1d70 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2974

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3a80ef3a0799b5b — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2989

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5de8b1b6222ad795 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3013

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfd3a90c4bfd87ea — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3310

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51a6ceaf354c0e7e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3316

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff45b327d0955222 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3322

        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #738c94142a9f8f9f — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3547

                open(os.devnull, 'wb') as dev_null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c4f8421804d64b1 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3751

            with open(os.devnull, 'w') as null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4556323da83e306 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3863

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca9c650be6821761 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3873

        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #583eae4f974541d1 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3884

            newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #989da8e370444643 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_threading.py:2105

            with open(os_helper.TESTFN, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dcfbd0dbf2e6c6aa — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:107

        f = open(os_helper.TESTFN, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #e3ae81a5395db4bb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:114

        self.returned_obj = urllib.request.urlopen("file:%s" % self.quoted_pathname)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #a6c79adfbb0afbc9 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:202

        for k in list(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f7f02de90dfe776 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:271

        self._saved_env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9958b8832e08cc8e — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:273

        os.environ = collections.OrderedDict()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04a610fc696f8de7 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:276

        os.environ = self._saved_env

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f54ff0589cb9bad — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:280

        os.environ['no_proxy'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #737d55c56af9e1bb — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:281

        os.environ['No_Proxy'] = 'localhost'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65f1941e8902250f — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:284

        os.environ['http_proxy'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e5923a443b42669 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:285

        os.environ['HTTP_PROXY'] = 'http://somewhere:3128'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26a003e58f7e4437 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:289

        os.environ['no_proxy'] = 'localhost, noproxy.com, my.proxy:1234'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3817c77a4e22b14a — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:290

        os.environ['No_Proxy'] = 'xyz.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #071da44788ef4937 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:297

        os.environ['http_proxy'] = 'http://somewhere:3128'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96226b68ab1bcd79 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:298

        os.environ['Http_Proxy'] = 'http://somewhereelse:3128'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #3ea92106cd280307 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:309

            fp = urllib.request.urlopen("http://python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #082be3b95be55114 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:322

            fp = urllib.request.urlopen(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #be8b7f5e129502c7 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:330

            resp = urllib.request.urlopen("http://www.python.org")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dcbd59e797fcdc92 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:352

                    urllib.request.urlopen(f"http:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2810590496c52389 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:355

                    urllib.request.urlopen(f"https:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8cde9f50777a247c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:391

                    urllib.request.urlopen(f"http:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5b718e65c6ad6910 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:393

                    urllib.request.urlopen(f"https:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7e7a075ac3253932 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:433

                urllib.request.urlopen("http://python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b87ce516d0a6f127 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:450

                urllib.request.urlopen("http://python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2e1132a3a4bb89e5 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:465

                    urllib.request.urlopen("http://something")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0ccc6c0c9d2c0475 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:493

            with urllib.request.urlopen(tmp_fileurl) as fobj:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0aad378455b1bc84 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:501

            urllib.request.urlopen(tmp_fileurl)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #48ec061976cb422d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:547

            urllib.request.urlopen(self.text_url))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7fdfe73749bf6f1f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:549

            urllib.request.urlopen(self.text_url_base64))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #39be75c028dc2660 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:550

        self.image_url_resp = self.enterContext(urllib.request.urlopen(self.image_url))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #f6d21acbe8511558 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:622

            FILE = open(os_helper.TESTFN, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e89d9a6949e0af2 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:676

        FILE = open(second_temp, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #9d54fef12dc87b35 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:68

        with urllib.request.urlopen(file_url) as f:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b3dc9a7b10640f3d — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:103

        self.assertEqual(Request(url,
                                 headers={"Spam-eggs": "blah"}
                                 ).headers["Spam-eggs"], "blah")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a616d2944ad31d8e — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:106

        self.assertEqual(Request(url,
                                 headers={"spam-EggS": "blah"}
                                 ).headers["Spam-eggs"], "blah")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a34695ba5f77bf71 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:126

        req = Request(url, headers={"Spam-eggs": "blah"})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6e290263875ef7ff — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:420

            return Request("http://blah/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9bdf640ab7f5d4b4 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:629

        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #addb2b149cb7afc0 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:671

        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dbef98f21bd0a0ed — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:687

        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7f4e6710d30fa4a6 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:709

        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #423440450219759a — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:846

            f = open(TESTFN, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8233c38df6f80a6e — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:880

                f = open(TESTFN, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #1ae1ec2bd236a2e3 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:952

        req = Request("http://example.com/","badpost")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0b51c24e4cd9002f — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:958

            req = Request("http://example.com/", data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #3cfc474883a0e049 — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:995

        with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #ff84f022ea00189a — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:996

            req = Request("http://example.com/", f, {})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #9a624831f7376c5c — Filesystem access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1002

        with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #06b77872d46fd7fa — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1003

            req = Request("http://example.com/", f, {"Content-Length": 30})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1851d37b4e28a117 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1018

        req = Request("http://example.com/", file_obj, {})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e700b105d57d52e2 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1024

        req = Request("http://example.com/", file_obj, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #787073900f614297 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1044

                req = Request("http://example.com/", proc.stdout, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7f95ed7aafd9a3c5 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1065

            req = Request("http://example.com/", iterable_body(), headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e3320a105e0f9bce — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1078

        req = h.do_request_(Request("http://example.com/", ()))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b4445dbc37101e58 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1091

            req = Request("http://example.com/", iterable_array, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3ddf6052bb71cde9 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1166

        r = Request('http://example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0f191529ab8d0175 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1178

        r = Request('http://www.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #664cf3b9f09bd30d — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1192

        req = Request(weird_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6d40f024c9349c32 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1198

        req = Request(url_without_path)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d075423ab130c1d7 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1208

        req = Request(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c229bc8512f8c97e — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1233

        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3b7d79751b4cffcc — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1329

        req = Request(from_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0a1f7f06c38a23f8 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1351

        req = Request(from_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3d3cd5b9b1a29225 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1400

        fp = urllib.request.urlopen("http://python.org/path")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #64b50542e1beaa69 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1433

                response = opener.open('http://example.com/')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6659b6c00e737a81 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1442

        req = Request(from_url, method="HEAD")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #56624eb56d2ec39e — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1458

            req = Request("http://acme.example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #848fa2f961de9525 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1471

        req = Request("http://www.perl.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #944b18e1f56a1e04 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1475

        req = Request("http://www.python.org")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e9a669e0e3300808 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1486

        req = Request("http://www.python.org")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0e333c5a23f6222c — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1500

        req = Request("https://www.example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #003e8642d8494846 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1514

        req = Request("https://www.example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #24034bc67d0fc5c8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1748

        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #411a2cc3e33d7a64 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1768

        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5c0bfa9fd60be3f6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1794

        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d842861e6054c61f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1820

        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b499eada92caaccb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1834

        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #92fe1e14c194bfdc — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1849

            req = Request("http://dummy/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fae3f227338567df — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1860

        req = Request("http://dummy/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e9f94c3a1729cfb6 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2030

        self.get = Request("http://www.python.org/~jeremy/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #04bc8c54ae3a8e52 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2031

        self.post = Request("http://www.python.org/~jeremy/",
                            "data",
                            headers={"X-Test": "test"})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dc78f12086d35420 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2034

        self.head = Request("http://www.python.org/~jeremy/", method='HEAD')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a5a58ab5b4af19f2 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2078

        req = Request("http://www.python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #291c67ddbac55ed1 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2088

        req = Request("http://www.%70ython.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c90751b503b927c1 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2103

        req = Request("http://www.python.org/?qs=query#fragment=true")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7eb2980ed7a6af7a — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2105

        req = Request("http://www.python.org/#fun=true")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c88241c73d1399d1 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2110

        req = Request(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #823fdd1baea91987 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:311

            self.assertTrue(urllib.request.urlopen(self.server_url))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #13b93057f22358b8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:320

            urllib.request.urlopen(self.server_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #3ce0747056c10d44 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:336

            os.environ.clear()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30f91531ef0b15a3 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:337

            os.environ.update(old_environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3c26dee9d3e8114 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:338

        self.addCleanup(restore_environ, os.environ.copy())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6709d7b9c63c28c3 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:339

        os.environ['NO_PROXY'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f81f4734b673061b — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:340

        os.environ['no_proxy'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #0231b40fafe6c4b0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:368

            self.opener.open(self.URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f46cf38bc81e7dbf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:374

            self.opener.open(self.URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #01c0c7636cf1421f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:381

        with self.opener.open(self.URL) as result:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c85cd1e1dd3786ac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:390

            result = self.opener.open(self.URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #bc4120869046afcb — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:462

            os.environ.clear()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fc4deafc05b296a — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:463

            os.environ.update(old_environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9be2337d070b09a7 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:464

        self.addCleanup(restore_environ, os.environ.copy())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36a0491692542da1 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:465

        os.environ['NO_PROXY'] = '*'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9c2b1cc08e3a330 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:466

        os.environ['no_proxy'] = '*'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #a28599841581da85 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:470

        f = urllib.request.urlopen(url, data, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cb5dab633ba46d63 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:592

        with urllib.request.urlopen(req):

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #45706e62419414bb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:600

        with urllib.request.urlopen(req):

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8c12e17cc9a56fd5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:607

        with urllib.request.urlopen("http://localhost:%s" % handler.port) as open_url:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #446627cf27a8aef5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:614

        open_url = urllib.request.urlopen(
            "http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1e5a63d81e7bd34c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:626

        open_url = urllib.request.urlopen("http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f8ef4d036cd34c63 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:634

        data = urllib.request.urlopen("http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #12f17ae8cc7a9bd8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:642

        data = urllib.request.urlopen("http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b857375439e6f02c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:661

        opener.open(request, "1".encode("us-ascii"))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cbfb603677eb3ddc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:665

        opener.open(request, "1234567890".encode("us-ascii"))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #617d73da7f111491 — Environment-variable access.

pkgs/python/[email protected]/src/greentest/3.15/test_wsgiref.py:529

    os_environ = dict(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

gevent-websocket

python dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #305c395d7c71817e — Filesystem access.

pkgs/python/[email protected]/setup.py:14

    long_description=open("README.rst").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c574f2df8a0a5ed1 — Filesystem access.

pkgs/python/[email protected]/setup.py:17

    license=open('LICENSE').read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

groq

python dependency

expand_more 18 low-confidence finding(s)

low egress dependency Excluded from app score #7e2570723c7cd415 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/groq/_base_client.py:306

        return await self._client.request(self._page_cls, self._options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #1cec1d6aa1f96a5c — Environment-variable access.

pkgs/python/[email protected]/src/groq/_client.py:81

            api_key = os.environ.get("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c8855d18b2e651b — Environment-variable access.

pkgs/python/[email protected]/src/groq/_client.py:89

            base_url = os.environ.get("GROQ_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f08f8570ee473587 — Environment-variable access.

pkgs/python/[email protected]/src/groq/_client.py:93

        custom_headers_env = os.environ.get("GROQ_CUSTOM_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a86cfad3629439dd — Environment-variable access.

pkgs/python/[email protected]/src/groq/_client.py:294

            api_key = os.environ.get("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0edb050ecbd9564f — Environment-variable access.

pkgs/python/[email protected]/src/groq/_client.py:302

            base_url = os.environ.get("GROQ_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9dd7b719369e5abf — Environment-variable access.

pkgs/python/[email protected]/src/groq/_client.py:306

        custom_headers_env = os.environ.get("GROQ_CUSTOM_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #266e990ca7daf069 — Filesystem access.

pkgs/python/[email protected]/src/groq/_files.py:69

            return (path.name, path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51d19227079c1e28 — Filesystem access.

pkgs/python/[email protected]/src/groq/_files.py:81

        return pathlib.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c80e8ceb31c93484 — Filesystem access.

pkgs/python/[email protected]/src/groq/_files.py:111

            return (path.name, await path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c1e257134ce36e5 — Filesystem access.

pkgs/python/[email protected]/src/groq/_files.py:123

        return await anyio.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afb4325f0e90d0d8 — Environment-variable access.

pkgs/python/[email protected]/src/groq/_models.py:120

            extra="allow", defer_build=coerce_boolean(os.environ.get("DEFER_PYDANTIC_BUILD", "true"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e74bf14daacef33 — Filesystem access.

pkgs/python/[email protected]/src/groq/_response.py:495

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #733dd372dc1ef67a — Filesystem access.

pkgs/python/[email protected]/src/groq/_response.py:537

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fab870c03491b7dc — Environment-variable access.

pkgs/python/[email protected]/src/groq/_utils/_logs.py:17

    env = os.environ.get("GROQ_LOG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2ddd42a0a2873e9 — Filesystem access.

pkgs/python/[email protected]/src/groq/_utils/_transform.py:248

            binary = data.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2efa014cc203d41d — Filesystem access.

pkgs/python/[email protected]/src/groq/_utils/_transform.py:414

            binary = await anyio.Path(data).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #386be28d87f6ad06 — Filesystem access.

pkgs/python/[email protected]/src/groq/_utils/_utils.py:379

    contents = Path(path).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

mistletoe

python dependency

expand_more 4 low-confidence finding(s)

low env_fs dependency Excluded from app score #ac9e53addaf419fd — Filesystem access.

pkgs/python/[email protected]/mistletoe/cli.py:27

        with open(filename, 'r', encoding='utf-8') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8c43d15d2c78af3 — Filesystem access.

pkgs/python/[email protected]/mistletoe/contrib/md2jira.py:91

        with open(args[0], 'r', encoding='utf-8') if len(args) == 1 else sys.stdin as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3d2917bdaacbe74 — Filesystem access.

pkgs/python/[email protected]/mistletoe/contrib/md2jira.py:97

            with open(self.options['output'], 'w', encoding='utf-8') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6799fdb7514408c — Filesystem access.

pkgs/python/[email protected]/setup.py:4

with open('README.md', 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

netlify-py

python dependency

expand_more 6 low-confidence finding(s)

low egress dependency Excluded from app score #11d835d2053801a0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/netlify_py/apis/api_base.py:45

        response = requests.get(
            url,
            headers=api_headers,
            params=api_params
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d1e0dd85cb3d672b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/netlify_py/apis/api_base.py:76

        response = requests.post(
            url,
            headers=api_headers,
            json=data
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #e3787647c223eeda — Filesystem access.

pkgs/python/[email protected]/netlify_py/apis/deploy.py:95

                with open(os.path.join(root, file_name), 'rb') as current_file_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4af7a04fbe401e55 — Filesystem access.

pkgs/python/[email protected]/netlify_py/apis/deploy.py:160

                with open(full_path, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a65451bdaa390e15 — Filesystem access.

pkgs/python/[email protected]/setup.py:6

with open(os.path.join(os.path.dirname(__file__), 'README.md')) as readme:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #101be172124be3c1 — Filesystem access.

pkgs/python/[email protected]/setup.py:16

    version_file = open(filename).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ollama

python dependency

expand_more 12 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #6b2e675fa476beed — Filesystem access.

pkgs/python/[email protected]/examples/generate-image.py:13

    with open('output.png', 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #4133e3cdb221c414 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/multimodal-generate.py:8

latest = httpx.get('https://xkcd.com/info.0.json')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #d3a862b2456fad4c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/multimodal-generate.py:13

comic = httpx.get(f'https://xkcd.com/{num}/info.0.json')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #915658db69596ff9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/multimodal-generate.py:20

raw = httpx.get(comic.json().get('img'))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #02937350a4e6c4b7 — Environment-variable access.

pkgs/python/[email protected]/ollama/_client.py:108

    api_key = os.getenv('OLLAMA_API_KEY', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f35b30624836033 — Environment-variable access.

pkgs/python/[email protected]/ollama/_client.py:113

      base_url=_parse_host(host or os.getenv('OLLAMA_HOST')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #a4fa5d3f72ebcb2f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/ollama/_client.py:139

      r = self._client.request(*args, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #43f32ec48612ccef — Filesystem access.

pkgs/python/[email protected]/ollama/_client.py:611

    with open(path, 'rb') as r:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cabc07f5759e9d10 — Filesystem access.

pkgs/python/[email protected]/ollama/_client.py:620

    with open(path, 'rb') as r:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #02560dc20ed36eb0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/ollama/_client.py:732

      r = await self._client.request(*args, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #898064ab350a73bc — Filesystem access.

pkgs/python/[email protected]/ollama/_types.py:167

      return b64encode(self.value.read_bytes() if isinstance(self.value, Path) else self.value).decode()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a847b2928558d55 — Filesystem access.

pkgs/python/[email protected]/ollama/_types.py:172

          return b64encode(Path(self.value).read_bytes()).decode()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

openai

python dependency

expand_more 69 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #084406cc684daa00 — Filesystem access.

pkgs/python/[email protected]/examples/image_stream.py:30

            with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #54a09074647aae40 — Filesystem access.

pkgs/python/[email protected]/examples/image_stream.py:41

            with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #baa0791fef654814 — Environment-variable access.

pkgs/python/[email protected]/examples/realtime/azure_realtime.py:31

    endpoint = os.environ["AZURE_OPENAI_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #89042f4a685b153c — Environment-variable access.

pkgs/python/[email protected]/examples/realtime/azure_realtime.py:37

    deployment_name = os.environ["AZURE_OPENAI_DEPLOYMENT_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2d8b5eb0ff280630 — Filesystem access.

pkgs/python/[email protected]/examples/uploads.py:30

    data = file.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d1fc51014d63832 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:161

api_type: _ApiType | None = _t.cast(_ApiType, _os.environ.get("OPENAI_API_TYPE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9afb010974dbcdc4 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:163

api_version: str | None = _os.environ.get("OPENAI_API_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e60d22f7039cdf8c — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:165

azure_endpoint: str | None = _os.environ.get("AZURE_OPENAI_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #316adb98e2e5bf71 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:167

azure_ad_token: str | None = _os.environ.get("AZURE_OPENAI_AD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43d5b93175624f6a — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:341

    return _os.environ.get("OPENAI_API_KEY") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5228cf87fc8d06e9 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:345

    return azure_endpoint is not None or _os.environ.get("AZURE_OPENAI_API_KEY") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca6f35d8fbb0c91c — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:350

        _os.environ.get("AZURE_OPENAI_AD_TOKEN") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #406d692c8d5ebcd7 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:366

            azure_endpoint = _os.environ.get("AZURE_OPENAI_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e860e79ec0e3655 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:369

            azure_ad_token = _os.environ.get("AZURE_OPENAI_AD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0514ca1d510eda00 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:372

            api_version = _os.environ.get("OPENAI_API_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fbba5c357ab74ce — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:382

            if (azure_ad_token is not None or azure_ad_token_provider is not None) and _os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f3da87037287298 — Environment-variable access.

pkgs/python/[email protected]/src/openai/__init__.py:382

            if (azure_ad_token is not None or azure_ad_token_provider is not None) and _os.environ.get(
                "AZURE_OPENAI_API_KEY"
            ) is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #b8932b2381032422 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/openai/_base_client.py:319

        return await self._client.request(self._page_cls, self._options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #2edb7a0f47da9e74 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:208

                api_key = os.environ.get("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e667af81813639b — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:218

            admin_api_key = os.environ.get("OPENAI_ADMIN_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dbf44721eeb188b0 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:234

            organization = os.environ.get("OPENAI_ORG_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85095fdec3ee1c13 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:238

            project = os.environ.get("OPENAI_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7d394593340c229 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:242

            webhook_secret = os.environ.get("OPENAI_WEBHOOK_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97e5591b778d32dd — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:250

            base_url = os.environ.get("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5bf925bcbb9c2a6 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:254

        custom_headers_env = os.environ.get("OPENAI_CUSTOM_HEADERS") if provider_runtime is None else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc3a12dea5467330 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:808

                api_key = os.environ.get("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e1b698693699cfa — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:818

            admin_api_key = os.environ.get("OPENAI_ADMIN_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #779835e33fec04d6 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:834

            organization = os.environ.get("OPENAI_ORG_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c415afb50ed62a57 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:838

            project = os.environ.get("OPENAI_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6eb976ac08d4d75f — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:842

            webhook_secret = os.environ.get("OPENAI_WEBHOOK_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc6ab594008c9291 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:850

            base_url = os.environ.get("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac9b6c1ccb22761a — Environment-variable access.

pkgs/python/[email protected]/src/openai/_client.py:854

        custom_headers_env = os.environ.get("OPENAI_CUSTOM_HEADERS") if provider_runtime is None else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa5ecbd71a21bba7 — Filesystem access.

pkgs/python/[email protected]/src/openai/_files.py:69

            return (path.name, path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69a0a38096119e15 — Filesystem access.

pkgs/python/[email protected]/src/openai/_files.py:81

        return pathlib.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6d62354893feec6 — Filesystem access.

pkgs/python/[email protected]/src/openai/_files.py:111

            return (path.name, await path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a57682e97c658d04 — Filesystem access.

pkgs/python/[email protected]/src/openai/_files.py:123

        return await anyio.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a691c50f77d6af05 — Filesystem access.

pkgs/python/[email protected]/src/openai/_legacy_response.py:443

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bd485ab61cf5f62 — Filesystem access.

pkgs/python/[email protected]/src/openai/_legacy_response.py:456

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b93bed34258aa50 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_models.py:129

            extra="allow", defer_build=coerce_boolean(os.environ.get("DEFER_PYDANTIC_BUILD", "true"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6ef2bb5a36b0350 — Filesystem access.

pkgs/python/[email protected]/src/openai/_response.py:515

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #adbe1471866e8527 — Filesystem access.

pkgs/python/[email protected]/src/openai/_response.py:557

        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c31ea720bbb65fe7 — Environment-variable access.

pkgs/python/[email protected]/src/openai/_utils/_logs.py:23

    env = os.environ.get("OPENAI_LOG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef412d57678778f0 — Filesystem access.

pkgs/python/[email protected]/src/openai/_utils/_transform.py:248

            binary = data.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57bd3ab2884dc737 — Filesystem access.

pkgs/python/[email protected]/src/openai/_utils/_transform.py:414

            binary = await anyio.Path(data).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4b5f1a3c7486424 — Filesystem access.

pkgs/python/[email protected]/src/openai/_utils/_utils.py:383

    contents = Path(path).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af16e7a53ae00afd — Filesystem access.

pkgs/python/[email protected]/src/openai/auth/_workload.py:59

            with open(token_file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #5b0c5003379855f3 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/openai/auth/_workload.py:107

                response = http_client.get(url, params=params, headers={"Metadata": "true"}, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b406a090b2bc98b0 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/openai/auth/_workload.py:110

                    response = client.get(url, params=params, headers={"Metadata": "true"}, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #21105c3b98fb8c57 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/openai/auth/_workload.py:154

                response = http_client.get(url, params=params, headers={"Metadata-Flavor": "Google"}, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #eb71afdcc572e644 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/src/openai/auth/_workload.py:157

                    response = client.get(url, params=params, headers={"Metadata-Flavor": "Google"}, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #40fab65360f2fc4b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/openai/auth/_workload.py:253

            response = client.post(
                self.token_exchange_url,
                json={
                    "grant_type": TOKEN_EXCHANGE_GRANT_TYPE,
                    "subject_token": subject_token,
                    "subject_token_type": subject_token_type,
                    "identity_provider_id": self.workload_identity["identity_provider_id"],
                    "service_account_id": self.workload_identity["service_account_id"],
                },
                timeout=10.0,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #070bc59a8eef061c — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/_bedrock_auth.py:172

        region = os.environ.get("AWS_REGION") or os.environ.get("AWS_DEFAULT_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f2a044b301863cc — Filesystem access.

pkgs/python/[email protected]/src/openai/lib/_validators.py:485

                with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #307a365eafd82ae1 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:215

            api_key = os.environ.get("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ca69a7c8eeba2c8 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:218

            azure_ad_token = os.environ.get("AZURE_OPENAI_AD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #012d316bf53599ce — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:226

            api_version = os.environ.get("OPENAI_API_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46751174c58ab8f5 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:240

                azure_endpoint = os.environ.get("AZURE_OPENAI_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c4a5ba980b56233 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:539

            api_key = os.environ.get("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3dd1021f1de40fc — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:542

            azure_ad_token = os.environ.get("AZURE_OPENAI_AD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3762df97be4036b0 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:550

            api_version = os.environ.get("OPENAI_API_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3726b116818103a4 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/azure.py:564

                azure_endpoint = os.environ.get("AZURE_OPENAI_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90a46bdfda9254d0 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/bedrock.py:70

    configured = region or os.environ.get("AWS_REGION") or os.environ.get("AWS_DEFAULT_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d309cfba9653642 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/bedrock.py:80

    environment_base_url = os.environ.get("AWS_BEDROCK_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ca1fc8c0bf3276f — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/bedrock.py:105

    token = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fcfa2bec68b2f02 — Environment-variable access.

pkgs/python/[email protected]/src/openai/lib/bedrock.py:150

    environment_token = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #610532d0decb8946 — Environment-variable access.

pkgs/python/[email protected]/src/openai/providers/bedrock.py:249

            token = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #883882bb5ce109d4 — Environment-variable access.

pkgs/python/[email protected]/src/openai/providers/bedrock.py:332

            os.environ.get("AWS_REGION") or os.environ.get("AWS_DEFAULT_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23630f4038430f62 — Environment-variable access.

pkgs/python/[email protected]/src/openai/providers/bedrock.py:339

        environment_base_url = _normalize_optional_string(os.environ.get("AWS_BEDROCK_BASE_URL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13f75420a9e59e01 — Environment-variable access.

pkgs/python/[email protected]/src/openai/providers/bedrock.py:392

        and bool(os.environ.get("AWS_BEARER_TOKEN_BEDROCK"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

orjson

python dependency

expand_more 40 low-confidence finding(s)

low env_fs dependency Excluded from app score #3a63d3640efffa25 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:118

data = json.load(open("../encoding/encodings.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa61a717785c3477 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:120

indexes = json.load(open("../encoding/indexes.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80102250435af1df — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:366

  partially_generated_file = open(path, "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abaf8f090938de78 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:387

label_file = open("src/lib.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #397feae3901ea9a2 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:405

  docfile = open("doc/%s.txt" % name, "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b910b7caaa4be529 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:457

label_test_file = open("src/test_labels_names.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #158d2b22721ee068 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:484

data_file = open("src/data.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54f430e50ef44125 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1173

variant_file = open("src/variant.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bf622fede3bdf05 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1417

ffi_file = open("../encoding_c/src/lib.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14c5132d81594b6c — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1440

single_byte_file = open("src/single_byte.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #036c190bc865eb60 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1494

static_file = open("../encoding_c/include/encoding_rs_statics.h", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c85fecfca9931ce5 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1560

utf_8_file = open("src/utf_8.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8f5ff0294ce481f — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1623

jis0208_in_file = open("src/test_data/jis0208_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ccec2ee6f4aaa1cb — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1632

jis0208_in_ref_file = open("src/test_data/jis0208_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a6d36f78a7b6a75 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1642

jis0208_out_file = open("src/test_data/jis0208_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf1955904626a338 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1643

jis0208_out_ref_file = open("src/test_data/jis0208_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c0d5e129a3f7ec2 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1660

shift_jis_in_file = open("src/test_data/shift_jis_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c69902a7decb97f — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1669

shift_jis_in_ref_file = open("src/test_data/shift_jis_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdd18e122f3212a5 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1684

shift_jis_out_file = open("src/test_data/shift_jis_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d67945c1a1c9c4c9 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1685

shift_jis_out_ref_file = open("src/test_data/shift_jis_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #138936346a6572b9 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1713

iso_2022_jp_in_file = open("src/test_data/iso_2022_jp_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #443df3ffb2fe7730 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1722

iso_2022_jp_in_ref_file = open("src/test_data/iso_2022_jp_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5308bd678d87b356 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1732

iso_2022_jp_out_file = open("src/test_data/iso_2022_jp_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b0be5110efe066c — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1733

iso_2022_jp_out_ref_file = open("src/test_data/iso_2022_jp_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba39a536c0a37f68 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1761

euc_kr_in_file = open("src/test_data/euc_kr_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aaeb0291cb9da3b4 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1770

euc_kr_in_ref_file = open("src/test_data/euc_kr_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a854cdeee51cc635 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1785

euc_kr_out_file = open("src/test_data/euc_kr_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6da2eb4d3cf35a5d — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1786

euc_kr_out_ref_file = open("src/test_data/euc_kr_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7cfd3936a6f150aa — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1802

gb18030_in_file = open("src/test_data/gb18030_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28da6f6301b1019c — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1811

gb18030_in_ref_file = open("src/test_data/gb18030_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e43c8e198817c75f — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1826

gb18030_out_file = open("src/test_data/gb18030_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8303f48148875854 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1827

gb18030_out_ref_file = open("src/test_data/gb18030_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bac7023c0798df92 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1845

big5_in_file = open("src/test_data/big5_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #770c61a39fc6a016 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1861

big5_in_ref_file = open("src/test_data/big5_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be2431229eb36c40 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1898

big5_out_file = open("src/test_data/big5_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e4d19c3e982629c — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1899

big5_out_ref_file = open("src/test_data/big5_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #460b10a0eb268c77 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1921

jis0212_in_file = open("src/test_data/jis0212_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0486a381182a07a7 — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1930

jis0212_in_ref_file = open("src/test_data/jis0212_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2e84e28f760ba8e — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1942

codepage_file = open("../codepage/src/lib.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d9d9d958165b91d — Filesystem access.

pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1974

codepage_test_file = open("../codepage/src/tests.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pdfminer.six

python dependency

expand_more 28 low-confidence finding(s)

low env_fs dependency Excluded from app score #90c9a768c639edda — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/ccitt.py:597

        with open(path, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7d63393e7fe9302 — Environment-variable access.

pkgs/python/pdfminer.six@20260107/pdfminer/cmapdb.py:253

            os.environ.get("CMAP_PATH", "/usr/share/pdfminer/"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23c1a456c02c8fc7 — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:354

                self.write_text(item.get_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2a87342540751b8 — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:356

                self.write_text("\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca36d8121bd7b40c — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:361

            self.write_text(f"Page {ltpage.pageid}\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5d039c209968c05 — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:363

        self.write_text("\f")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4e00fefd1d29205 — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:544

            self.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff7f114c4671b341 — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:589

        self.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d0e636881838cee — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:675

                self.write_text(item.get_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f57c9d09aa6d3fb0 — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:816

                self.write_text(item.get_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a76bac3d8b58e35f — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/fontmetrics.py:39

    with open(path) as fileinput:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d010bd73d2a5db7 — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/glyphlist.py:64

    with open(path) as fileinput:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3945a0a49b6d32e2 — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/image.py:152

        with open(path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #245002376b40a8e9 — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/image.py:174

        with open(path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #289790409bb9fa0f — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/image.py:192

        with open(path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cadb5ce8ea4ae7e6 — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/image.py:228

        with open(path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e994610e56b0416 — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/image.py:242

        with open(path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5eb6c4ff0e9d7bc7 — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/image.py:274

        with open(path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0fef51ebf3606405 — Filesystem access.

pkgs/python/pdfminer.six@20260107/pdfminer/utils.py:46

            self.file_handler: AnyIO = open(filename, *args, **kwargs)  # noqa: SIM115

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d8b147ece3b11b97 — Filesystem access.

pkgs/python/pdfminer.six@20260107/tools/conv_cmap.py:178

        with open(path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #13b606fc9172c30c — Filesystem access.

pkgs/python/pdfminer.six@20260107/tools/dumppdf.py:158

    with open(fname, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #79acdceec5dfe6cd — Filesystem access.

pkgs/python/pdfminer.six@20260107/tools/dumppdf.py:231

        with open(path, "wb") as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #364d43293b4277ab — Filesystem access.

pkgs/python/pdfminer.six@20260107/tools/dumppdf.py:234

    with open(fname, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1279326225fa0c04 — Filesystem access.

pkgs/python/pdfminer.six@20260107/tools/dumppdf.py:261

    with open(fname, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #960e2bbe0f641833 — Filesystem access.

pkgs/python/pdfminer.six@20260107/tools/dumppdf.py:436

    with sys.stdout if args.outfile == "-" else open(args.outfile, "w") as outfp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #282da4a66f4aedf8 — Filesystem access.

pkgs/python/pdfminer.six@20260107/tools/pdf2txt.py:62

            with open(fname, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c76146981c44e9eb — Filesystem access.

pkgs/python/pdfminer.six@20260107/tools/pdf2txt.py:66

        with open(outfile, "wb") as outfp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #43260572d63b4ecd — Filesystem access.

pkgs/python/pdfminer.six@20260107/tools/pdf2txt.py:68

                with open(fname, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

requests

python dependency

expand_more 8 low-confidence finding(s)

low env_fs dependency Excluded from app score #16c49d63f294e5e7 — Environment-variable access.

pkgs/python/[email protected]/src/requests/sessions.py:857

                    os.environ.get("REQUESTS_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd558aa61f427aa7 — Environment-variable access.

pkgs/python/[email protected]/src/requests/sessions.py:858

                    or os.environ.get("CURL_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e96bf595ef869b40 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:239

    netrc_file = os.environ.get("NETRC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f11a278b28f0ba6 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:798

        old_value = os.environ.get(env_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #482e661b8a96be36 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:799

        os.environ[env_name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbed176dfd7f1eb2 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:805

                del os.environ[env_name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4fd244a684662c2f — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:807

                os.environ[env_name] = old_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #320384028f984202 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:820

        return os.environ.get(key) or os.environ.get(key.upper())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

sqlmodel

python dependency

expand_more 56 low-confidence finding(s)

low egress dependency Excluded from app score #5af4b7256b3c7151 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/advanced/uuid/tutorial002_py310.py:49

        selected_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #844cb443b7d04192 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/app_testing/tutorial001_py310/main.py:75

    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3085728493ab0e6b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/app_testing/tutorial001_py310/main.py:85

    db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8bc523fdff7018bd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/app_testing/tutorial001_py310/main.py:98

    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1393db44ad19b951 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/app_testing/tutorial001_py310/test_main.py:89

    response = client.get(f"/heroes/{hero_1.id}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d0fd5cc45aa19f8e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/app_testing/tutorial001_py310/test_main.py:121

    hero_in_db = session.get(Hero, hero_1.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0f1a4c38d96eabfa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/delete/tutorial001_py310.py:68

        hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6012498edce4565f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/delete/tutorial001_py310.py:77

        db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e54c0079dd44f747 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/delete/tutorial001_py310.py:91

        hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #103cf5df130c211a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/limit_and_offset/tutorial001_py310.py:62

        hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9ea91776f7bb7403 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/read_one/tutorial001_py310.py:62

        hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9af81a3c5b9213c8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/relationships/tutorial001_py310.py:113

    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #31a7c6c7c04e77f6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/relationships/tutorial001_py310.py:123

    db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #578d4ef347f02b5c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/relationships/tutorial001_py310.py:136

    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #96c94ece2504600d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/relationships/tutorial001_py310.py:166

    team = session.get(Team, team_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e11b68fffa0de367 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/relationships/tutorial001_py310.py:179

    db_team = session.get(Team, team_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #aa72fa793ea6072f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/relationships/tutorial001_py310.py:192

    team = session.get(Team, team_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #555d3948246c05ee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/session_with_dependency/tutorial001_py310.py:75

    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c08a557ab519ed01 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/session_with_dependency/tutorial001_py310.py:85

    db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #baf9df390dfeb89f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/session_with_dependency/tutorial001_py310.py:98

    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9bf19230dea9a15f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/teams/tutorial001_py310.py:104

    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dbd66713d5e23f0f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/teams/tutorial001_py310.py:114

    db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ea82bf68ebd946b5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/teams/tutorial001_py310.py:127

    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #913435b56797b416 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/teams/tutorial001_py310.py:157

    team = session.get(Team, team_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1c296f484bb24dbe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/teams/tutorial001_py310.py:170

    db_team = session.get(Team, team_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fd190ec2fc3c1bbd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/teams/tutorial001_py310.py:183

    team = session.get(Team, team_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d0bd1bcb0bd4e96a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/update/tutorial001_py310.py:68

        hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3413c8adf8b6200a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/update/tutorial001_py310.py:77

        db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1910192c1e444e42 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/update/tutorial002_py310.py:77

        hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #88116e50f4445ae6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/fastapi/update/tutorial002_py310.py:86

        db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #250a373c48cbe032 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/one/tutorial008_py310.py:44

        hero = session.get(Hero, 1)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e5d5025cedc35537 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/docs_src/tutorial/one/tutorial009_py310.py:44

        hero = session.get(Hero, 9001)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #d709748333034e7f — Filesystem access.

pkgs/python/[email protected]/scripts/add_latest_release_date.py:12

    with open(RELEASE_NOTES_FILE) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7b36560f1fdc35f2 — Filesystem access.

pkgs/python/[email protected]/scripts/add_latest_release_date.py:31

        with open(RELEASE_NOTES_FILE, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e158c4183fe8574a — Environment-variable access.

pkgs/python/[email protected]/scripts/docs.py:26

    os.environ["DYLD_FALLBACK_LIBRARY_PATH"] = "/opt/homebrew/lib"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d08b21e2d14d672c — Filesystem access.

pkgs/python/[email protected]/scripts/docs.py:43

    content = en_index.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #dcd99fc6d75bbe91 — Filesystem access.

pkgs/python/[email protected]/scripts/docs.py:48

    sponsors = yaml.safe_load(sponsors_data_path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #44c4dfb4957e9c8e — Filesystem access.

pkgs/python/[email protected]/scripts/docs.py:79

    readme_path.write_text(new_content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #31a03a5848ececba — Filesystem access.

pkgs/python/[email protected]/scripts/docs.py:90

    readme_content = readme_path.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #33a143bc59b0d982 — Environment-variable access.

pkgs/python/[email protected]/scripts/docs.py:114

    subprocess.run(args, env={**os.environ, "LINENUMS": "true"}, check=True)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #137aae9bbd80a3f4 — Filesystem access.

pkgs/python/[email protected]/scripts/docs.py:159

    base_content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e5695bf561bd72e5 — Filesystem access.

pkgs/python/[email protected]/scripts/docs.py:207

        version_file.write_text(content_format, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #50512b4321f6a0e1 — Filesystem access.

pkgs/python/[email protected]/scripts/docs.py:263

        content = md_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e1e8040a31db2d0d — Filesystem access.

pkgs/python/[email protected]/scripts/docs.py:270

            md_file.write_text(new_content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #106c099e1b301bf0 — Filesystem access.

pkgs/python/[email protected]/scripts/docs.py:285

        all_docs_content += md_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a7d91e4f9a6df523 — Filesystem access.

pkgs/python/[email protected]/scripts/generate_select.py:46

template: Template = Template(template_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #66481ff285fa0198 — Filesystem access.

pkgs/python/[email protected]/scripts/generate_select.py:57

current_content = destiny_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7ea9e0f24cbfeec5 — Environment-variable access.

pkgs/python/[email protected]/scripts/generate_select.py:59

if current_content != result and os.getenv("CHECK_JINJA"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c3a0fa80b270123a — Filesystem access.

pkgs/python/[email protected]/scripts/generate_select.py:64

destiny_path.write_text(result)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #5c7cf8cea6a5518d — Filesystem access.

pkgs/python/[email protected]/scripts/prepare_release.py:139

    version_file_content = version_file.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7988e8f2b3386ab0 — Filesystem access.

pkgs/python/[email protected]/scripts/prepare_release.py:140

    release_notes_content = release_notes_file.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ea5c8f35b05d0129 — Filesystem access.

pkgs/python/[email protected]/scripts/prepare_release.py:145

    version_file.write_text(
        update_version_file(version_file_content, version, version_file)
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #291b1b7248ce8184 — Filesystem access.

pkgs/python/[email protected]/scripts/prepare_release.py:148

    release_notes_file.write_text(
        update_release_notes(
            release_notes_content, version, parsed_release_date, release_notes_file
        )
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #033ecff84522371d — Filesystem access.

pkgs/python/[email protected]/scripts/prepare_release.py:171

    typer.echo(get_current_version(version_file.read_text(), version_file))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #213bdfcc4690e892 — Filesystem access.

pkgs/python/[email protected]/scripts/prepare_release.py:199

    version = get_current_version(version_file.read_text(), version_file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e393e752e94cb33b — Filesystem access.

pkgs/python/[email protected]/scripts/prepare_release.py:202

            release_notes_file.read_text(), version, release_notes_file

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tiktoken

python dependency

expand_more 16 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #3b861f6a53c9d26a — Environment-variable access.

pkgs/python/[email protected]/scripts/benchmark.py:16

    num_threads = int(os.environ["RAYON_NUM_THREADS"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f43256f9851724c6 — Filesystem access.

pkgs/python/[email protected]/scripts/redact.py:11

    text = path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #af2c152069073d6f — Filesystem access.

pkgs/python/[email protected]/scripts/redact.py:35

            path.write_text(redacted_text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #6cb5d961800f54fc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/scripts/wheel_download.py:13

    response = requests.get(artifacts_url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unreachable #e038db96e8e02f73 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/scripts/wheel_download.py:31

        response = requests.get(download_url, headers=headers, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #5003243fc2ceacf3 — Filesystem access.

pkgs/python/[email protected]/scripts/wheel_download.py:35

        with open(temp_zip, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a0a35896ab3bc81 — Filesystem access.

pkgs/python/[email protected]/tiktoken/_educational.py:212

    with open(__file__) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66c7091f80788e1a — Filesystem access.

pkgs/python/[email protected]/tiktoken/load.py:10

        with open(blobpath, "rb", buffering=0) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #fa3d27c86079e8e5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/tiktoken/load.py:17

        resp = requests.get(blobpath)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #8d6826e412e68704 — Filesystem access.

pkgs/python/[email protected]/tiktoken/load.py:27

    return blobfile.read_bytes(blobpath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77e27cc2c1c2c574 — Environment-variable access.

pkgs/python/[email protected]/tiktoken/load.py:37

    if "TIKTOKEN_CACHE_DIR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e33052415adfeed7 — Environment-variable access.

pkgs/python/[email protected]/tiktoken/load.py:38

        cache_dir = os.environ["TIKTOKEN_CACHE_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5a34724b2f5ed89 — Environment-variable access.

pkgs/python/[email protected]/tiktoken/load.py:39

    elif "DATA_GYM_CACHE_DIR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41148fbbb35a6895 — Environment-variable access.

pkgs/python/[email protected]/tiktoken/load.py:40

        cache_dir = os.environ["DATA_GYM_CACHE_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a46896e70eb7ed66 — Filesystem access.

pkgs/python/[email protected]/tiktoken/load.py:55

        with open(cache_path, "rb", buffering=0) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #123169befa6a0d04 — Filesystem access.

pkgs/python/[email protected]/tiktoken/load.py:78

        with open(tmp_filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

toml

python dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #aeffcafaf9f57166 — Filesystem access.

pkgs/python/[email protected]/setup.py:8

with open("README.rst") as readme_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2816e04a9a9dbb2 — Filesystem access.

pkgs/python/[email protected]/toml/decoder.py:133

        with io.open(_getpath(f), encoding='utf-8') as ffile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

urllib3

python dependency

expand_more 12 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #6a98c41954c3a573 — Environment-variable access.

pkgs/python/[email protected]/docs/conf.py:15

if "READTHEDOCS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1e9c8be884f8fa8c — Environment-variable access.

pkgs/python/[email protected]/docs/conf.py:76

html_baseurl = os.environ.get("READTHEDOCS_CANONICAL_URL", "/")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d67657a39843c42c — Filesystem access.

pkgs/python/[email protected]/dummyserver/app.py:466

        return await make_response(file_path.read_bytes(), 200, headers)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23785671ae8dc03b — Filesystem access.

pkgs/python/[email protected]/dummyserver/app.py:483

    return await make_response(file_path.read_bytes(), 200, headers)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #0db116bb532b3031 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/urllib3/__init__.py:193

    return _DEFAULT_POOL.request(
        method,
        url,
        body=body,
        fields=fields,
        headers=headers,
        preload_content=preload_content,
        decode_content=decode_content,
        redirect=redirect,
        retries=retries,
        timeout=timeout,
        json=json,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #076bbc18650582ab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/urllib3/connectionpool.py:210

            self.pool.put(None)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #73b9eedf95ea2bcd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/urllib3/connectionpool.py:310

                self.pool.put(conn, block=False)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #92b225197195b063 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/urllib3/connectionpool.py:493

            conn.request(
                method,
                url,
                body=body,
                headers=headers,
                chunked=chunked,
                preload_content=preload_content,
                decode_content=decode_content,
                enforce_content_length=enforce_content_length,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #d41212a3e05858b1 — Filesystem access.

pkgs/python/[email protected]/src/urllib3/contrib/emscripten/fetch.py:204

        streaming_worker_code = (
            files(__package__)
            .joinpath("emscripten_fetch_worker.js")
            .read_text(encoding="utf-8")
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #393b7a2b928af010 — Environment-variable access.

pkgs/python/[email protected]/src/urllib3/util/ssl_.py:317

    if "SSLKEYLOGFILE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8cc2d9a4512c8205 — Environment-variable access.

pkgs/python/[email protected]/src/urllib3/util/ssl_.py:318

        sslkeylogfile = os.path.expandvars(os.environ.get("SSLKEYLOGFILE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #257d70ffd505c736 — Filesystem access.

pkgs/python/[email protected]/src/urllib3/util/ssl_.py:452

    with open(key_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

xhtml2pdf

python dependency

expand_more 13 low-confidence finding(s)

low egress dependency Excluded from app score #ba8b9cb48579568b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/xhtml2pdf/files.py:227

            urlResponse = request.urlopen(self.uri)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7f0c5724feb0d7c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/xhtml2pdf/files.py:267

            conn = httplib.HTTPSConnection(server, **httpConfig)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a91a882cd2a68ebd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/xhtml2pdf/files.py:270

        conn.request("GET", path)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #be81a4c3e75de0da — Filesystem access.

pkgs/python/[email protected]/xhtml2pdf/files.py:317

                with open(uri, encoding="utf-8") as file_handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f323ab072ccb747e — Filesystem access.

pkgs/python/[email protected]/xhtml2pdf/files.py:320

                with open(uri, "rb") as file_handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb6ef40fa6f434a4 — Filesystem access.

pkgs/python/[email protected]/xhtml2pdf/files.py:349

        with open(self.path, "rb") as arch:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f36ff0c21421f089 — Filesystem access.

pkgs/python/[email protected]/xhtml2pdf/pisa.py:273

            with open(a, encoding="utf-8") as file_handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3097714b3a42311a — Filesystem access.

pkgs/python/[email protected]/xhtml2pdf/pisa.py:328

            with open(fsrc, "rb") as file_handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6eb35f321aefb5d — Filesystem access.

pkgs/python/[email protected]/xhtml2pdf/pisa.py:340

                    with open(dest, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d4e1106c72e4b63 — Filesystem access.

pkgs/python/[email protected]/xhtml2pdf/pisa.py:362

                with open(dest, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #877c0ddd858c9d9e — Filesystem access.

pkgs/python/[email protected]/xhtml2pdf/pisa.py:367

            fdest = open(dest, "wb")  # noqa: SIM115

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c523d22564978f0 — Filesystem access.

pkgs/python/[email protected]/xhtml2pdf/pisa.py:444

    with open(filename, "rb") as file_handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ac7617d71b0eb15 — Filesystem access.

pkgs/python/[email protected]/xhtml2pdf/w3c/cssParser.py:442

        with open(srcFile, encoding="utf-8") as file_handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

playwright prod — no sdist (wheels only)
google-generativeai prod — no sdist (wheels only)

verified_user No application data leak found

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Application data flows

</> First-Party Code

first-party (python)

</> Dependencies

mistralai

Flask-SocketIO

GitPython

Jinja2

Markdown

anthropic

colorama

curl_cffi

duckduckgo-search

eventlet

fastlogging

flask

gevent

gevent-websocket

groq

mistletoe

netlify-py

ollama

openai

orjson

pdfminer.six

requests

sqlmodel

tiktoken

toml

urllib3

xhtml2pdf

Skipped dependencies