Close Open: huggingface/transformers

low env_fs production #54c8d5892bbe305a — Environment-variable access.

repo/.circleci/create_circleci_config.py:117

            print(os.environ.get("GIT_COMMIT_MESSAGE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #989aaaa72d59b0f6 — Environment-variable access.

repo/.circleci/create_circleci_config.py:119

                "[build-ci-image]" in os.environ.get("GIT_COMMIT_MESSAGE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #930b03b93e02f170 — Environment-variable access.

repo/.circleci/create_circleci_config.py:120

                or os.environ.get("GIT_COMMIT_MESSAGE", "") == "dev-ci"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa7a7fda268b0ffd — Filesystem access.

repo/.circleci/create_circleci_config.py:138

                with open(test_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0545e1eb85e9b049 — Environment-variable access.

repo/.circleci/create_circleci_config.py:154

        env["RUN_FLAKY"] = os.environ.get("CIRCLE_PULL_REQUEST", "") == ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #636a4a2cfd6f560d — Environment-variable access.

repo/.circleci/create_circleci_config.py:444

    os.environ["test_preparation_dir"] = folder

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04b4607433768f5d — Environment-variable access.

repo/.circleci/create_circleci_config.py:476

    if "CIRCLE_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5596c4f118ff2788 — Filesystem access.

repo/.circleci/create_circleci_config.py:485

    with open(os.path.join(folder, "generated_config.yml"), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d29ddb59da87b5bb — Filesystem access.

repo/.circleci/parse_test_outputs.py:8

    with open(file_path, 'r', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e7b4be2156030d47 — Filesystem access.

repo/.circleci/parse_test_outputs.py:22

    with open(file_path, 'r', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b09c06e5d6619175 — Filesystem access.

repo/.circleci/parse_test_outputs.py:39

    with open(file_path, 'r', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b5de3ef9a07d7a9a — Filesystem access.

repo/.github/scripts/assign_reviewers.py:76

    with open(script_dir / "codeowners_for_review_action") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5201b6651863033b — Environment-variable access.

repo/.github/scripts/assign_reviewers.py:79

    g = Github(os.environ['GITHUB_TOKEN'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #883d4e669b0761e7 — Filesystem access.

repo/.github/scripts/assign_reviewers.py:81

    with open(os.environ['GITHUB_EVENT_PATH']) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a53c75ffe727d60a — Environment-variable access.

repo/.github/scripts/assign_reviewers.py:81

    with open(os.environ['GITHUB_EVENT_PATH']) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #94f91069af86806c — Environment-variable access.

repo/benchmark/benches/llama.py:44

os.environ["HF_XET_HIGH_PERFORMANCE"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8bca40f8b4b1d243 — Environment-variable access.

repo/benchmark/benches/llama.py:45

os.environ["TOKENIZERS_PARALLELISM"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #395501690655a375 — Environment-variable access.

repo/benchmark/benches/llama.py:111

        os.environ["TOKENIZERS_PARALLELISM"] = "false"  # silence warnings when compiling

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #fd5712ffc4efd2f1 — Filesystem access.

repo/benchmark/benchmark.py:143

        with open(os.path.join(report_dir, "summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e343cb461d5b4bdc — Filesystem access.

repo/benchmark/benchmark.py:190

    with open(os.path.join(exp_run_dir, "summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3446dc02664169cc — Filesystem access.

repo/benchmark/benchmark.py:310

        with open(os.path.join(exp_run_dir, "summaries.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2ab653439651f537 — Environment-variable access.

repo/benchmark_v2/benchmark_scripts/continuous_batching_overall.py:176

        self.global_rank = int(os.environ.get("RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b3b064fa9d369dc — Environment-variable access.

repo/benchmark_v2/benchmark_scripts/continuous_batching_overall.py:177

        self.local_rank = int(os.environ.get("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6f16c8bd30564ef6 — Filesystem access.

repo/benchmark_v2/benchmark_scripts/continuous_batching_overall.py:287

        with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0139bba7dd03635b — Filesystem access.

repo/benchmark_v2/benchmark_scripts/continuous_batching_overall.py:298

        data = json.loads(candidates[-1].read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a46d51e484ea598c — Environment-variable access.

repo/benchmark_v2/framework/benchmark_runner.py:56

PUSH_TO_HUB_TOKEN = os.getenv("PUSH_TO_HUB_TOKEN", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1396f6958e65932 — Filesystem access.

repo/benchmark_v2/framework/benchmark_runner.py:437

        with open(filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #83332ec3efcd5d6d — Filesystem access.

repo/benchmark_v2/framework/benchmark_runner.py:467

                with open(jsonl_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2c0215d6a0fd25b4 — Filesystem access.

repo/benchmark_v2/run_benchmarks.py:99

            with open(args.config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c0650edfb6f3efe — Filesystem access.

repo/benchmark_v2/run_benchmarks.py:102

            with open(args.config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fbf2cfd0fbe95467 — Environment-variable access.

repo/conftest.py:56

    worker = os.environ.get("PYTEST_XDIST_WORKER", "main")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2fcd1283de21d14c — Filesystem access.

repo/conftest.py:58

        with open(os.path.join(_ci_fallback_events_dir, f"{worker}-{os.getpid()}.log"), "a", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f5628b113952e5b — Filesystem access.

repo/conftest.py:70

                with open(os.path.join(_ci_fallback_events_dir, name), encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33c3b7b166f94c9a — Environment-variable access.

repo/conftest.py:147

                mock.patch.dict(os.environ, {"HF_HUB_DISABLE_XET": "1"}),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f622cfafaf5e9f02 — Environment-variable access.

repo/conftest.py:149

                mock.patch.dict(os.environ, {"HF_XET_CACHE": _ci_fallback_cache_dir}),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5b42ebb35ad73f9 — Environment-variable access.

repo/conftest.py:209

    _ci_fallback_events_dir = os.environ.get("CI_FALLBACK_EVENTS_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ecc5ca33a748a311 — Environment-variable access.

repo/conftest.py:212

        os.environ["CI_FALLBACK_EVENTS_DIR"] = _ci_fallback_events_dir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #030469071516d10d — Environment-variable access.

repo/conftest.py:259

    os.environ["DISABLE_SAFETENSORS_CONVERSION"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #538ec3b5e8a7d9d1 — Environment-variable access.

repo/conftest.py:353

if os.environ.get("PATCH_TESTING_METHODS_TO_COLLECT_OUTPUTS", "").lower() in ("yes", "true", "on", "y", "1"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #158b67b1ccf95c9b — Environment-variable access.

repo/examples/3D_parallel.py:75

    tp_size = int(os.environ.get("TP_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1b5a8934177d4800 — Environment-variable access.

repo/examples/3D_parallel.py:76

    dp_size = int(os.environ.get("DP_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8a5ad7b7da3f2b6d — Environment-variable access.

repo/examples/3D_parallel.py:77

    cp_size = int(os.environ.get("CP_SIZE", "1"))  # Add CP size configuration

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #eee951ef1c2b3547 — Environment-variable access.

repo/examples/3D_parallel.py:90

    if "RANK" in os.environ and "WORLD_SIZE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2df2b976c243b24e — Environment-variable access.

repo/examples/3D_parallel.py:94

        local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d6f4c870e2469c0d — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:58

ignore_sanity_checks = int(os.environ.get("IGNORE_SANITY", "0")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3abbe68b8c8597e2 — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:76

    tp_size = int(os.environ.get("TP_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0dfbd537ec2142d8 — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:77

    dp_size = int(os.environ.get("DP_SIZE", "4"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #69f3f84c3e0a2bc4 — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:78

    cp_size = int(os.environ.get("CP_SIZE", "1"))  # Add CP size configuration

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #824baefb8fe19059 — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:91

    if "RANK" in os.environ and "WORLD_SIZE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0e4ac4d9dcc20c4d — Environment-variable access.

repo/examples/pytorch/3d_parallel_checks.py:95

        local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b922134d5fae951b — Environment-variable access.

repo/examples/pytorch/context_parallel.py:27

world_size = int(os.environ.get("WORLD_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6c22ed37a836dce7 — Filesystem access.

repo/examples/pytorch/continuous_batching.py:131

        with open(output_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #81c62ad3f9ba88e3 — Filesystem access.

repo/examples/pytorch/image-classification/run_image_classification.py:78

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0898af881549a62f — Filesystem access.

repo/examples/pytorch/image-classification/run_image_classification_no_trainer.py:280

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #25f84527066a9d61 — Filesystem access.

repo/examples/pytorch/image-classification/run_image_classification_no_trainer.py:650

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4855ff19cae78744 — Filesystem access.

repo/examples/pytorch/image-pretraining/run_mim_no_trainer.py:432

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #31b8f8d5f46b8030 — Filesystem access.

repo/examples/pytorch/instance-segmentation/run_instance_segmentation_no_trainer.py:401

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #58405ac5bb508f2a — Filesystem access.

repo/examples/pytorch/instance-segmentation/run_instance_segmentation_no_trainer.py:731

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5c82ff9545e1416e — Filesystem access.

repo/examples/pytorch/language-modeling/run_clm_no_trainer.py:317

                with open(gitignore_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #360a85fe33724727 — Filesystem access.

repo/examples/pytorch/language-modeling/run_clm_no_trainer.py:319

            with open(gitignore_path, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9c0f5f8928be3674 — Filesystem access.

repo/examples/pytorch/language-modeling/run_clm_no_trainer.py:729

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #88e194956f4ef234 — Filesystem access.

repo/examples/pytorch/language-modeling/run_fim_no_trainer.py:379

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ba75087cea8fb8a8 — Filesystem access.

repo/examples/pytorch/language-modeling/run_fim_no_trainer.py:910

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0cdfc7efe21ff610 — Filesystem access.

repo/examples/pytorch/language-modeling/run_mlm_no_trainer.py:320

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b48283e71cd30e92 — Filesystem access.

repo/examples/pytorch/language-modeling/run_mlm_no_trainer.py:759

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #fa27bfcb011c2fb9 — Filesystem access.

repo/examples/pytorch/multiple-choice/run_swag_no_trainer.py:283

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #00c83f326b04aec7 — Filesystem access.

repo/examples/pytorch/multiple-choice/run_swag_no_trainer.py:653

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b54cb851314fd5ec — Filesystem access.

repo/examples/pytorch/object-detection/run_object_detection_no_trainer.py:444

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #50262c8eed444742 — Filesystem access.

repo/examples/pytorch/object-detection/run_object_detection_no_trainer.py:775

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f259a0fcf5490cb2 — Filesystem access.

repo/examples/pytorch/old_test_xla_examples.py:35

        with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e9086642ff759030 — Filesystem access.

repo/examples/pytorch/question-answering/run_qa_beam_search_no_trainer.py:85

    with open(os.path.join(output_dir, file_name), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #514edd4fad2be431 — Filesystem access.

repo/examples/pytorch/question-answering/run_qa_beam_search_no_trainer.py:344

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e5d6becf06c4d6ed — Filesystem access.

repo/examples/pytorch/question-answering/run_qa_no_trainer.py:90

    with open(os.path.join(output_dir, file_name), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ace81b3e76804efc — Filesystem access.

repo/examples/pytorch/question-answering/run_qa_no_trainer.py:383

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #32018c794dca0688 — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:238

        with open(prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8c65b9580b457e58 — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:241

        with open(nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #dfc059e325803a22 — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:245

            with open(null_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c9b2b9348a435fc3 — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:432

        with open(prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ff9bc5b85a761710 — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:435

        with open(nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #06c418efc7fc1f9c — Filesystem access.

repo/examples/pytorch/question-answering/utils_qa.py:439

            with open(null_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #28d7c83e011701a3 — Filesystem access.

repo/examples/pytorch/semantic-segmentation/run_semantic_segmentation.py:240

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0e515eb292c56c18 — Filesystem access.

repo/examples/pytorch/semantic-segmentation/run_semantic_segmentation_no_trainer.py:272

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #afcbbf1a6fc83d9d — Filesystem access.

repo/examples/pytorch/semantic-segmentation/run_semantic_segmentation_no_trainer.py:308

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #91fcaad854ccd6fb — Filesystem access.

repo/examples/pytorch/semantic-segmentation/run_semantic_segmentation_no_trainer.py:614

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #aa07cf8affa506b9 — Filesystem access.

repo/examples/pytorch/speech-pretraining/run_wav2vec2_pretraining_no_trainer.py:442

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #709f2fcb09740336 — Filesystem access.

repo/examples/pytorch/speech-recognition/run_speech_recognition_ctc.py:562

                with open(vocab_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ca09a784f0862d41 — Filesystem access.

repo/examples/pytorch/speech-recognition/run_speech_recognition_ctc_adapter.py:566

                with open(vocab_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3f2a0f9829c31d75 — Filesystem access.

repo/examples/pytorch/summarization/run_summarization.py:737

                with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #eb6af91546494152 — Filesystem access.

repo/examples/pytorch/summarization/run_summarization_no_trainer.py:392

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9b1808c32a662153 — Filesystem access.

repo/examples/pytorch/summarization/run_summarization_no_trainer.py:808

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #730dafd3e73375a1 — Filesystem access.

repo/examples/pytorch/test_accelerate_examples.py:53

        with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ff719dd3077c800a — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:78

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7acff8a75e0e9171 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:103

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #06e83b3523777edc — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:131

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #96edf2f59999646a — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:152

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d40b988486bf891d — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:181

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #91406fd3ea08f659 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:210

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #961808a307439287 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:233

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #32b371aa6cd4ddf5 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:261

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8f719b06a2c5d74a — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:313

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4d024e9d0499a251 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:340

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b6e18feb7dc6d620 — Environment-variable access.

repo/examples/pytorch/test_accelerate_examples.py:364

    @mock.patch.dict(os.environ, {"WANDB_MODE": "offline", "DVCLIVE_TEST": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2c82f64e40a1c836 — Filesystem access.

repo/examples/pytorch/test_pytorch_examples.py:89

        with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8d9837396453b80b — Environment-variable access.

repo/examples/pytorch/test_pytorch_examples.py:604

    @patch.dict(os.environ, {"WANDB_DISABLED": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3bbc630ba59f91a5 — Environment-variable access.

repo/examples/pytorch/test_pytorch_examples.py:632

    @patch.dict(os.environ, {"WANDB_DISABLED": "true"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b67362ddff3fa51f — Filesystem access.

repo/examples/pytorch/text-classification/run_classification.py:716

            with open(output_predict_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ea6d0bda7bd49fa2 — Filesystem access.

repo/examples/pytorch/text-classification/run_glue.py:615

                with open(output_predict_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2afda8a12732d884 — Filesystem access.

repo/examples/pytorch/text-classification/run_glue_no_trainer.py:275

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b036a143edcf3e1d — Filesystem access.

repo/examples/pytorch/text-classification/run_glue_no_trainer.py:691

        with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #835e5fa2d48663d1 — Filesystem access.

repo/examples/pytorch/text-classification/run_xnli.py:438

            with open(output_predict_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #43d0b89d5b65bd09 — Filesystem access.

repo/examples/pytorch/token-classification/run_ner.py:617

            with open(output_predictions_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #874a1839c1c3fe81 — Filesystem access.

repo/examples/pytorch/token-classification/run_ner_no_trainer.py:324

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3f4057558ce9197b — Filesystem access.

repo/examples/pytorch/token-classification/run_ner_no_trainer.py:828

            with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d97dc2357950b8b5 — Filesystem access.

repo/examples/pytorch/translation/run_translation.py:661

                with open(output_prediction_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #79c6a87a7f7a88d9 — Filesystem access.

repo/examples/pytorch/translation/run_translation_no_trainer.py:369

            with open(os.path.join(args.output_dir, ".gitignore"), "w+") as gitignore:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bb38230050f84170 — Filesystem access.

repo/examples/pytorch/translation/run_translation_no_trainer.py:792

        with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #505f27f151f6a639 — Environment-variable access.

repo/examples/training/distributed_training.py:9

LOCAL_RANK = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a66b6cbe33dd876c — Environment-variable access.

repo/examples/training/distributed_training.py:10

WORLD_SIZE = int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3459cc4084909371 — Environment-variable access.

repo/examples/training/distributed_training.py:11

WORLD_RANK = int(os.environ["RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d7c040219a1ff838 — Environment-variable access.

repo/examples/training/distributed_training.py:13

LOCAL_RANK = int(os.environ["OMPI_COMM_WORLD_LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5f6583ddc65956d2 — Environment-variable access.

repo/examples/training/distributed_training.py:14

WORLD_SIZE = int(os.environ["OMPI_COMM_WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9a3a640bb52e1d3a — Environment-variable access.

repo/examples/training/distributed_training.py:15

WORLD_RANK = int(os.environ["OMPI_COMM_WORLD_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7b4832fb37128d7 — Filesystem access.

repo/scripts/distributed/torch-distributed-gpu-test.py:55

    with open(__file__, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff8f72ec398ea339 — Environment-variable access.

repo/scripts/distributed/torch-distributed-gpu-test.py:63

local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #75ba4d3db0f164cb — Environment-variable access.

repo/scripts/stale.py:37

    g = Github(os.environ["GITHUB_TOKEN"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d199ac1f08a22bcc — Filesystem access.

repo/setup.py:311

        with open(target, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d02f6877661d3041 — Filesystem access.

repo/setup.py:331

        long_description=open("README.md", "r", encoding="utf-8").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c51914ae1f1c115c — Filesystem access.

repo/src/transformers/audio_utils.py:339

            with open(audio, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a3170a47b6ebbfe0 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:176

    with open(file_name, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da2f18bdb1390fa7 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:182

    with open(file_name, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f27621ca7fd84ac — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:228

    autofile = (repo_path / "src" / "transformers" / "models" / "auto" / "auto_mappings.py").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f5a0db4e21ba699d — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:246

                file = (repo_path / "src" / "transformers" / "models" / "auto" / filename).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a81e774649efeed — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:333

    with open(toc_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00c711ac5935ce5f — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:392

    with open(module_name, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f286bc6c89df114 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:517

            with open(original_test_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #153e61dd6c1fde65 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:567

    with open(new_module_folder / f"modular_{new_lowercase_name}.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c4a164e8e83f903 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:572

    with open(new_module_folder / "__init__.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #879af1c7b78e99ac — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:589

    with open(tests_folder / "__init__.py", "w"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b21a9cd48d7a1bb6 — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:593

        with open(tests_folder / filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7c03147160074fa — Filesystem access.

repo/src/transformers/cli/add_new_model_like.py:598

    with open(repo_path / "docs" / "source" / "en" / "model_doc" / f"{new_lowercase_name}.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae9295e0b4a69e6f — Filesystem access.

repo/src/transformers/cli/chat.py:363

            with open(examples_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #596bfe72fb7e1184 — Filesystem access.

repo/src/transformers/cli/chat.py:659

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #970c212e36fc30c1 — Filesystem access.

repo/src/transformers/configuration_utils.py:921

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7313db2115c31277 — Filesystem access.

repo/src/transformers/configuration_utils.py:1136

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f1bdb30380a83e2 — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:159

        with open(model, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #090fde7362b832c9 — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:706

        with open(self.original_tokenizer.vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #97393b7715e83e73 — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:1713

        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bf18c7c9dcdbc395 — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:1753

        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c65cb42be479dea — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:1843

        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #844546ea3529daf9 — Filesystem access.

repo/src/transformers/convert_slow_tokenizer.py:2003

        with open(self.vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #879792c7e517f0b7 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:576

        with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a161e6dd5976831 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:580

        with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7f502dc750981c0 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:584

        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e6cccd68857d745 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:769

    with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0db4c4ffd7a99994 — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:772

    with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #681d344d01a9686b — Filesystem access.

repo/src/transformers/data/metrics/squad_metrics.py:776

        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df1848b2bcfcb4a0 — Filesystem access.

repo/src/transformers/data/processors/squad.py:515

        with open(
            os.path.join(data_dir, self.train_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8240384c2613b1a8 — Filesystem access.

repo/src/transformers/data/processors/squad.py:536

        with open(
            os.path.join(data_dir, self.dev_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ee3a8eac081b4533 — Filesystem access.

repo/src/transformers/data/processors/utils.py:119

        with open(input_file, "r", encoding="utf-8-sig") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9a1f76655e5ae618 — Filesystem access.

repo/src/transformers/distributed/configuration_utils.py:86

        with open(json_file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2fc91f322229227e — Environment-variable access.

repo/src/transformers/distributed/fsdp.py:48

        and strtobool(os.environ.get("ACCELERATE_USE_FSDP", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c296be065436558b — Environment-variable access.

repo/src/transformers/distributed/fsdp.py:49

        and strtobool(os.environ.get("FSDP_CPU_RAM_EFFICIENT_LOADING", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #65e1f9d2b3cc148c — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:133

    with open(module_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #42be5c273ff3f8fb — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:186

    with open(filename, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e42949b0f524c4e — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:298

        module_hash: str = hashlib.sha256(b"".join(bytes(f) + f.read_bytes() for f in module_files)).hexdigest()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b94f184dd1c0808a — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:341

        source_files_hash.update(file_path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9d6f1469e3b9c55 — Filesystem access.

repo/src/transformers/dynamic_module_utils.py:813

        with open(requirements, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08996c37881fa0af — Filesystem access.

repo/src/transformers/feature_extraction_utils.py:611

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e160f64413969cff — Filesystem access.

repo/src/transformers/feature_extraction_utils.py:639

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2c39cbc3ed0e63e0 — Filesystem access.

repo/src/transformers/generation/configuration_utils.py:1088

        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f3a6f37e552dc34 — Filesystem access.

repo/src/transformers/generation/configuration_utils.py:1251

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c6078f1c7b1f409 — Filesystem access.

repo/src/transformers/generation/configuration_utils.py:1372

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bb24c43af88b79a6 — Environment-variable access.

repo/src/transformers/generation/configuration_utils.py:1818

        graph_mixing_supported = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT", "1") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a36b56863ca3d917 — Environment-variable access.

repo/src/transformers/generation/configuration_utils.py:1819

        distributed = int(os.environ.get("WORLD_SIZE", "1")) > 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29bc24677af92c5b — Environment-variable access.

repo/src/transformers/generation/configuration_utils.py:1824

            os.environ.setdefault("NCCL_GRAPH_MIXING_SUPPORT", "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05f94c0ac055ad50 — Environment-variable access.

repo/src/transformers/generation/continuous_batching/distributed.py:160

        graph_mixing_not_disabled = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT") != "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84afa8bd260ac2af — Environment-variable access.

repo/src/transformers/generation/utils.py:2177

            os.environ["TOKENIZERS_PARALLELISM"] = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bde638b810bfdcac — Filesystem access.

repo/src/transformers/hf_argparser.py:333

                    file_args += args_file.read_text().split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b53f80e68d090234 — Filesystem access.

repo/src/transformers/hf_argparser.py:403

        with open(Path(json_file), encoding="utf-8") as open_json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f529ee4f2d7f3484 — Filesystem access.

repo/src/transformers/hf_argparser.py:425

        outputs = self.parse_dict(yaml.safe_load(Path(yaml_file).read_text()), allow_extra_keys=allow_extra_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #64fe047a9bc78432 — Filesystem access.

repo/src/transformers/image_processing_base.py:417

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3bda82e22079a65e — Filesystem access.

repo/src/transformers/image_processing_base.py:445

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #121f7a4df90dd1ab — Environment-variable access.

repo/src/transformers/integrations/accelerate.py:115

                local_rank = int(os.environ.get("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4723bb7a7a72b449 — Environment-variable access.

repo/src/transformers/integrations/deepgemm.py:88

    cuda_home = os.environ.get("CUDA_HOME") or os.environ.get("CUDA_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c121c61027f4471 — Filesystem access.

repo/src/transformers/integrations/deepgemm.py:113

            with open(version_json) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0c44059096d90287 — Filesystem access.

repo/src/transformers/integrations/deepgemm.py:124

            with open(version_txt) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2b12706f80009c6 — Filesystem access.

repo/src/transformers/integrations/deepgemm.py:135

            with open(cuda_h) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1db85da6c898b9d — Environment-variable access.

repo/src/transformers/integrations/finegrained_fp8.py:258

        and os.environ.get("TRANSFORMERS_DISABLE_DEEPGEMM_LINEAR", "0") != "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #75e78aad199c1a72 — Environment-variable access.

repo/src/transformers/integrations/hub_kernels.py:57

_TRANSFORMERS_USE_HUB_KERNELS = os.environ.get("USE_HUB_KERNELS", "YES").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #606c573e10c3a39a — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:40

if os.getenv("WANDB_MODE") == "offline":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b01bc3975308f2e4 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:176

    if os.getenv("DISABLE_MLFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d2191dd8cb6d37c — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:212

    if os.getenv("DISABLE_KUBEFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c598c50e6ef8373 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:214

    return os.getenv("KUBEFLOW_TRAINER_SERVER_URL") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #faa8bd9591630267 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:436

    ray_scope = os.getenv("RAY_SCOPE", "last")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #464fd0b7168d0947 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:602

        self.logging_dir = os.getenv("TENSORBOARD_LOGGING_DIR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba64bf6867c42840 — Filesystem access.

repo/src/transformers/integrations/integration_utils.py:664

    with open(f"{output_dir}/model_architecture.txt", "w+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f178ce48ea2ae78c — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:709

        self._log_model = WandbLogModel(os.getenv("WANDB_LOG_MODEL", "false"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c9f152326579ff77 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:763

                    project=os.getenv("WANDB_PROJECT", "huggingface"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11183084d0b957e9 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:775

            _watch_model = os.getenv("WANDB_WATCH", "false")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2c43dc3b7a4eff50 — Filesystem access.

repo/src/transformers/integrations/integration_utils.py:815

                                fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f1db286247377c0 — Filesystem access.

repo/src/transformers/integrations/integration_utils.py:878

                            fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84022c67147e1eac — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1170

        log_assets = os.getenv("COMET_LOG_ASSETS", "FALSE").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3d2c1ece3e1bafd3 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1174

            comet_old_mode = os.getenv("COMET_MODE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f6adab8af7e0c77 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1334

        self._log_artifacts = os.getenv("HF_MLFLOW_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be17535f0d7b5c66 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1335

        self._nested_run = os.getenv("MLFLOW_NESTED_RUN", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #835e915733ee2fe0 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1336

        self._tracking_uri = os.getenv("MLFLOW_TRACKING_URI", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29ce51f8a622de8c — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1337

        self._experiment_name = os.getenv("MLFLOW_EXPERIMENT_NAME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a9df8c00ae2dc8e — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1338

        self._flatten_params = os.getenv("MLFLOW_FLATTEN_PARAMS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c20d05f4498da10 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1339

        self._run_id = os.getenv("MLFLOW_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f23b88533d558f5 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1340

        self._max_log_params = os.getenv("MLFLOW_MAX_LOG_PARAMS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0b0ce95fd02b8d8 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1403

            mlflow_tags = os.getenv("MLFLOW_TAGS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af17e9f0881d94cd — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1487

        self.log_artifacts = os.getenv("HF_DAGSHUB_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6605626b0371745 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1488

        self.name = os.getenv("HF_DAGSHUB_MODEL_NAME") or "main"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #96dc0be893f8c2e0 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1489

        self.remote = os.getenv("MLFLOW_TRACKING_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ebb382a35b26c639 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1493

            branch=os.getenv("BRANCH") or "main",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d84a25a5c65ff935 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1908

                    self._log_model = os.getenv(
                        "CLEARML_LOG_MODEL",
                        "FALSE" if not ClearMLCallback._task_created_in_callback else "TRUE",
                    ).upper() in ENV_VARS_TRUE_VALUES.union({"TRUE"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d1211de0296958ca — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1915

                        project_name=os.getenv("CLEARML_PROJECT", "HuggingFace Transformers"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #37c2dfb96b6048c2 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1916

                        task_name=os.getenv("CLEARML_TASK", "Trainer"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #51894c0e27c72c8f — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:1920

                    self._log_model = os.getenv("CLEARML_LOG_MODEL", "TRUE").upper() in ENV_VARS_TRUE_VALUES.union(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f3cab93e0a2929e — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2189

            log_model_env = os.getenv("HF_DVCLIVE_LOG_MODEL", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #204585e9e15ad40e — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2271

        self._log_model = os.getenv("SWANLAB_LOG_MODEL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9cd992732a76969 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2342

            init_args["project"] = os.getenv("SWANLAB_PROJECT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ffb27d885abb359 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2344

            run_id = os.getenv("SWANLAB_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #669a904d7547b112 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2348

            resume = os.getenv("SWANLAB_RESUME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d1ec8fa1a7bf58a5 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2494

        ca_file = os.environ.get(self._ENV_CA_CERT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c20daec842631210 — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2512

        token_path = os.environ.get(self._ENV_TOKEN_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c059567dc2eee755 — Filesystem access.

repo/src/transformers/integrations/integration_utils.py:2518

            with open(token_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea6c414c848d913d — Environment-variable access.

repo/src/transformers/integrations/integration_utils.py:2534

            url = os.environ.get(self._ENV_SERVER_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #37743e829871281a — Environment-variable access.

repo/src/transformers/integrations/mxfp4.py:417

        rank = int(os.environ.get("LOCAL_RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b47d266bf7c5f3b — Environment-variable access.

repo/src/transformers/integrations/npu_flash_attention.py:30

SPARSE_MODE = int(os.getenv("NPU_FA2_SPARSE_MODE", default=DOWN_RIGHT_ALIGNED_CAUSAL_MASK_MODE))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #53272f893f527ad1 — Filesystem access.

repo/src/transformers/integrations/peft.py:708

        with open(_adapter_model_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3411353ff06a208 — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:77

                rank = int(os.environ["RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #421b38940c7ef015 — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:78

                local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2b6aabf3cf4a921 — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:79

                world_size = int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a8c85ed7068dfb6 — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:103

            current_device.set_device(int(os.environ["LOCAL_RANK"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec8370cb9f562bc4 — Environment-variable access.

repo/src/transformers/integrations/tensor_parallel.py:122

        device_map = torch.device(f"{device_mesh.device_type}:{int(os.environ['LOCAL_RANK'])}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4fed438c9b83e7b — Filesystem access.

repo/src/transformers/model_debugging_utils.py:243

    with open(full_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7eda81694bfce8f — Filesystem access.

repo/src/transformers/model_debugging_utils.py:266

    with open(summary_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b31d68a98fbcf4ab — Environment-variable access.

repo/src/transformers/modeling_flash_attention_utils.py:657

            deterministic if deterministic is not None else os.getenv("FLASH_ATTENTION_DETERMINISTIC", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a1f45804edab2941 — Environment-variable access.

repo/src/transformers/modeling_utils.py:163

XLA_USE_BF16 = os.environ.get("XLA_USE_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd48aba4ecdb4db8 — Environment-variable access.

repo/src/transformers/modeling_utils.py:164

XLA_DOWNCAST_BF16 = os.environ.get("XLA_DOWNCAST_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bbda36b5cff87764 — Environment-variable access.

repo/src/transformers/modeling_utils.py:213

    return _is_torch_distributed_initialized() and int(os.environ.get("LOCAL_RANK", "-1")) == 0

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7bfee4f254612ab9 — Filesystem access.

repo/src/transformers/modeling_utils.py:323

        with open("/proc/mounts", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0634bd037d6aeb79 — Filesystem access.

repo/src/transformers/modeling_utils.py:356

            with open(checkpoint_path, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2facb80a65f50567 — Filesystem access.

repo/src/transformers/modeling_utils.py:3705

            with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #159b3aae6dfe987c — Environment-variable access.

repo/src/transformers/modeling_utils.py:4268

        if device_map == "auto" and int(os.environ.get("WORLD_SIZE", "0")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b7d7fbd28c4a709 — Filesystem access.

repo/src/transformers/modeling_utils.py:4570

                        with open(file, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0307fc35fbc28393 — Filesystem access.

repo/src/transformers/models/audio_spectrogram_transformer/convert_audio_spectrogram_transformer_original_to_pytorch.py:60

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #60bfb52fddb955e8 — Filesystem access.

repo/src/transformers/models/auto/auto_factory.py:311

                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76c11a46acca59f6 — Filesystem access.

repo/src/transformers/models/auto/processing_auto.py:274

                with open(tokenizer_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #401f34d386523790 — Filesystem access.

repo/src/transformers/models/auto/tokenization_auto.py:435

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec503d00b3b181b9 — Filesystem access.

repo/src/transformers/models/auto/tokenization_auto.py:442

    with open(merges_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2378e8fdd45b7fae — Filesystem access.

repo/src/transformers/models/auto/tokenization_auto.py:613

    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c44ba91381b1f548 — Filesystem access.

repo/src/transformers/models/bamba/convert_mamba_ssm_checkpoint.py:158

    with open(os.path.join(save_directory, SAFE_WEIGHTS_INDEX_NAME), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2fc0ac7722ec1865 — Filesystem access.

repo/src/transformers/models/bamba/convert_mamba_ssm_checkpoint.py:202

    with open(config_path, "r", encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f7e096144befcaa — Environment-variable access.

repo/src/transformers/models/bark/convert_suno_to_hf.py:77

CACHE_DIR = os.path.join(os.getenv("XDG_CACHE_HOME", default_cache_dir), "suno", "bark_v0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d7dd05d080432948 — Filesystem access.

repo/src/transformers/models/bark/processing_bark.py:101

                with open(speaker_embeddings_path) as speaker_embeddings_json:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac60249504b41659 — Filesystem access.

repo/src/transformers/models/bark/processing_bark.py:161

            with open(os.path.join(save_directory, speaker_embeddings_dict_path), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4472b196d1446827 — Filesystem access.

repo/src/transformers/models/bartpho/tokenization_bartpho.py:133

        with open(monolingual_vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6fe10e8687820ba4 — Filesystem access.

repo/src/transformers/models/bartpho/tokenization_bartpho.py:306

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e772ef78e407fcf — Filesystem access.

repo/src/transformers/models/bartpho/tokenization_bartpho.py:315

            with open(out_monolingual_vocab_file, "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87e168469bb728dd — Filesystem access.

repo/src/transformers/models/beit/convert_beit_unilm_to_pytorch.py:192

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #77562bf9c996a691 — Filesystem access.

repo/src/transformers/models/beit/convert_beit_unilm_to_pytorch.py:205

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e3e096c3f8513b5d — Filesystem access.

repo/src/transformers/models/beit/convert_beit_unilm_to_pytorch.py:218

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec1a6a4c0f603a0a — Filesystem access.

repo/src/transformers/models/bert/tokenization_bert.py:33

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f87a959042084596 — Filesystem access.

repo/src/transformers/models/bert/tokenization_bert_legacy.py:32

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8b32f1a80ae2354 — Filesystem access.

repo/src/transformers/models/bert/tokenization_bert_legacy.py:245

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b9bb83a76f3b9d94 — Filesystem access.

repo/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:41

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e44c5a8527479b81 — Filesystem access.

repo/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:278

            with open(vocab_file, "wb") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c4d4bf3af0b75d37 — Filesystem access.

repo/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:282

            with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #07ca92673d2bf018 — Filesystem access.

repo/src/transformers/models/bertweet/tokenization_bertweet.py:142

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed215ec88621d90d — Filesystem access.

repo/src/transformers/models/bertweet/tokenization_bertweet.py:316

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #302ab5000ffa8dbe — Filesystem access.

repo/src/transformers/models/bertweet/tokenization_bertweet.py:324

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #75a9bbfb86cef7e3 — Filesystem access.

repo/src/transformers/models/bertweet/tokenization_bertweet.py:338

                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d5d3456e024fca1d — Filesystem access.

repo/src/transformers/models/biogpt/convert_biogpt_original_pytorch_checkpoint_to_pytorch.py:112

                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0afbf83cde184b8b — Filesystem access.

repo/src/transformers/models/biogpt/convert_biogpt_original_pytorch_checkpoint_to_pytorch.py:183

    with open(src_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4956fdee87da3f4 — Filesystem access.

repo/src/transformers/models/biogpt/convert_biogpt_original_pytorch_checkpoint_to_pytorch.py:223

    with open(biogpt_model_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #68888e692eb0c17e — Filesystem access.

repo/src/transformers/models/biogpt/convert_biogpt_original_pytorch_checkpoint_to_pytorch.py:240

    with open(biogpt_tokenizer_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #265fe64c644b607f — Filesystem access.

repo/src/transformers/models/biogpt/tokenization_biogpt.py:116

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #337d88a815371aa8 — Filesystem access.

repo/src/transformers/models/biogpt/tokenization_biogpt.py:119

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #643b04a0d20606dc — Filesystem access.

repo/src/transformers/models/biogpt/tokenization_biogpt.py:293

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dda236af68c600fa — Filesystem access.

repo/src/transformers/models/biogpt/tokenization_biogpt.py:297

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ed0ba56d47d0228 — Filesystem access.

repo/src/transformers/models/bit/convert_bit_to_pytorch.py:41

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1de1c19d47b038df — Filesystem access.

repo/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:89

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f70686b08bc7abbc — Filesystem access.

repo/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:92

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a451da3338f794de — Filesystem access.

repo/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:203

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #278f744605c9c237 — Filesystem access.

repo/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:207

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ebd2ae2fd036e38 — Filesystem access.

repo/src/transformers/models/bloom/convert_bloom_original_checkpoint_to_pytorch.py:149

        with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4853f58a9154f76b — Filesystem access.

repo/src/transformers/models/bloom/convert_bloom_original_checkpoint_to_pytorch.py:151

        with open(os.path.join(pytorch_dump_folder_path, WEIGHTS_NAME + ".index.json"), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f5419571e107f090 — Filesystem access.

repo/src/transformers/models/bloom/convert_bloom_original_checkpoint_to_pytorch.py:209

        with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0a4e6fa725ca2c96 — Filesystem access.

repo/src/transformers/models/blt/convert_blt_weights_to_hf.py:25

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1be93fd62ec092d — Filesystem access.

repo/src/transformers/models/blt/convert_blt_weights_to_hf.py:28

    with open(entropy_params_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #45370f5b9507853a — Filesystem access.

repo/src/transformers/models/blt/convert_blt_weights_to_hf.py:295

    with open(tokenizer_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e0d4b3ce4aafa678 — Filesystem access.

repo/src/transformers/models/blt/convert_blt_weights_to_hf.py:388

    with open(config_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa72055017fbfd5e — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:75

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32139bb02a9e09df — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:80

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be8bae0af853e6a0 — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:329

    with open(os.path.join(input_base_path, "tokenizer/text_tokenizer.json")) as tokenizer_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fc015cf6ed3760f2 — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:341

    with open(os.path.join(input_base_path, "tokenizer/text_tokenizer_modified.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9fade52d1af86fce — Filesystem access.

repo/src/transformers/models/chameleon/convert_chameleon_weights_to_hf.py:352

    with open(os.path.join(input_base_path, "tokenizer/vqgan.yaml")) as vqgan_cfg_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d8cf2adccfa07c8a — Filesystem access.

repo/src/transformers/models/clvp/tokenization_clvp.py:149

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19bb7423a80acbb6 — Filesystem access.

repo/src/transformers/models/clvp/tokenization_clvp.py:155

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4db0260f94f1271e — Filesystem access.

repo/src/transformers/models/conditional_detr/convert_conditional_detr_original_pytorch_checkpoint_to_pytorch.py:280

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c63ddb46823a7df — Filesystem access.

repo/src/transformers/models/convnext/convert_convnext_to_pytorch.py:66

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #36af98cc6ba00cb3 — Filesystem access.

repo/src/transformers/models/convnextv2/convert_convnextv2_to_pytorch.py:71

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7dcc8127df9d9d90 — Filesystem access.

repo/src/transformers/models/cpm/tokenization_cpm.py:324

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49cf378791d99717 — Filesystem access.

repo/src/transformers/models/cpmant/tokenization_cpmant.py:37

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ef9dd4ba76c0511 — Filesystem access.

repo/src/transformers/models/cpmant/tokenization_cpmant.py:219

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9122fd01a37befeb — Filesystem access.

repo/src/transformers/models/ctrl/tokenization_ctrl.py:128

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30a16c3dc5fa7ae3 — Filesystem access.

repo/src/transformers/models/ctrl/tokenization_ctrl.py:131

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad1612d12cc2b0b9 — Filesystem access.

repo/src/transformers/models/cvt/convert_cvt_original_pytorch_checkpoint_to_pytorch.py:285

    id2label = json.loads(Path(hf_hub_download(repo_id, img_labels_file, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #352a9029d1e2c7cc — Filesystem access.

repo/src/transformers/models/d_fine/convert_d_fine_original_pytorch_checkpoint_to_hf.py:41

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #26907b67a353501c — Filesystem access.

repo/src/transformers/models/dab_detr/convert_dab_detr_original_pytorch_checkpoint_to_pytorch.py:140

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #98ff48bf58496ce3 — Filesystem access.

repo/src/transformers/models/data2vec/convert_data2vec_vision_original_pytorch_checkpoint_to_pytorch.py:281

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5f47e076a632aab2 — Filesystem access.

repo/src/transformers/models/deepseek_ocr2/convert_deepseek_ocr2_weights_to_hf.py:135

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #f83e00445031aa28 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/transformers/models/deepseek_ocr2/convert_deepseek_ocr2_weights_to_hf.py:190

    image = Image.open(requests.get(image_url, stream=True).raw).convert("RGB")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #ec5e011eb298cc44 — Filesystem access.

repo/src/transformers/models/deepseek_vl/convert_deepseek_vl_weights_to_hf.py:184

        with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0fb7170ede11e652 — Filesystem access.

repo/src/transformers/models/deepseek_vl_hybrid/convert_deepseek_vl_hybrid_weights_to_hf.py:211

        with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b54c39eb3a43516 — Filesystem access.

repo/src/transformers/models/deformable_detr/convert_deformable_detr_to_pytorch.py:113

    id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2da2d0d52af2ab51 — Filesystem access.

repo/src/transformers/models/deimv2/convert_deimv2_original_pytorch_checkpoint_to_hf.py:105

    with open(config_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #83451eaef74dc7c5 — Filesystem access.

repo/src/transformers/models/deimv2/convert_deimv2_original_pytorch_checkpoint_to_hf.py:110

        open(hf_hub_download("huggingface/label-files", "coco-detection-mmdet-id2label.json", repo_type="dataset"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e766317faa028e01 — Filesystem access.

repo/src/transformers/models/deit/convert_deit_timm_to_pytorch.py:145

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5803c64e1682471a — Filesystem access.

repo/src/transformers/models/detr/convert_detr_original_pytorch_checkpoint_to_pytorch.py:198

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae7fd6259ae74b5e — Filesystem access.

repo/src/transformers/models/detr/convert_detr_to_pytorch.py:53

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f954d0358e28ac6 — Filesystem access.

repo/src/transformers/models/diffusion_gemma/convert_diffusion_gemma_weights.py:558

    with open(metadata_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #81a288f8568cf4df — Filesystem access.

repo/src/transformers/models/dinov2/convert_dinov2_to_hf.py:65

        config.id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9538a5efb21f30c7 — Filesystem access.

repo/src/transformers/models/dinov2_with_registers/convert_dinov2_with_registers_to_hf.py:70

        config.id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a73d8888e19f0f54 — Filesystem access.

repo/src/transformers/models/dit/convert_dit_unilm_to_pytorch.py:155

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00b77f85b84f0031 — Filesystem access.

repo/src/transformers/models/doge/convert_doge_weights_to_hf.py:96

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a71e8b924a2163d2 — Filesystem access.

repo/src/transformers/models/dpt/convert_dpt_hybrid_to_pytorch.py:64

        id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #904499cf4efde183 — Filesystem access.

repo/src/transformers/models/dpt/convert_dpt_to_pytorch.py:52

        id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #878cb2889f377d65 — Filesystem access.

repo/src/transformers/models/efficientnet/convert_efficientnet_to_pytorch.py:134

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8dc43c879e698929 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:186

    with open(os.path.join(output_dir, "vocab.json"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #72c3439219ffe8c9 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:189

    with open(os.path.join(output_dir, "tokenizer.json"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cb0a7f400eb9d3b5 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:192

    with open(os.path.join(output_dir, "tokenizer_config.json"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7cadf11a3a4e95f9 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:195

    with open(os.path.join(output_dir, "special_tokens_map.json"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2b0502006dcd8066 — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:207

    with open(os.path.join(output_dir, "merges.txt"), "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4f7eea5a0258b9d — Filesystem access.

repo/src/transformers/models/emu3/convert_emu3_weights_to_hf.py:280

    with open(f"{output_dir}/tokenizer.json", "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #846624af5aca486e — Filesystem access.

repo/src/transformers/models/eomt/convert_eomt_to_hf.py:166

        with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13df9a6596311c52 — Filesystem access.

repo/src/transformers/models/eomt/convert_eomt_to_hf.py:212

    with open(os.path.join(input_path, "config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5f0991014672bad8 — Filesystem access.

repo/src/transformers/models/eomt_dinov3/convert_eomt_dinov3_to_hf.py:291

    with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #a2f047adf03d1918 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/transformers/models/eomt_dinov3/convert_eomt_dinov3_to_hf.py:377

    image = Image.open(requests.get(CAT_URL, stream=True).raw).convert("RGB")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #d51a754b818d1bf4 — Filesystem access.

repo/src/transformers/models/ernie4_5_vl_moe/convert_ernie4_5_vl_moe_to_hf.py:158

    with open(os.path.join(save_dir, filename), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7bc035caaaf117a0 — Filesystem access.

repo/src/transformers/models/ernie4_5_vl_moe/convert_ernie4_5_vl_moe_to_hf.py:163

    with open(os.path.join(save_dir, filename), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9dc097bb82860f79 — Filesystem access.

repo/src/transformers/models/esm/convert_esm.py:80

        vocab_file.write_text(vocab)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2bbe3be8370a4bd — Filesystem access.

repo/src/transformers/models/esm/convert_esm.py:312

            vocab_file.write_text(vocab)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b7e009a65d5cf52 — Filesystem access.

repo/src/transformers/models/esm/openfold_utils/residue_constants.py:417

    stereo_chemical_props = resources.read_text("openfold.resources", "stereo_chemical_props.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #726c7b2315c951c5 — Filesystem access.

repo/src/transformers/models/esm/tokenization_esm.py:28

    with open(vocab_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f8c45d1dc5b6be3e — Filesystem access.

repo/src/transformers/models/esm/tokenization_esm.py:136

        with open(vocab_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dbff279cd924c97d — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:36

    text = config.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ef5d3da59b0af11 — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:55

    config.write_text(json.dumps(json_config, indent=2, sort_keys=True))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da50f3d13d7ff290 — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:59

        text = tokenizer_config.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9d07d3d7e98275a — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:64

            tokenizer_config.write_text(json.dumps(json_config, indent=2, sort_keys=True))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d3ca72a0fec2e066 — Filesystem access.

repo/src/transformers/models/falcon/convert_custom_code_checkpoint.py:73

    generation_config_path.write_text(json.dumps(generation_dict, indent=2, sort_keys=True))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f52bc3a6c48e9ff — Environment-variable access.

repo/src/transformers/models/fast_vlm/convert_fastvlm_weights_to_hf.py:37

os.environ["TIMM_FUSED_ATTN"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd89bdbd0676913b — Filesystem access.

repo/src/transformers/models/fastspeech2_conformer/convert_fastspeech2_conformer_original_pytorch_checkpoint_to_pytorch.py:177

        with open(vocab_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #456312ce0dcdb5a5 — Filesystem access.

repo/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:65

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5788d2b75261256d — Filesystem access.

repo/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:163

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1401d74c21f450b — Filesystem access.

repo/src/transformers/models/flaubert/tokenization_flaubert.py:237

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #25536ffc070dde1b — Filesystem access.

repo/src/transformers/models/flaubert/tokenization_flaubert.py:240

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f4516ca24b46fab — Filesystem access.

repo/src/transformers/models/flaubert/tokenization_flaubert.py:498

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #38d5b9ced03f89d9 — Filesystem access.

repo/src/transformers/models/flaubert/tokenization_flaubert.py:502

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eccc0860c7ea7583 — Filesystem access.

repo/src/transformers/models/focalnet/convert_focalnet_to_hf_format.py:71

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d9004737931d1df2 — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:130

    with open(src_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #285474e12c436780 — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:146

    with open(tgt_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aab30e2e51b992b3 — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:155

    with open(fsmt_merges_file, encoding="utf-8") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7fc10b55c814bdbc — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:159

    with open(merges_file, "w", encoding="utf-8") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b30b3018f94307e0 — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:209

    with open(fsmt_model_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae0a65a0b6273e81 — Filesystem access.

repo/src/transformers/models/fsmt/convert_fsmt_original_pytorch_checkpoint_to_pytorch.py:222

    with open(fsmt_tokenizer_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84626c6acc214c1f — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:204

        with open(src_vocab_file, encoding="utf-8") as src_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d0e5e4577809c4f — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:206

        with open(tgt_vocab_file, encoding="utf-8") as tgt_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52c5bbb36c83d75c — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:209

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0dc62b27597aeb4b — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:446

        with open(src_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #80d05b6a3fcc12d1 — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:449

        with open(tgt_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6bd3874c34afe937 — Filesystem access.

repo/src/transformers/models/fsmt/tokenization_fsmt.py:454

        with open(merges_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7bb2fba960b95853 — Filesystem access.

repo/src/transformers/models/gemma3/convert_gemma3_weights.py:331

        with open(_CHAT_TEMPLATE_PATH.value, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9b7e5f4394c2f4c — Filesystem access.

repo/src/transformers/models/gemma4/convert_gemma4_weights.py:71

_CHAT_TEMPLATE = pathlib.Path(cached_file("gg-hf-gg/gemma-4-E4B-it", "chat_template.jinja")).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #59537e579999240c — Filesystem access.

repo/src/transformers/models/gemma4/convert_gemma4_weights.py:72

_CHAT_TEMPLATE_LARGE = pathlib.Path(cached_file("gg-hf-gg/gemma-4-31B-it", "chat_template.jinja")).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12a606b2b42fc0f5 — Filesystem access.

repo/src/transformers/models/gemma4/convert_gemma4_weights.py:1406

    with open(metadata_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #34e2de179549557d — Filesystem access.

repo/src/transformers/models/gemma4_unified/convert_gemma4_unified_weights.py:82

_CHAT_TEMPLATE = pathlib.Path(cached_file("google/gemma-4-31B-it", "chat_template.jinja")).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e8073ee58e7d6ec7 — Filesystem access.

repo/src/transformers/models/gemma4_unified/convert_gemma4_unified_weights.py:562

    with open(metadata_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b09ac5bec5636303 — Filesystem access.

repo/src/transformers/models/glm/convert_glm_weights_to_hf.py:158

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d2b3f3440a73d5b — Filesystem access.

repo/src/transformers/models/glm4/convert_glm4_weights_to_hf.py:163

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6670d1585a6b3475 — Filesystem access.

repo/src/transformers/models/glm4v/convert_glm4v_mgt_weights_to_hf.py:276

    with open(index_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1fc5bd17be14df6b — Filesystem access.

repo/src/transformers/models/glm4v/convert_glm4v_mgt_weights_to_hf.py:483

    with open(vllm_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1467de4f1e6e014b — Filesystem access.

repo/src/transformers/models/glm4v/convert_glm4v_mgt_weights_to_hf.py:735

    with open(config_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #585844a8de201dfc — Filesystem access.

repo/src/transformers/models/glm4v_moe/convert_glm4v_moe_mgt_weights_to_hf.py:229

    with open(index_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e273a6f3c323c667 — Filesystem access.

repo/src/transformers/models/glm4v_moe/convert_glm4v_moe_mgt_weights_to_hf.py:439

    with open(vllm_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bfdb6662d8ea2263 — Filesystem access.

repo/src/transformers/models/glm4v_moe/convert_glm4v_moe_mgt_weights_to_hf.py:739

    with open(config_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f421a498aeef005c — Filesystem access.

repo/src/transformers/models/gpt2/convert_gpt2_original_tf_checkpoint_to_pytorch.py:102

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e4e19f1560a4ef38 — Filesystem access.

repo/src/transformers/models/gpt_neo/convert_gpt_neo_mesh_tf_to_pytorch.py:113

    config_json = json.load(open(config_file, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f13d4cff9aa41ee8 — Filesystem access.

repo/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:35

    with open(emoji_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29cafe7097ddd1bb — Filesystem access.

repo/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:41

    with open(vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d1b42eef80f6151a — Filesystem access.

repo/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:180

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e3010ebe4149731 — Filesystem access.

repo/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:190

        with open(emoji_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c21cdb3177991e10 — Filesystem access.

repo/src/transformers/models/gpt_oss/convert_gpt_oss_weights_to_hf.py:154

    original_config = json.loads((Path(input_base_path) / "config.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b47c24c4ad6474a — Filesystem access.

repo/src/transformers/models/gpt_oss/convert_gpt_oss_weights_to_hf.py:331

    with open(os.path.join(model_path, "model.safetensors.index.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5776fa3eff03f926 — Filesystem access.

repo/src/transformers/models/gpt_oss/convert_gpt_oss_weights_to_hf.py:779

    with open(chat_template_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d55f0c99f12fc56e — Filesystem access.

repo/src/transformers/models/hiera/convert_hiera_to_hf.py:164

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #39def1e43dff0025 — Filesystem access.

repo/src/transformers/models/hubert/convert_hubert_original_pytorch_checkpoint_to_pytorch.py:208

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #537c9454ebe854fb — Filesystem access.

repo/src/transformers/models/idefics3/convert_idefics3_weights_to_hf.py:122

    with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be565ee8817db170 — Filesystem access.

repo/src/transformers/models/imagegpt/convert_imagegpt_original_tf2_to_pytorch.py:156

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #75b86da9d3e9401e — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:217

        with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ebc47e784816e2f8 — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:274

    with open(os.path.join(input_path, "config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #491623d23e26993d — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:276

    with open(os.path.join(input_path, "preprocessor_config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #838d96f9e98028b1 — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:278

    with open(os.path.join(input_path, "special_tokens_map.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a0ae5143fd593b88 — Filesystem access.

repo/src/transformers/models/janus/convert_janus_weights_to_hf.py:280

    with open(os.path.join(input_path, "tokenizer_config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef467ce8ff5aebeb — Filesystem access.

repo/src/transformers/models/levit/convert_levit_timm_to_pytorch.py:87

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f14117dbe32ec33 — Filesystem access.

repo/src/transformers/models/llama/convert_llama_weights_to_hf.py:175

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ed2a600acc26783 — Filesystem access.

repo/src/transformers/models/llama/convert_llama_weights_to_hf.py:180

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1629da85bc449fe5 — Environment-variable access.

repo/src/transformers/models/llama4/convert_llama4_weights_to_hf.py:25

_OFFLINE_QUANT_COMPATIBLE = os.environ.get("OFFLINE_QUANT_COMPATIBLE", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9a6167e880954727 — Filesystem access.

repo/src/transformers/models/llama4/convert_llama4_weights_to_hf.py:203

    with open(os.path.join(model_path, "params.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04d536f6660ad042 — Filesystem access.

repo/src/transformers/models/llama4/convert_llama4_weights_to_hf.py:221

    with open(os.path.join(input_base_path, "params.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0114f34e640c95ae — Filesystem access.

repo/src/transformers/models/llava_next/convert_llava_next_weights_to_hf.py:100

    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #82935d3826f18175 — Filesystem access.

repo/src/transformers/models/llava_next_video/convert_llava_next_video_weights_to_hf.py:155

    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f57eff5fff2aeaa2 — Filesystem access.

repo/src/transformers/models/llava_onevision/convert_llava_onevision_weights_to_hf.py:103

    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f95808b04312bd79 — Filesystem access.

repo/src/transformers/models/luke/convert_luke_original_pytorch_checkpoint_to_pytorch.py:29

    with open(metadata_path) as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b41caa2e163a2c2d — Filesystem access.

repo/src/transformers/models/luke/convert_luke_original_pytorch_checkpoint_to_pytorch.py:49

    with open(os.path.join(pytorch_dump_folder_path, LukeTokenizer.vocab_files_names["entity_vocab_file"]), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #53b0312f19452047 — Filesystem access.

repo/src/transformers/models/luke/convert_luke_original_pytorch_checkpoint_to_pytorch.py:135

    with open(entity_vocab_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e6f9048089b5a9c — Filesystem access.

repo/src/transformers/models/luke/tokenization_luke.py:287

            with open(entity_vocab_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eadad641ff52a23f — Filesystem access.

repo/src/transformers/models/m2m_100/tokenization_m2m_100.py:311

            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af5d4510cc85e8f6 — Filesystem access.

repo/src/transformers/models/m2m_100/tokenization_m2m_100.py:375

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #860dfa3ed472ddbd — Filesystem access.

repo/src/transformers/models/m2m_100/tokenization_m2m_100.py:380

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c2872a396daa787e — Filesystem access.

repo/src/transformers/models/mamba/convert_mamba_ssm_checkpoint_to_pytorch.py:110

    with open(config_json_file, "r", encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c5d00793c335051 — Filesystem access.

repo/src/transformers/models/mamba2/convert_mamba2_ssm_checkpoint_to_pytorch.py:125

    with open(config_path, "r", encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c44ebc3ba8035ae — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:59

        self.model_results = json.load(open("Tatoeba-Challenge/models/released-model-results.json"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7924b705a1c10247 — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:61

        for line in open(ISO_PATH):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b7a9faa65e04db11 — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:274

        with open(sub_dir / "metadata.json", "w", encoding="utf-8") as writeobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3e8dcb1fd02471f — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:305

            metadata = yaml.safe_load(open(p / ymls[0]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1cdddd0cf404db69 — Filesystem access.

repo/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:313

            metadata = yaml.safe_load(open(p / ymls[-1]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2cabb996e1995f7b — Filesystem access.

repo/src/transformers/models/marian/convert_marian_to_pytorch.py:292

            lns = list(open(p / "README.md").readlines())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #669221331065605a — Filesystem access.

repo/src/transformers/models/marian/convert_marian_to_pytorch.py:683

    with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6eb9d1391b6ce402 — Filesystem access.

repo/src/transformers/models/marian/convert_marian_to_pytorch.py:688

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fc816e66c1183e91 — Filesystem access.

repo/src/transformers/models/marian/tokenization_marian.py:352

                with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da4acfe464869fff — Filesystem access.

repo/src/transformers/models/marian/tokenization_marian.py:416

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5c7c3ac6e1a46e53 — Filesystem access.

repo/src/transformers/models/marian/tokenization_marian.py:421

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9566b3bcd27e9de2 — Filesystem access.

repo/src/transformers/models/mask2former/convert_mask2former_original_pytorch_checkpoint_to_pytorch.py:134

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a693359667472535 — Filesystem access.

repo/src/transformers/models/maskformer/convert_maskformer_resnet_to_pytorch.py:74

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d60357dd5159a6d — Environment-variable access.

repo/src/transformers/models/maskformer/convert_maskformer_resnet_to_pytorch.py:273

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #15a7d5c66ff6d086 — Filesystem access.

repo/src/transformers/models/maskformer/convert_maskformer_resnet_to_pytorch.py:281

    with open(checkpoint_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #804c1c393f3818b0 — Filesystem access.

repo/src/transformers/models/maskformer/convert_maskformer_swin_to_pytorch.py:71

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a75c6f9d0bbbf34e — Environment-variable access.

repo/src/transformers/models/maskformer/convert_maskformer_swin_to_pytorch.py:242

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #22c7e46dae16cee3 — Filesystem access.

repo/src/transformers/models/maskformer/convert_maskformer_swin_to_pytorch.py:250

    with open(checkpoint_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d25d05171aaa7607 — Filesystem access.

repo/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:598

        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab52605886bf16c5 — Filesystem access.

repo/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:651

    with open(tracker_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c7d4328c28d13d4 — Filesystem access.

repo/src/transformers/models/mgp_str/tokenization_mgp_str.py:53

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8634dbcc3d91d1ee — Filesystem access.

repo/src/transformers/models/mgp_str/tokenization_mgp_str.py:97

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5f1293a625b7be00 — Filesystem access.

repo/src/transformers/models/mimo_v2_flash/convert_mimo_v2_flash_weights_to_hf.py:94

    with open(os.path.join(input_dir, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76eedadf114e9129 — Filesystem access.

repo/src/transformers/models/ministral3/convert_ministral3_weights_to_hf.py:89

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29ea1061e262d41c — Filesystem access.

repo/src/transformers/models/mistral/convert_mistral_weights_to_hf.py:63

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84f56bdad54fe85b — Filesystem access.

repo/src/transformers/models/mistral3/convert_mistral3_weights_to_hf.py:75

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #809659e53a96dfbe — Filesystem access.

repo/src/transformers/models/mistral4/convert_mistral4_weight_to_hf.py:363

    with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8daa308911bab1c2 — Filesystem access.

repo/src/transformers/models/mixtral/convert_mixtral_weights_to_hf.py:52

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85ef4179b99c4723 — Filesystem access.

repo/src/transformers/models/mixtral/convert_mixtral_weights_to_hf.py:57

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9e599f3bba6a64a8 — Filesystem access.

repo/src/transformers/models/mllama/convert_mllama_weights_to_hf.py:216

    with open(os.path.join(input_base_path, "params.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a032262a3533ad4 — Filesystem access.

repo/src/transformers/models/mllama/convert_mllama_weights_to_hf.py:562

        with open(chat_template_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3863dca61e906c7c — Filesystem access.

repo/src/transformers/models/mllama/convert_mllama_weights_to_hf.py:567

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db90675b80e40a43 — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:30

    with open(metadata_path) as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c3a0b97e1b1e7fe — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:53

    with open(os.path.join(pytorch_dump_folder_path, "tokenizer_config.json"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9309d1da19bfa267 — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:56

    with open(os.path.join(pytorch_dump_folder_path, "tokenizer_config.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e7d8b2b4e738c81 — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:59

    with open(os.path.join(pytorch_dump_folder_path, MLukeTokenizer.vocab_files_names["entity_vocab_file"]), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84516fd6b7e903fe — Filesystem access.

repo/src/transformers/models/mluke/convert_mluke_original_pytorch_checkpoint_to_pytorch.py:188

    data = [json.loads(line) for line in open(entity_vocab_path)]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e94c3f26fb13b172 — Filesystem access.

repo/src/transformers/models/mluke/tokenization_mluke.py:308

            with open(entity_vocab_file, encoding="utf-8") as entity_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b182f888bb6cb777 — Filesystem access.

repo/src/transformers/models/mluke/tokenization_mluke.py:1713

        with open(entity_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2607d293fab0b237 — Filesystem access.

repo/src/transformers/models/mobilenet_v1/convert_original_tf_checkpoint_to_pytorch.py:158

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e455a01351516366 — Filesystem access.

repo/src/transformers/models/mobilenet_v2/convert_original_tf_checkpoint_to_pytorch.py:231

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de880ee693cb8e70 — Filesystem access.

repo/src/transformers/models/mobilevit/convert_mlcvnets_to_pytorch.py:65

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f9ddb2252b1acd87 — Filesystem access.

repo/src/transformers/models/mobilevitv2/convert_mlcvnets_to_pytorch.py:55

    with open(orig_cfg_file, "r") as yaml_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0fe115e9f8422bf — Filesystem access.

repo/src/transformers/models/mobilevitv2/convert_mlcvnets_to_pytorch.py:117

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f676109794985a5 — Filesystem access.

repo/src/transformers/models/myt5/tokenization_myt5.py:46

            with open(rewriting_rules, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c9d860c8d8a36a1 — Filesystem access.

repo/src/transformers/models/myt5/tokenization_myt5.py:195

        self.byte_maps = json.load(open(vocab_file, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #54c37fb699fc1db3 — Filesystem access.

repo/src/transformers/models/myt5/tokenization_myt5.py:373

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bfa31b459978158f — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:58

        with open(meta_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1e7b5dcc67b02d9c — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:82

            with open(config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09718105c836dcad — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:236

            with open(tokenizer_pkl, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #096be4f1916c3451 — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:246

                    (Path(output_dir) / filename).write_bytes(src.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a79ddb3aade7b504 — Filesystem access.

repo/src/transformers/models/nanochat/convert_nanochat_checkpoints.py:252

                (Path(output_dir) / filename).write_bytes(src.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f35d5d75734f422d — Filesystem access.

repo/src/transformers/models/nemotron/convert_nemotron_nemo_to_hf.py:131

    json.dump(hf_config, open(f"{hf_output_path}/config.json", "w"), indent=2)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #206a979e6978f601 — Filesystem access.

repo/src/transformers/models/nemotron3_5_asr/convert_nemotron3_5_asr_to_hf.py:505

    nemo_config = yaml.load(open(model_files["model_config"], "r"), Loader=yaml.FullLoader)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #321863dcb211ec22 — Filesystem access.

repo/src/transformers/models/nemotron_asr_streaming/convert_nemotron_asr_streaming_to_hf.py:458

    nemo_config = yaml.load(open(model_files["model_config"], "r"), Loader=yaml.FullLoader)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba1110b261b33e22 — Filesystem access.

repo/src/transformers/models/nllb_moe/convert_nllb_moe_sharded_original_checkpoint_to_pytorch.py:122

    with open(os.path.join(dump_path, WEIGHTS_INDEX_NAME), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6f6f1ce31f01cebc — Filesystem access.

repo/src/transformers/models/olmo/convert_olmo_weights_to_hf.py:56

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a0db7da1623aa959 — Filesystem access.

repo/src/transformers/models/olmo/convert_olmo_weights_to_hf.py:61

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9d03bd9a269747d8 — Filesystem access.

repo/src/transformers/models/olmo/convert_olmo_weights_to_hf.py:71

    olmo_config = yaml.safe_load(config_path.read_text())["model"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af58798fb38c4cc7 — Filesystem access.

repo/src/transformers/models/olmo2/convert_olmo2_weights_to_hf.py:59

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc673c91db41c39e — Filesystem access.

repo/src/transformers/models/olmo2/convert_olmo2_weights_to_hf.py:64

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #087c7b48990f2277 — Filesystem access.

repo/src/transformers/models/olmo2/convert_olmo2_weights_to_hf.py:81

    olmo2_config = yaml.safe_load(config_path.read_text())["model"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c6b4c41d8789564 — Filesystem access.

repo/src/transformers/models/olmo2/convert_olmo2_weights_to_hf.py:230

        tokenizer_config = yaml.safe_load(config_path.read_text())["tokenizer"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f494b1351cf0f5b7 — Filesystem access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:72

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af2ebec29d6f1e54 — Filesystem access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:77

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #895bb3a33a93d9ad — Filesystem access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:90

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #83eee671396f0500 — Environment-variable access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:203

                if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76b8549adb184aea — Environment-variable access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:268

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a411ab04e6c16909 — Filesystem access.

repo/src/transformers/models/olmo3/convert_olmo3_weights_to_hf.py:300

    olmo3_config = json.loads(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9a35dc13854ad2de — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:98

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d85e88df7b4900b1 — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:103

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #41add1de08abdea6 — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:116

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56b98829d7530ec4 — Environment-variable access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:221

                if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8caadc51cd32d085 — Environment-variable access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:313

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #59cc7f9892357efd — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:424

    olmo_config = json.loads(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3633c75780442736 — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:561

    with open(hf_config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f0bfecfb343445d — Filesystem access.

repo/src/transformers/models/olmo_hybrid/convert_olmo_hybrid_weights_to_hf.py:569

    with open(hf_config_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad2abfd591d3fcbc — Filesystem access.

repo/src/transformers/models/olmoe/convert_olmoe_weights_to_hf.py:82

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #498bf8fdecd87a10 — Filesystem access.

repo/src/transformers/models/olmoe/convert_olmoe_weights_to_hf.py:87

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c348ca80d0667187 — Filesystem access.

repo/src/transformers/models/olmoe/convert_olmoe_weights_to_hf.py:97

    olmoe_config = yaml.safe_load(config_path.read_text())["model"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ccb3694cf6f1d56 — Filesystem access.

repo/src/transformers/models/oneformer/image_processing_oneformer.py:95

    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18a9cab85469066c — Filesystem access.

repo/src/transformers/models/oneformer/image_processing_pil_oneformer.py:241

    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8fb8cbb2491713b2 — Filesystem access.

repo/src/transformers/models/openai/convert_openai_original_tf_checkpoint_to_pytorch.py:41

    with open(openai_checkpoint_folder_path + "/parameters_names.json", "r", encoding="utf-8") as names_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #36e116c7c34f7a14 — Filesystem access.

repo/src/transformers/models/openai/convert_openai_original_tf_checkpoint_to_pytorch.py:43

    with open(openai_checkpoint_folder_path + "/params_shapes.json", "r", encoding="utf-8") as shapes_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab03c3daa171d282 — Filesystem access.

repo/src/transformers/models/openai/convert_openai_original_tf_checkpoint_to_pytorch.py:125

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a10ef9ae7f55772e — Filesystem access.

repo/src/transformers/models/openai_privacy_filter/convert_openai_privacy_filter_weights_to_hf.py:245

    original_config = json.loads((input_path / "config.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e79ddad86431e516 — Filesystem access.

repo/src/transformers/models/parakeet/convert_nemo_to_hf.py:515

    nemo_config = yaml.load(open(model_files["model_config"], "r"), Loader=yaml.FullLoader)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b3fde56275d5be58 — Environment-variable access.

repo/src/transformers/models/perceiver/convert_perceiver_haiku_to_pytorch.py:271

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #260ecd649eca3c86 — Filesystem access.

repo/src/transformers/models/perceiver/convert_perceiver_haiku_to_pytorch.py:280

    with open(pickle_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c81616033a0ba880 — Filesystem access.

repo/src/transformers/models/perceiver/convert_perceiver_haiku_to_pytorch.py:331

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ee0fa2d6004978a5 — Filesystem access.

repo/src/transformers/models/perceiver/convert_perceiver_haiku_to_pytorch.py:380

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9623bdc306cec275 — Filesystem access.

repo/src/transformers/models/perception_lm/convert_perception_lm_weights_to_hf.py:176

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eca9d7ca3494b376 — Filesystem access.

repo/src/transformers/models/perception_lm/convert_perception_lm_weights_to_hf.py:181

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #619d2144da90b040 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:139

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f131f61802db22d5 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:196

    vocab = json.load(open(f"{output_dir}/vocab.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #91f7a14fa3f182a2 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:199

    json.dump(vocab, open(f"{output_dir}/vocab.json", "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a3e7a823e13856a3 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:201

    tokenizer = json.load(open(f"{output_dir}/tokenizer.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #121a611f31a35700 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:208

    json.dump(tokenizer, open(f"{output_dir}/tokenizer.json", "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c34bd5d8fc09dd65 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:210

    tokenizer_config = json.load(open(f"{output_dir}/tokenizer_config.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ec6a30d35e34083 — Filesystem access.

repo/src/transformers/models/phi4_multimodal/convert_phi4_multimodal_weights_to_hf.py:213

    json.dump(tokenizer_config, open(f"{output_dir}/tokenizer_config.json", "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f25845902398e37 — Filesystem access.

repo/src/transformers/models/phobert/tokenization_phobert.py:126

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec4f9789129be78b — Filesystem access.

repo/src/transformers/models/phobert/tokenization_phobert.py:310

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa4ca191b08d3e7a — Filesystem access.

repo/src/transformers/models/phobert/tokenization_phobert.py:331

                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a78ab6c7f77c90d1 — Filesystem access.

repo/src/transformers/models/pixtral/convert_pixtral_weights_to_hf.py:147

        with open(f"{input_dir}/params.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bdecc7bf1b39b6f7 — Filesystem access.

repo/src/transformers/models/pixtral/convert_pixtral_weights_to_hf.py:239

        processor.chat_template = open(args.chat_template_file).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08b8af13d7949861 — Filesystem access.

repo/src/transformers/models/poolformer/convert_poolformer_original_to_pytorch.py:109

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9871d1b463ec480 — Filesystem access.

repo/src/transformers/models/pop2piano/convert_pop2piano_weights_to_hf.py:189

with open("./vocab.json", "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12b90fe4f02cee0e — Filesystem access.

repo/src/transformers/models/pop2piano/tokenization_pop2piano.py:111

        with open(vocab, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ea97e0ec62c3e4c — Filesystem access.

repo/src/transformers/models/pop2piano/tokenization_pop2piano.py:358

        with open(out_vocab_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1874f0d8e6557a0b — Filesystem access.

repo/src/transformers/models/prophetnet/tokenization_prophetnet.py:259

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #559c5d22bfcc560a — Filesystem access.

repo/src/transformers/models/prophetnet/tokenization_prophetnet.py:438

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #016a3405ab5e953c — Filesystem access.

repo/src/transformers/models/qwen3_asr/convert_qwen3_asr_to_hf.py:110

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4723b4005906ca2 — Filesystem access.

repo/src/transformers/models/qwen3_asr/convert_qwen3_asr_to_hf.py:125

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62bacd42fc9c06ee — Filesystem access.

repo/src/transformers/models/qwen3_asr/convert_qwen3_asr_to_hf.py:236

            with open(chat_template_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40ed7b19f81e06b3 — Environment-variable access.

repo/src/transformers/models/rag/retrieval_rag.py:134

        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f992f905e0e4f07f — Filesystem access.

repo/src/transformers/models/rag/retrieval_rag.py:141

        with open(passages_path, "rb") as passages_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e949db5f4fece6b — Environment-variable access.

repo/src/transformers/models/rag/retrieval_rag.py:150

        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a1c6bc167410053 — Filesystem access.

repo/src/transformers/models/rag/retrieval_rag.py:157

        with open(resolved_meta_path, "rb") as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eec6b4d9f27a36f8 — Environment-variable access.

repo/src/transformers/models/reformer/convert_reformer_trax_checkpoint_to_pytorch.py:193

    if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d49969982741adf2 — Filesystem access.

repo/src/transformers/models/reformer/convert_reformer_trax_checkpoint_to_pytorch.py:200

    with open(trax_model_pkl_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #81610bec50c13e41 — Filesystem access.

repo/src/transformers/models/regnet/convert_regnet_seer_10b_to_pytorch.py:165

    id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b2aeb0cca70a4230 — Environment-variable access.

repo/src/transformers/models/regnet/convert_regnet_seer_10b_to_pytorch.py:236

        logger.info(f"Token is {os.environ['HF_TOKEN']}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #68199bf02f496736 — Filesystem access.

repo/src/transformers/models/regnet/convert_regnet_to_pytorch.py:218

    id2label = json.loads(Path(hf_hub_download(repo_id, filename, repo_type="dataset")).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #45451e7df2d3852b — Filesystem access.

repo/src/transformers/models/resnet/convert_resnet_to_pytorch.py:121

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #228fffd8b457bd15 — Filesystem access.

repo/src/transformers/models/rf_detr/convert_rf_detr_weights_to_hf.py:154

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e84c2ceeb8afb64 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:52

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab5959c1de72b831 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:139

        with open(word_shape_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #649d0f241fa606c8 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:142

        with open(word_pronunciation_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e3627560a2783a11 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:1077

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8a62d52e71612b23 — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:1088

        with open(word_shape_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1aa0332d67bd1bdb — Filesystem access.

repo/src/transformers/models/roc_bert/tokenization_roc_bert.py:1091

        with open(word_pronunciation_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d0b0fb514276682 — Filesystem access.

repo/src/transformers/models/rt_detr/convert_rt_detr_original_pytorch_checkpoint_to_hf.py:41

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #41487f34ab3bd17f — Filesystem access.

repo/src/transformers/models/rt_detr_v2/convert_rt_detr_v2_weights_to_hf.py:42

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2efe8d92b934fb4e — Filesystem access.

repo/src/transformers/models/rwkv/convert_rwkv_checkpoint_to_hf.py:134

        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16f8aeb77adc41d8 — Environment-variable access.

repo/src/transformers/models/seamless_m4t/convert_fairseq2_to_hf.py:132

CACHE_DIR = os.path.join(os.getenv("XDG_CACHE_HOME", default_cache_dir), "huggingface", "hub")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c9b4110949c6e6e1 — Environment-variable access.

repo/src/transformers/models/seamless_m4t_v2/convert_fairseq2_to_hf.py:149

CACHE_DIR = os.path.join(os.getenv("XDG_CACHE_HOME", default_cache_dir), "huggingface", "hub")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a89de72152d6f3d1 — Filesystem access.

repo/src/transformers/models/segformer/convert_segformer_original_to_pytorch.py:153

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cb90b9fe94980e20 — Filesystem access.

repo/src/transformers/models/sew/convert_sew_original_pytorch_checkpoint_to_pytorch.py:268

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ede14e4c750e8371 — Filesystem access.

repo/src/transformers/models/sew_d/convert_sew_d_original_pytorch_checkpoint_to_pytorch.py:280

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c9bbd9677728c117 — Filesystem access.

repo/src/transformers/models/siglip/tokenization_siglip.py:345

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #324346d1068f9d69 — Filesystem access.

repo/src/transformers/models/speech_encoder_decoder/convert_speech_to_text_wav2vec2_seq2seq_original_to_pytorch.py:195

    with open(dict_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44af5bdb0e3908e6 — Filesystem access.

repo/src/transformers/models/speech_encoder_decoder/convert_speech_to_text_wav2vec2_seq2seq_original_to_pytorch.py:267

    with open(os.path.join(pytorch_dump_folder_path, "vocab.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #83eeff85c515a713 — Filesystem access.

repo/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:271

            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #553c78aad78a0dbb — Filesystem access.

repo/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:285

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac89d9f4a7444c44 — Filesystem access.

repo/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:290

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d4cc19ee354f9a5 — Filesystem access.

repo/src/transformers/models/splinter/tokenization_splinter.py:33

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d38c67843d7faee9 — Filesystem access.

repo/src/transformers/models/swiftformer/convert_swiftformer_original_to_hf.py:102

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4227e0d9ed049dc4 — Filesystem access.

repo/src/transformers/models/swin/convert_swin_timm_to_pytorch.py:45

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19e1753a0f886aee — Filesystem access.

repo/src/transformers/models/swinv2/convert_swinv2_timm_to_pytorch.py:67

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bffbbe72dc715c48 — Filesystem access.

repo/src/transformers/models/swinv2/convert_swinv2_timm_to_pytorch.py:76

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c4e62efda6016fd — Filesystem access.

repo/src/transformers/models/switch_transformers/convert_big_switch.py:145

    with open(os.path.join(dump_path, WEIGHTS_INDEX_NAME), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f54a4a161e42701e — Filesystem access.

repo/src/transformers/models/switch_transformers/convert_switch_transformers_original_flax_checkpoint_to_pytorch.py:267

    with open(gin_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bdaf108a7052c3ff — Filesystem access.

repo/src/transformers/models/tapas/tokenization_tapas.py:91

    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc9ff32ef9d0b365 — Filesystem access.

repo/src/transformers/models/tapas/tokenization_tapas.py:394

        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c4ffe57fe20a852 — Filesystem access.

repo/src/transformers/models/textnet/convert_textnet_to_hf.py:119

    with open(config_filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2127fddf6538769 — Filesystem access.

repo/src/transformers/models/timesformer/convert_timesformer_to_pytorch.py:49

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #054eb8c9edfc185e — Filesystem access.

repo/src/transformers/models/unispeech/convert_unispeech_original_pytorch_checkpoint_to_pytorch.py:220

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4ec8f842cba4e89 — Filesystem access.

repo/src/transformers/models/upernet/convert_convnext_upernet_to_pytorch.py:53

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12c8d1faa6ccbe9b — Filesystem access.

repo/src/transformers/models/upernet/convert_swin_upernet_to_pytorch.py:59

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d9f3f914d4f36e4b — Filesystem access.

repo/src/transformers/models/vibevoice_acoustic_tokenizer/convert_vibevoice_acoustic_tokenizer_to_hf.py:113

        with open(processor_config, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ef5977793426f86 — Filesystem access.

repo/src/transformers/models/vibevoice_acoustic_tokenizer/convert_vibevoice_acoustic_tokenizer_to_hf.py:127

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5a5a5c9041b1559 — Filesystem access.

repo/src/transformers/models/vibevoice_asr/convert_vibevoice_asr_to_hf.py:126

    with open(index_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b32a9fdded9b69d5 — Filesystem access.

repo/src/transformers/models/vibevoice_asr/convert_vibevoice_asr_to_hf.py:149

        with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #65e5bb08f1a203fd — Filesystem access.

repo/src/transformers/models/videomae/convert_videomae_to_pytorch.py:50

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #99e07f7ee1a8c844 — Filesystem access.

repo/src/transformers/models/videoprism/convert_videoprism_weights_to_hf.py:391

        with open(spiece_path, "wb") as f_out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2accc2e090db4b76 — Filesystem access.

repo/src/transformers/models/vilt/convert_vilt_original_to_pytorch.py:184

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #25b87b14494f7910 — Filesystem access.

repo/src/transformers/models/vit/convert_dino_to_pytorch.py:147

        id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73099726850825df — Filesystem access.

repo/src/transformers/models/vit_msn/convert_msn_to_pytorch.py:154

    id2label = json.load(open(hf_hub_download(repo_id, filename), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7220235a9b0c97e — Filesystem access.

repo/src/transformers/models/vits/convert_original_checkpoint.py:309

        with open(config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #51124eba2ae1f03e — Filesystem access.

repo/src/transformers/models/vits/convert_original_checkpoint.py:331

        symbols = [line.replace("\n", "") for line in open(vocab_path, encoding="utf-8")]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01d5569a086f28d5 — Filesystem access.

repo/src/transformers/models/vits/convert_original_checkpoint.py:338

        with open(tf.name, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #75fe93bb717177b4 — Filesystem access.

repo/src/transformers/models/vits/tokenization_vits.py:83

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5429e1e83a8da946 — Filesystem access.

repo/src/transformers/models/vits/tokenization_vits.py:242

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #243b2b365f5bd81c — Filesystem access.

repo/src/transformers/models/vivit/convert_vivit_flax_to_pytorch.py:36

    with open(path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dc0f788a3f1e5ce5 — Filesystem access.

repo/src/transformers/models/vivit/convert_vivit_flax_to_pytorch.py:49

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a3face1a5b68b02c — Filesystem access.

repo/src/transformers/models/vjepa2/convert_vjepa2_classifier_to_hf.py:99

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d2162d1204d57ea9 — Environment-variable access.

repo/src/transformers/models/vjepa2/convert_vjepa2_to_hf.py:48

TOKEN = os.environ.get("HF_TOKEN", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af54ded39cf05bbc — Filesystem access.

repo/src/transformers/models/voxtral/convert_voxtral_weights_to_hf.py:187

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aea2ef3dee123212 — Filesystem access.

repo/src/transformers/models/voxtral_realtime/convert_voxtral_realtime_weights_to_hf.py:242

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #90155143218bb35a — Filesystem access.

repo/src/transformers/models/wav2vec2/convert_wav2vec2_original_pytorch_checkpoint_to_pytorch.py:75

    with open(filename, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #07539b512300e99a — Filesystem access.

repo/src/transformers/models/wav2vec2/convert_wav2vec2_original_pytorch_checkpoint_to_pytorch.py:317

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e731c0643adf784a — Filesystem access.

repo/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:154

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c1d3f4335f4ba29 — Filesystem access.

repo/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:647

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #991d93f670a41bf7 — Filesystem access.

repo/src/transformers/models/wav2vec2_conformer/convert_wav2vec2_conformer_original_pytorch_checkpoint_to_pytorch.py:253

            with open(vocab_path, "w", encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #947d318a274a912d — Filesystem access.

repo/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:138

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00803bee54190f32 — Filesystem access.

repo/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:575

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #53f7d176929e48e4 — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:158

        model_bytes = open(download_target, "rb").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #07aab684aa78c24c — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:164

    with urllib.request.urlopen(url) as source, open(download_target, "wb") as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4fa84dc1fc213469 — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:176

    model_bytes = open(download_target, "rb").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #69de7722f894e506 — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:315

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10ebc670d433df56 — Filesystem access.

repo/src/transformers/models/whisper/convert_openai_to_hf.py:318

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #208e58e42a584b08 — Filesystem access.

repo/src/transformers/models/whisper/tokenization_whisper.py:266

            with open(normalizer_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23b9a9cf31b09aec — Filesystem access.

repo/src/transformers/models/whisper/tokenization_whisper.py:560

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0f0769e564151a4 — Filesystem access.

repo/src/transformers/models/whisper/tokenization_whisper.py:563

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #150f072ff37c160e — Filesystem access.

repo/src/transformers/models/whisper/tokenization_whisper.py:568

            with open(normalizer_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dc5956fd6452b124 — Filesystem access.

repo/src/transformers/models/xcodec/convert_xcodec_weights_to_hf.py:186

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76f454ebd09e0853 — Filesystem access.

repo/src/transformers/models/xcodec2/convert_xcodec2_checkpoint.py:224

        with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1362df2883dafb28 — Filesystem access.

repo/src/transformers/models/xlm/convert_xlm_original_pytorch_checkpoint_to_pytorch.py:58

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cd3bf84b99e2ff71 — Filesystem access.

repo/src/transformers/models/xlm/convert_xlm_original_pytorch_checkpoint_to_pytorch.py:62

    with open(pytorch_vocab_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #988697944725f3db — Filesystem access.

repo/src/transformers/models/xlm/tokenization_xlm.py:244

        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #975d2ba4c6efc94b — Filesystem access.

repo/src/transformers/models/xlm/tokenization_xlm.py:247

        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a3ddcadd5ad7cc6f — Filesystem access.

repo/src/transformers/models/xlm/tokenization_xlm.py:541

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #67b4df67c4d5211e — Filesystem access.

repo/src/transformers/models/xlm/tokenization_xlm.py:545

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #950157175ba95a9a — Filesystem access.

repo/src/transformers/models/xlnet/convert_xlnet_original_tf_checkpoint_to_pytorch.py:224

    with open(pytorch_config_dump_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c50a590e59a52019 — Filesystem access.

repo/src/transformers/models/yolos/convert_yolos_to_pytorch.py:61

    id2label = json.load(open(hf_hub_download(repo_id, filename, repo_type="dataset"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fee649f9077c9e11 — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:171

    config_dict = json.loads((input_dir / "config.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #599a4b1548df9975 — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:249

    index = json.loads((input_dir / "model.safetensors.index.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6be7f8037e1bf469 — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:251

    old_num_hidden_layers = int(json.loads((input_dir / "config.json").read_text())["num_hidden_layers"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf58b3d74c6cc2a8 — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:296

        old_num_hidden_layers = int(json.loads((input_dir / "config.json").read_text())["num_hidden_layers"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e039b055c0acd859 — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:313

    old_index = json.loads(index_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d0bec7e814245244 — Filesystem access.

repo/src/transformers/models/zaya/convert_zaya_weights_to_hf.py:346

    (output_dir / "model.safetensors.index.json").write_text(
        json.dumps(converted_index, indent=2, sort_keys=True) + "\n"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7641ea15fcc56e90 — Filesystem access.

repo/src/transformers/pipelines/__init__.py:921

                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9b1e9ff4d53ea06 — Filesystem access.

repo/src/transformers/pipelines/audio_classification.py:174

                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e633042114d63a36 — Filesystem access.

repo/src/transformers/pipelines/automatic_speech_recognition.py:352

                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56cc2922f777f8c0 — Filesystem access.

repo/src/transformers/pipelines/base.py:464

        with open(binary_path, "wb+") as f_output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b54e66b097337eed — Filesystem access.

repo/src/transformers/pipelines/base.py:527

        with open(self.input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c833f338ebf6fb31 — Filesystem access.

repo/src/transformers/pipelines/base.py:542

        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f6ff23fb53341e5a — Filesystem access.

repo/src/transformers/pipelines/base.py:570

        with open(input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #28e3ce0dd2b4bfcb — Filesystem access.

repo/src/transformers/pipelines/base.py:587

        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ae813615e246002 — Environment-variable access.

repo/src/transformers/pipelines/base.py:1200

        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dfcdd6425573e5fe — Environment-variable access.

repo/src/transformers/pipelines/base.py:1202

            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dcefe2f491c897ac — Environment-variable access.

repo/src/transformers/pipelines/base.py:1321

        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #185dfd1792df60d1 — Environment-variable access.

repo/src/transformers/pipelines/base.py:1323

            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #773ddfc02caf2ef3 — Filesystem access.

repo/src/transformers/pipelines/zero_shot_audio_classification.py:111

                with open(audio, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ecc296de9b343e3 — Filesystem access.

repo/src/transformers/processing_utils.py:1090

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ab2a8ddfecf53ec — Filesystem access.

repo/src/transformers/processing_utils.py:1170

            with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a21b4f5d53591bad — Filesystem access.

repo/src/transformers/processing_utils.py:1178

                    with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #58cd5a6124c81197 — Filesystem access.

repo/src/transformers/processing_utils.py:1187

                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be9f857164c34638 — Filesystem access.

repo/src/transformers/processing_utils.py:1375

            with open(resolved_chat_template_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3576e65c3c304074 — Filesystem access.

repo/src/transformers/processing_utils.py:1387

                template_name: open(template_file, "r", encoding="utf-8").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #195b9fc71f0f9b0b — Filesystem access.

repo/src/transformers/processing_utils.py:1391

                with open(resolved_raw_chat_template_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #460dd8973b056ace — Filesystem access.

repo/src/transformers/processing_utils.py:1406

                with open(resolved_processor_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #056e33a748937136 — Filesystem access.

repo/src/transformers/processing_utils.py:1432

                reader = open(resolved_audio_tokenizer_file, "r", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09410b9570968dff — Environment-variable access.

repo/src/transformers/testing_utils.py:290

        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #139c5bba9faa95d3 — Environment-variable access.

repo/src/transformers/testing_utils.py:306

        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f5e2d7226c28dbc — Environment-variable access.

repo/src/transformers/testing_utils.py:1079

    if "TRANSFORMERS_TEST_BACKEND" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c5f687674724e59 — Environment-variable access.

repo/src/transformers/testing_utils.py:1080

        backend = os.environ["TRANSFORMERS_TEST_BACKEND"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4fc6bd9ba1e23022 — Environment-variable access.

repo/src/transformers/testing_utils.py:1089

    if "TRANSFORMERS_TEST_DEVICE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff2af2cf42dd7252 — Environment-variable access.

repo/src/transformers/testing_utils.py:1090

        torch_device = os.environ["TRANSFORMERS_TEST_DEVICE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6e561b18a4986a6 — Environment-variable access.

repo/src/transformers/testing_utils.py:2161

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #983d68c1a45f32fe — Environment-variable access.

repo/src/transformers/testing_utils.py:2283

            for k in list(os.environ.keys()):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca158a91874bab17 — Environment-variable access.

repo/src/transformers/testing_utils.py:2285

                    del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f33c6f8535a10c69 — Environment-variable access.

repo/src/transformers/testing_utils.py:2296

    return mock.patch.dict(os.environ, kwargs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f1ad648db777b95 — Environment-variable access.

repo/src/transformers/testing_utils.py:2311

    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a7c47d7d34403b0 — Filesystem access.

repo/src/transformers/testing_utils.py:2413

        with open(report_files["durations"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c36841f98742d867 — Filesystem access.

repo/src/transformers/testing_utils.py:2443

    with open(report_files["failures_long"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01bf2a9f4c09da76 — Filesystem access.

repo/src/transformers/testing_utils.py:2448

    with open(report_files["failures_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7468fef78ebf30db — Filesystem access.

repo/src/transformers/testing_utils.py:2453

    with open(report_files["failures_line"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0cbf6697210faec5 — Filesystem access.

repo/src/transformers/testing_utils.py:2457

    with open(report_files["errors"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e11aa16c975bcea — Filesystem access.

repo/src/transformers/testing_utils.py:2461

    with open(report_files["warnings"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cca0f7688034f5c9 — Filesystem access.

repo/src/transformers/testing_utils.py:2475

    with open(report_files["summary_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #086a1a1a42c71891 — Filesystem access.

repo/src/transformers/testing_utils.py:2479

    with open(report_files["stats"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #25a328bfc12de47a — Environment-variable access.

repo/src/transformers/testing_utils.py:2579

    worker = os.environ.get("PYTEST_XDIST_WORKER", "gw0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c05b7fa324c16aff — Filesystem access.

repo/src/transformers/testing_utils.py:2626

    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bf211d0aec82c5fb — Environment-variable access.

repo/src/transformers/testing_utils.py:2828

        timeout = int(os.environ.get("PYTEST_TIMEOUT", "600"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10f738d680a0bd7f — Environment-variable access.

repo/src/transformers/testing_utils.py:2864

        if os.getenv("_INSIDE_SUB_PROCESS", None) == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f0b6824fdc1d2d5 — Environment-variable access.

repo/src/transformers/testing_utils.py:2867

            test = " ".join(os.environ.get("PYTEST_CURRENT_TEST").split(" ")[:-1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3d7e99cd8332d528 — Environment-variable access.

repo/src/transformers/testing_utils.py:2869

                env = copy.deepcopy(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b16fb9e48fc85dbc — Environment-variable access.

repo/src/transformers/testing_utils.py:2986

    skip_cuda_tests: bool = os.environ.get("SKIP_CUDA_DOCTEST", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c80b8829cf91ecf — Environment-variable access.

repo/src/transformers/testing_utils.py:3224

    if "TRANSFORMERS_TEST_DEVICE_SPEC" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b2140df9a857f08 — Environment-variable access.

repo/src/transformers/testing_utils.py:3225

        device_spec_path = os.environ["TRANSFORMERS_TEST_DEVICE_SPEC"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #31232c480ef80417 — Environment-variable access.

repo/src/transformers/testing_utils.py:3248

        if "TRANSFORMERS_TEST_DEVICE" in os.environ and torch_device != device_name:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a84ae7391b27b37e — Environment-variable access.

repo/src/transformers/testing_utils.py:3449

    force_fullgraph = os.environ.get("TORCH_COMPILE_FORCE_FULLGRAPH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #171efc74ffd69319 — Environment-variable access.

repo/src/transformers/testing_utils.py:3472

    full_test_name = os.environ.get("PYTEST_CURRENT_TEST", "").split(" ")[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #405e6879811e8777 — Filesystem access.

repo/src/transformers/testing_utils.py:3552

    with open(actual_test_file) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00672e001ff20273 — Filesystem access.

repo/src/transformers/testing_utils.py:3558

    with open(caller_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea00967b7e82e15a — Environment-variable access.

repo/src/transformers/testing_utils.py:3646

    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a66aabf607815330 — Filesystem access.

repo/src/transformers/testing_utils.py:3648

    with open(p, "a") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b13066e44bccd6a — Environment-variable access.

repo/src/transformers/testing_utils.py:3765

        if not os.environ.get("PYTEST_CURRENT_TEST", ""):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #613a6dd73ab15591 — Environment-variable access.

repo/src/transformers/testing_utils.py:3802

            if os.getenv("CI") == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf5b3844317397a2 — Environment-variable access.

repo/src/transformers/testing_utils.py:3878

    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09bdd5550d3ac1c7 — Filesystem access.

repo/src/transformers/testing_utils.py:4232

    with open(file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4bea32ace75dc8e0 — Filesystem access.

repo/src/transformers/testing_utils.py:4237

    with open(file, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eee83053c49f701f — Filesystem access.

repo/src/transformers/testing_utils.py:4473

            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a0f6a43b4a5dfb04 — Filesystem access.

repo/src/transformers/testing_utils.py:4482

            with open(new_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b290f7c5a07f11b — Filesystem access.

repo/src/transformers/tokenization_python.py:1397

        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #abbde09f7bde161b — Filesystem access.

repo/src/transformers/tokenization_python.py:1406

        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b9ef55ce628002b8 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1661

                    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c9ff2d312f77f1de — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1780

            with open(tokenizer_config_file, encoding="utf-8") as tokenizer_config_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #834bdd96c7baee40 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1799

            with open(chat_template_file, encoding="utf-8") as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c8f3d9d032720a3 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1806

            with open(template_file) as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11518e14f81a10dc — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1875

                with open(special_tokens_map_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0029dca43a8549df — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1905

                with open(added_tokens_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #540b3574f4028b7e — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:1918

                with open(tokenizer_file, encoding="utf-8") as tokenizer_file_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f09b6572d9a1aed5 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:2123

        with open(tokenizer_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #275884cafaa7aa6e — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:2176

            with open(added_tokens_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01f9e878f9bf66b1 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3314

            with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dda2325310932855 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3325

                    with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d3fc2bdaf8f292a6 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3335

                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bec799a07bec32f0 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3608

            with open(resolved_vocab_file, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11762b909cb7dca7 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3634

                with open(resolved_vocab_txt, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5efcf6542d5b4565 — Filesystem access.

repo/src/transformers/tokenization_utils_base.py:3660

            with open(resolved_merges_file, "r", encoding="utf-8") as mf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cb6ae497e8d4c00d — Filesystem access.

repo/src/transformers/tokenization_utils_sentencepiece.py:260

            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2d5fd67724b0948 — Filesystem access.

repo/src/transformers/tokenization_utils_tokenizers.py:121

            with open(fast_tokenizer_file, encoding="utf-8") as tokenizer_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50174ae2c0cab01a — Filesystem access.

repo/src/transformers/tokenization_utils_tokenizers.py:1335

                with open(_config_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5d8badf061cae61d — Environment-variable access.

repo/src/transformers/trainer.py:2465

                model, device_ids=[int(os.getenv("SMDATAPARALLEL_LOCAL_RANK"))]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8bae46dc65c1647 — Filesystem access.

repo/src/transformers/trainer.py:4021

        with open(model_card_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6c1ae840ce5b262 — Filesystem access.

repo/src/transformers/trainer.py:4126

                with open(index_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3334ed10b936706a — Filesystem access.

repo/src/transformers/trainer_callback.py:146

        with open(json_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de81a778540f7f98 — Filesystem access.

repo/src/transformers/trainer_callback.py:152

        with open(json_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d80c59d27005934e — Filesystem access.

repo/src/transformers/trainer_jit_checkpoint.py:60

            with open(sentinel_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #823c4717972956c9 — Filesystem access.

repo/src/transformers/trainer_pt_utils.py:943

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #777d353b66b6790e — Filesystem access.

repo/src/transformers/trainer_pt_utils.py:949

            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f28caf40972988e — Filesystem access.

repo/src/transformers/trainer_pt_utils.py:955

        with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ccabc77479c057cd — Environment-variable access.

repo/src/transformers/trainer_utils.py:166

        os.environ["CUDA_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #475dd35e1188a6fb — Environment-variable access.

repo/src/transformers/trainer_utils.py:167

        os.environ["CUBLAS_WORKSPACE_CONFIG"] = ":16:8"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #617ef3475d80bf3f — Environment-variable access.

repo/src/transformers/trainer_utils.py:169

        os.environ["ASCEND_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b31eebabaa834d7a — Environment-variable access.

repo/src/transformers/trainer_utils.py:170

        os.environ["HCCL_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc50a339dd0f3ce1 — Environment-variable access.

repo/src/transformers/trainer_utils.py:172

        os.environ["FLASH_ATTENTION_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #53008d24ffcfd6e0 — Filesystem access.

repo/src/transformers/trainer_utils.py:1094

    with open(load_index, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af80780092c41748 — Environment-variable access.

repo/src/transformers/training_args.py:86

    if os.environ.get("TORCHELASTIC_RUN_ID"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e1a92b20d39519a7 — Environment-variable access.

repo/src/transformers/training_args.py:1556

        self.mixed_precision = os.environ.get("ACCELERATE_MIXED_PRECISION", "no")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #148a12afeb33063a — Environment-variable access.

repo/src/transformers/training_args.py:1576

                os.environ["ACCELERATE_DYNAMO_BACKEND"] = self.torch_compile_backend

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d25b160af9dc16cd — Environment-variable access.

repo/src/transformers/training_args.py:1578

                    os.environ["ACCELERATE_DYNAMO_MODE"] = self.torch_compile_mode

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1ad00a66e20bf87 — Environment-variable access.

repo/src/transformers/training_args.py:1650

        elif strtobool(os.environ.get("ACCELERATE_USE_DEEPSPEED", "false")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6b75e0a30a66e004 — Environment-variable access.

repo/src/transformers/training_args.py:1810

        if self.use_cpu or strtobool(os.environ.get("ACCELERATE_USE_CPU", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08deb80ff14b2b91 — Environment-variable access.

repo/src/transformers/training_args.py:1834

                os.environ["ACCELERATE_USE_DEEPSPEED"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32df90c3afc47c00 — Environment-variable access.

repo/src/transformers/training_args.py:1837

                del os.environ["ACCELERATE_USE_DEEPSPEED"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #199495039ae29742 — Environment-variable access.

repo/src/transformers/training_args.py:1880

                    "cuda:0" if torch.cuda.is_available() else os.environ.get("ACCELERATE_TORCH_DEVICE", "cpu")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf681e3fe0a91154 — Filesystem access.

repo/src/transformers/training_args.py:2699

            with open(self.fsdp_config, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6863257dbe5aa3af — Environment-variable access.

repo/src/transformers/training_args.py:2766

        os.environ["FSDP_CPU_RAM_EFFICIENT_LOADING"] = cpu_ram_efficient_loading

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #97ccda023d834bd4 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/transformers/utils/attention_visualizer.py:183

            img = Image.open(io.BytesIO(httpx.get(img, follow_redirects=True).content))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #9e92351f1525e042 — Filesystem access.

repo/src/transformers/utils/generic.py:379

        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #278a16368fd3bc3e — Filesystem access.

repo/src/transformers/utils/generic.py:862

        with open(pretrained_model_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dfdfb9f9ccb83081 — Filesystem access.

repo/src/transformers/utils/generic.py:868

        with open(os.path.join(pretrained_model_path, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa3320f1a8e0a2b7 — Environment-variable access.

repo/src/transformers/utils/hub.py:107

HF_MODULES_CACHE = os.getenv("HF_MODULES_CACHE", os.path.join(constants.HF_HOME, "modules"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e5b1fea7e1b5a62 — Environment-variable access.

repo/src/transformers/utils/hub.py:178

        instance_data = httpx.get(os.environ["ECS_CONTAINER_METADATA_URI"]).json()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d06ff79a3343ebb — Environment-variable access.

repo/src/transformers/utils/hub.py:185

    sagemaker_params = json.loads(os.getenv("SM_FRAMEWORK_PARAMS", "{}"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #45d2f85b7c975369 — Environment-variable access.

repo/src/transformers/utils/hub.py:187

    training_job_arn = os.getenv("TRAINING_JOB_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d53ebba47509a99b — Environment-variable access.

repo/src/transformers/utils/hub.py:191

        "sm_framework": os.getenv("SM_FRAMEWORK_MODULE", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52f1bb22bd519e72 — Environment-variable access.

repo/src/transformers/utils/hub.py:192

        "sm_region": os.getenv("AWS_REGION", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #259c906d71c57103 — Environment-variable access.

repo/src/transformers/utils/hub.py:193

        "sm_number_gpu": os.getenv("SM_NUM_GPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #898ad49f38355d3d — Environment-variable access.

repo/src/transformers/utils/hub.py:194

        "sm_number_cpu": os.getenv("SM_NUM_CPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5dbdff6a045ba893 — Environment-variable access.

repo/src/transformers/utils/hub.py:215

    if os.environ.get("TRANSFORMERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61177b56bf676504 — Filesystem access.

repo/src/transformers/utils/hub.py:879

    with open(index_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #67e79be3b35c2279 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:118

    return os.getenv(env_variable, "false").lower() in ("true", "1", "y", "yes", "on")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a2409fdc40541ce — Environment-variable access.

repo/src/transformers/utils/import_utils.py:123

    return os.getenv(env_variable, "true").lower() in ("false", "0", "n", "no", "off")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2db47033834fcb9 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:130

USE_TORCH_XLA = os.environ.get("USE_TORCH_XLA", "1").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #779217a03b3447cc — Environment-variable access.

repo/src/transformers/utils/import_utils.py:356

    pytorch_cndev_based_mlu_check_previous_value = os.environ.get("PYTORCH_CNDEV_BASED_MLU_CHECK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b97168f8bfe04a21 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:358

        os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = str(1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a9352fd4aa02aad — Environment-variable access.

repo/src/transformers/utils/import_utils.py:362

            os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = pytorch_cndev_based_mlu_check_previous_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f248b31d26fc9ada — Environment-variable access.

repo/src/transformers/utils/import_utils.py:364

            os.environ.pop("PYTORCH_CNDEV_BASED_MLU_CHECK", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba19970d18449c62 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:434

    if os.environ.get("PT_HPU_LAZY_MODE", "1") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4637d8ffc6594ca9 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1640

    if os.getenv("TRANSFORMERS_DISABLE_TORCH_CHECK", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed0fae1085d43501 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1689

        if "DATABRICKS_RUNTIME_VERSION" in os.environ and os.environ["DATABRICKS_RUNTIME_VERSION"] < "11.0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb586a140f3af129 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1701

    sagemaker_params = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d92c8da9b5e2c9c0 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1715

    smp_options = os.getenv("SM_HP_MP_PARAMETERS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #58d10a2cfb15c203 — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1725

    mpi_options = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fc3f08070c75ce0d — Environment-variable access.

repo/src/transformers/utils/import_utils.py:1738

    return "SAGEMAKER_JOB_NAME" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f43c7a0880e68729 — Filesystem access.

repo/src/transformers/utils/import_utils.py:2850

        with open(os.path.join(module_path, module_name), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ab4d8b20b683c5f — Environment-variable access.

repo/src/transformers/utils/logging.py:64

    env_level_str = os.getenv("TRANSFORMERS_VERBOSITY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e33f994fc9b8e3c7 — Filesystem access.

repo/src/transformers/utils/logging.py:94

            sys.stderr = open(os.devnull, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3688bcc5aaad927e — Environment-variable access.

repo/src/transformers/utils/logging.py:108

        if os.getenv("TRANSFORMERS_VERBOSITY", None) == "detail":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6780af7d5b792a4d — Environment-variable access.

repo/src/transformers/utils/logging.py:114

        ci = os.getenv("CI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e4440dd50be850ed — Environment-variable access.

repo/src/transformers/utils/logging.py:322

    no_advisory_warnings = os.getenv("TRANSFORMERS_NO_ADVISORY_WARNINGS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0430d76f41df83db — Filesystem access.

repo/src/transformers/utils/network_logging.py:172

        Path(dump_path).write_text(json.dumps(records), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #21b05358fe12f926 — Filesystem access.

repo/src/transformers/utils/network_logging.py:182

                records = json.loads(Path(record_file).read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f788ded38fb9a599 — Filesystem access.

repo/src/transformers/utils/network_logging.py:327

        report_path.write_text(json.dumps(self.build_report(), indent=2, sort_keys=True), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a97663c48df80b2 — Environment-variable access.

repo/src/transformers/utils/network_logging.py:338

    enabled_raw = os.environ.get("NETWORK_DEBUG_REPORT", "").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73004cf6fd36a76e — Environment-variable access.

repo/src/transformers/utils/network_logging.py:344

    output_path = os.environ.get("NETWORK_DEBUG_REPORT_PATH", "").strip() or _DEFAULT_REPORT_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #34093a2b3dcf2a9b — Environment-variable access.

repo/src/transformers/utils/notebook.py:128

        if "VSCODE_PID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50284701d5b04dc3 — Filesystem access.

repo/src/transformers/utils/pytest_helpers.py:39

    data = json.loads(p.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6df6a9cfff1d7b81 — Filesystem access.

repo/src/transformers/utils/quantization_config.py:144

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29765dee89dee478 — Filesystem access.

repo/src/transformers/video_processing_utils.py:769

        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2198c6a11a28ed82 — Filesystem access.

repo/src/transformers/video_processing_utils.py:789

        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed02e7717dd898f8 — Filesystem access.

repo/utils/add_dates.py:125

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ceb1e168e9882c3 — Filesystem access.

repo/utils/add_dates.py:186

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2eb44d2638cdf8a2 — Filesystem access.

repo/utils/add_dates.py:215

        with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a1f79d6a27f014f — Filesystem access.

repo/utils/add_dates.py:234

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fef5758ca12703a1 — Filesystem access.

repo/utils/add_dates.py:324

            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #222e87c5a5c1b7d2 — Filesystem access.

repo/utils/add_dates.py:355

                with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f6241ff816c6b11 — Filesystem access.

repo/utils/add_dates.py:365

            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3347890ad7122686 — Filesystem access.

repo/utils/add_pipeline_model_mapping_to_test.py:260

    with open(moddule_file, "w", encoding="UTF-8", newline="\n") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff747240e08ef129 — Filesystem access.

repo/utils/aggregate_failure_reports.py:46

                with open(failure_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1f5f16af0d8fb72 — Filesystem access.

repo/utils/aggregate_failure_reports.py:53

    with open(output_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #51958c56954f3fd9 — Filesystem access.

repo/utils/check_auto.py:81

        with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #99cdfd9c58d0d212 — Filesystem access.

repo/utils/check_auto.py:135

            with open(f"src/transformers/models/{module}/{processor_filename}_{module}.py", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e9cb6fb3d4326b9 — Filesystem access.

repo/utils/check_auto.py:282

        old_content = open(AUTO_FILENAME, "r").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f5bf8f3dda79a1c — Filesystem access.

repo/utils/check_auto.py:300

        with open(temp_filename, "w") as temp_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ab24ec87e313576 — Filesystem access.

repo/utils/check_auto.py:304

        new_content = open(temp_filename, "r").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ffb3be86413caef6 — Filesystem access.

repo/utils/check_auto.py:323

            with open(AUTO_FILENAME, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0edeab0bd39c30e6 — Filesystem access.

repo/utils/check_bad_commit.py:77

    with open("target_script.py", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3640c5285f3e0519 — Environment-variable access.

repo/utils/check_bad_commit.py:138

    is_pr_ci = os.environ.get("GITHUB_EVENT_NAME") in ["issue_comment", "pull_request"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d698bd92ed1e4380 — Filesystem access.

repo/utils/check_bad_commit.py:231

    with open("run_git_bisect.sh", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #71bf7a44051d5f91 — Environment-variable access.

repo/utils/check_bad_commit.py:283

        pr_number = os.environ.get("pr_number")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c19659f31f1e1a9 — Environment-variable access.

repo/utils/check_bad_commit.py:343

        args.github_token = os.environ.get("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #35331ae540c2fea4 — Environment-variable access.

repo/utils/check_bad_commit.py:345

    run_idx = os.environ.get("run_idx")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e622dcff2ee011ae — Environment-variable access.

repo/utils/check_bad_commit.py:346

    n_runners = os.environ.get("n_runners")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d2e19612f334120 — Filesystem access.

repo/utils/check_bad_commit.py:361

        with open(args.output_file, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da8effffc737b9e6 — Filesystem access.

repo/utils/check_bad_commit.py:364

        with open(args.file, "r", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e1b2bf51c7ef5603 — Filesystem access.

repo/utils/check_bad_commit.py:428

        with open(args.output_file, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fc269d25376c4d97 — Filesystem access.

repo/utils/check_config_attributes.py:394

            with open(path, encoding="utf8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #290a5f084aabd2e7 — Filesystem access.

repo/utils/check_copies.py:443

    with open(os.path.join(base_path, f"{module}.py"), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #366118aed6777af5 — Filesystem access.

repo/utils/check_copies.py:665

    with open(filename, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86044e964b46d418 — Filesystem access.

repo/utils/check_copies.py:837

        with open(filename, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08a4f5eed97b316a — Filesystem access.

repo/utils/check_copies.py:887

    with open(os.path.join(REPO_PATH, filename), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ea58a55ac166ef0 — Filesystem access.

repo/utils/check_doc_toc.py:131

    with open(TOCTREE_PATH, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #97884744044d71ce — Filesystem access.

repo/utils/check_doc_toc.py:166

            with open(TOCTREE_PATH, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #83ffed1411257ed6 — Filesystem access.

repo/utils/check_docstrings.py:415

        with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d1016f898d2b5523 — Filesystem access.

repo/utils/check_docstrings.py:818

    with open(obj_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2adfa61be136b233 — Filesystem access.

repo/utils/check_docstrings.py:830

    with open(obj_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01129f6981c30b08 — Filesystem access.

repo/utils/check_docstrings.py:934

            with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c3746cf52d59a713 — Filesystem access.

repo/utils/check_docstrings.py:1040

        with open(modular_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ad329d255280a8e — Filesystem access.

repo/utils/check_docstrings.py:1043

        with open(generated_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e7506bbb19ae4c35 — Filesystem access.

repo/utils/check_docstrings.py:1179

        with open(modular_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bda498261ffe7000 — Filesystem access.

repo/utils/check_docstrings.py:1687

    with open(candidate_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #826b6b69c268791e — Filesystem access.

repo/utils/check_docstrings.py:1872

        with open(candidate_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa8bac5bfeed6a5c — Filesystem access.

repo/utils/check_docstrings.py:1958

        with open(candidate_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8d68e3a2aa0ac1fa — Filesystem access.

repo/utils/check_docstrings.py:1995

        with open(candidate_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e53f5588e516779f — Filesystem access.

repo/utils/check_doctest_list.py:70

    with open(doctest_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a85f2e49b79939fe — Filesystem access.

repo/utils/check_doctest_list.py:89

        with open(doctest_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ab9318e340cda29 — Filesystem access.

repo/utils/check_dummies.py:111

    with open(os.path.join(PATH_TO_TRANSFORMERS, "__init__.py"), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5e2903c55d428b4 — Filesystem access.

repo/utils/check_dummies.py:217

            with open(file_path, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d0b7f62d0b9298e3 — Filesystem access.

repo/utils/check_dummies.py:230

                with open(dummy_file_paths[backend], "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d80cc8660ef585c7 — Filesystem access.

repo/utils/check_inits.py:111

    with open(init_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b54e7c1e893c74fd — Filesystem access.

repo/utils/check_inits.py:338

    with open(os.path.join(PATH_TO_TRANSFORMERS, "__init__.py"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ffa17ba6ef27fbaa — Filesystem access.

repo/utils/check_modular_conversion.py:45

    with open(file_path, "r", encoding="utf-8") as modeling_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b55173098e85a429 — Filesystem access.

repo/utils/check_modular_conversion.py:60

        with open(file_path, "w", encoding="utf-8", newline="\n") as modeling_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b5f93346b6f93797 — Filesystem access.

repo/utils/check_modular_conversion.py:88

        with open(temp_file_name, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #220a5a08efd07d93 — Filesystem access.

repo/utils/check_modular_conversion.py:92

        with open(temp_file_name, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f73bb67b9dbbeae6 — Filesystem access.

repo/utils/check_pipeline_typing.py:39

    with open(pipeline_file_path, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1df07cf9e2ec2842 — Filesystem access.

repo/utils/check_pipeline_typing.py:78

        with open(pipeline_file_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b9ab65cc105fc56 — Environment-variable access.

repo/utils/check_repo.py:622

        if os.getenv("TRANSFORMERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #723331ac66511574 — Filesystem access.

repo/utils/check_repo.py:652

            if (Path(model_dir) / "__init__.py").read_text().strip() == "":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7349dd4c62b928b — Filesystem access.

repo/utils/check_repo.py:811

    with open(os.path.join(PATH_TO_TESTS, test_file), "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b787d7372ed7978 — Filesystem access.

repo/utils/check_repo.py:1123

    with open(filename, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a28d95290c50dbe8 — Filesystem access.

repo/utils/check_repo.py:1167

        with open(doc_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7d97729e0722863 — Filesystem access.

repo/utils/check_repo.py:1462

            with open(modeling_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #362b5261b36d01c1 — Filesystem access.

repo/utils/check_self_hosted_runner.py:29

    with open("offline_runners.txt", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4be6721dd2348c63 — Filesystem access.

repo/utils/checkers.py:123

            tree = ast.parse(py_file.read_text(encoding="utf-8"), filename=str(py_file))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a502b2eb493d98bf — Filesystem access.

repo/utils/checkers.py:249

            return json.loads(self._path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f549018bc259fdd — Filesystem access.

repo/utils/checkers.py:255

            self._path.write_text(json.dumps(self._data, sort_keys=True, indent=2) + "\n", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29f28e22714cce8b — Filesystem access.

repo/utils/checkers.py:269

                h.update(p.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #850b305960f7188d — Filesystem access.

repo/utils/checkers.py:292

    return hashlib.md5(path.read_bytes()).hexdigest()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de6b9703e5cb4a53 — Environment-variable access.

repo/utils/checkers.py:394

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4586d7fc7b6778d8 — Environment-variable access.

repo/utils/checkers.py:568

    is_ci = os.environ.get("GITHUB_ACTIONS") == "true" or os.environ.get("CIRCLECI") == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce9c9c8429361351 — Environment-variable access.

repo/utils/checkers.py:584

    job = os.environ.get("TRANSFORMERS_TEST_OTEL_JOB", "local_checks")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e80181762d2e24e — Environment-variable access.

repo/utils/collated_reports.py:116

    if os.getenv("GITHUB_EVENT_NAME") != "schedule":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #653685e50a2a3e13 — Environment-variable access.

repo/utils/collated_reports.py:117

        report_repo_subfolder = f"{os.getenv('GITHUB_RUN_NUMBER')}-{os.getenv('GITHUB_RUN_ID')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #521b1278080dcb11 — Environment-variable access.

repo/utils/collated_reports.py:121

        token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_run_id=os.getenv("GITHUB_RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7782272d4c98c987 — Environment-variable access.

repo/utils/collated_reports.py:134

        token=os.getenv("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b95dfe1205ff833 — Filesystem access.

repo/utils/collated_reports.py:180

        with open(model_dir / "summary_short.txt", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dee0b94cd47ded47 — Filesystem access.

repo/utils/collated_reports.py:202

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #366f69e38abc6da0 — Filesystem access.

repo/utils/compare_test_runs.py:36

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #614f92e40cc8ca69 — Filesystem access.

repo/utils/create_dependency_mapping.py:76

    with open(file_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d1dcafd9135a133b — Environment-variable access.

repo/utils/create_dummy_models.py:62

os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #275a6c40709e2fa1 — Filesystem access.

repo/utils/create_dummy_models.py:1657

    with open(os.path.join(report_path, "tiny_model_summary.json")) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #74b954df4427694b — Filesystem access.

repo/utils/create_dummy_models.py:1659

    with open("tests/utils/tiny_model_summary.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04f898869174bac8 — Filesystem access.

repo/utils/create_dummy_models.py:1679

    with open(os.path.join(report_path, "updated_tiny_model_summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d7451d5853989127 — Filesystem access.

repo/utils/create_dummy_models.py:1767

        with open(os.path.join(report_path, "failed_uploads.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af87cb73e619bab5 — Filesystem access.

repo/utils/create_dummy_models.py:1776

    with open(os.path.join(report_path, "tiny_model_summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #27dfe9122e72ffb6 — Filesystem access.

repo/utils/create_dummy_models.py:1779

    with open(os.path.join(report_path, "tiny_model_creation_report.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8a1f536ce47f9df — Filesystem access.

repo/utils/create_dummy_models.py:1785

    with open(os.path.join(report_path, "failed_report.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ebac5f591c1aa646 — Filesystem access.

repo/utils/create_dummy_models.py:1791

    with open(os.path.join(report_path, "simple_report.txt"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b649ea1786b64de5 — Filesystem access.

repo/utils/create_dummy_models.py:1795

    with open(os.path.join(report_path, "simple_failed_report.txt"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e004e1beb4b9c594 — Filesystem access.

repo/utils/custom_init_isort.py:251

    with open(file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5acb63a0c2036a3c — Filesystem access.

repo/utils/custom_init_isort.py:312

            with open(file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #ae68d45019efc387 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/utils/deprecate_models.py:31

    release_data = httpx.get(url).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #3cb6beab3c2cc90f — Filesystem access.

repo/utils/deprecate_models.py:61

    with open(model_doc_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #94d80be55410836e — Filesystem access.

repo/utils/deprecate_models.py:75

    with open(model_doc_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78d3c68bb56f4335 — Filesystem access.

repo/utils/deprecate_models.py:112

    with open(filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #27240cd2a29b2e4f — Filesystem access.

repo/utils/deprecate_models.py:122

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2255220eb8feb45f — Filesystem access.

repo/utils/deprecate_models.py:132

        with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d39167f9bab331ac — Filesystem access.

repo/utils/deprecate_models.py:141

        with open(file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce5307dcda3f7dff — Filesystem access.

repo/utils/deprecate_models.py:180

    with open(filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6df427e4143d0f1b — Filesystem access.

repo/utils/deprecate_models.py:188

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87a642d2a940c3e9 — Filesystem access.

repo/utils/deprecate_models.py:205

    with open(filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f8d1992766f01f9d — Filesystem access.

repo/utils/deprecate_models.py:214

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f16bcf7c5d2ac59 — Filesystem access.

repo/utils/deprecate_models.py:226

    with open(filename, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dbb4def9ec94666b — Filesystem access.

repo/utils/deprecate_models.py:264

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #478b998f744b3217 — Filesystem access.

repo/utils/deprecate_models.py:274

    with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db0993bf1447de34 — Filesystem access.

repo/utils/deprecate_models.py:298

    with open(filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f43f549eec87ea08 — Filesystem access.

repo/utils/download_glue_data.py:78

    with open(os.path.join(mrpc_dir, "dev_ids.tsv"), encoding="utf8") as ids_fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bce57a556de155c2 — Filesystem access.

repo/utils/download_glue_data.py:83

        open(mrpc_train_file, encoding="utf8") as data_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc1aaf70aa32c866 — Filesystem access.

repo/utils/download_glue_data.py:84

        open(os.path.join(mrpc_dir, "train.tsv"), "w", encoding="utf8") as train_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44e887bb932a586f — Filesystem access.

repo/utils/download_glue_data.py:85

        open(os.path.join(mrpc_dir, "dev.tsv"), "w", encoding="utf8") as dev_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d3c11d9e17bff40a — Filesystem access.

repo/utils/download_glue_data.py:98

        open(mrpc_test_file, encoding="utf8") as data_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5e70923d3be3f99 — Filesystem access.

repo/utils/download_glue_data.py:99

        open(os.path.join(mrpc_dir, "test.tsv"), "w", encoding="utf8") as test_fh,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02a4923d881c6801 — Environment-variable access.

repo/utils/extract_pr_number_from_circleci.py:22

    pr = os.environ.get("CIRCLE_PULL_REQUEST", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ebbfebbc88daf6a — Environment-variable access.

repo/utils/extract_pr_number_from_circleci.py:26

        pr = os.environ.get("CIRCLE_BRANCH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5fd6e4e8819c46c2 — Filesystem access.

repo/utils/extract_warnings.py:47

                with open(file_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #708bbb2debf41de4 — Filesystem access.

repo/utils/extract_warnings.py:118

        with open(os.path.join(args.output_dir, "artifacts.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fff8907dc4a1f7f6 — Filesystem access.

repo/utils/extract_warnings.py:133

    with open(os.path.join(args.output_dir, "selected_warnings.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5cd87b654034d4e9 — Environment-variable access.

repo/utils/fetch_hub_objects_for_ci.py:27

_staging_mode = os.environ.pop("HUGGINGFACE_CO_STAGING", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #64f2ca36c8b95a67 — Environment-variable access.

repo/utils/fetch_hub_objects_for_ci.py:40

    os.environ["HUGGINGFACE_CO_STAGING"] = _staging_mode

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6b82b38f72b6893b — Filesystem access.

repo/utils/fetch_hub_objects_for_ci.py:142

    with open(filepath, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #514de00986c0127c — Filesystem access.

repo/utils/fetch_hub_objects_for_ci.py:197

                with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88bad3dc24ff5e12 — Filesystem access.

repo/utils/format_extras_slack_message.py:42

    with open(failures_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c579f9978b763c7 — Environment-variable access.

repo/utils/format_extras_slack_message.py:73

        output_file = os.environ.get("GITHUB_ENV")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79752ce9464da484 — Filesystem access.

repo/utils/format_extras_slack_message.py:79

    with open(output_file, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1adef9ac6b5e02ca — Filesystem access.

repo/utils/get_ci_error_statistics.py:113

    with open(file_path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bcf4306b3a57a066 — Filesystem access.

repo/utils/get_ci_error_statistics.py:275

    with open(os.path.join(args.output_dir, "job_links.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #559c7fa0af614b85 — Filesystem access.

repo/utils/get_ci_error_statistics.py:279

    with open(os.path.join(args.output_dir, "artifacts.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4bc446e35cd29626 — Filesystem access.

repo/utils/get_ci_error_statistics.py:298

    with open(os.path.join(args.output_dir, "errors.json"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9da86da376a0873a — Filesystem access.

repo/utils/get_ci_error_statistics.py:307

    with open(os.path.join(args.output_dir, "reduced_by_error.txt"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #724deddd4243bec0 — Filesystem access.

repo/utils/get_ci_error_statistics.py:309

    with open(os.path.join(args.output_dir, "reduced_by_model.txt"), "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #27e50cdda3756863 — Filesystem access.

repo/utils/get_pr_run_slow_jobs.py:15

    with open("pr_files.txt") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #25bf37f169abeaa1 — Filesystem access.

repo/utils/get_pr_run_slow_jobs.py:98

        with open(filename) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c74c5090fa04741 — Environment-variable access.

repo/utils/get_previous_daily_ci.py:31

        workflow_run_id = os.environ["GITHUB_RUN_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8d4cb9f875ba559c — Filesystem access.

repo/utils/get_previous_daily_ci.py:159

                    with open(file_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #805dc738e8eea27c — Environment-variable access.

repo/utils/get_test_reports.py:69

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa915467252b54b4 — Environment-variable access.

repo/utils/get_test_reports.py:219

        os.environ["RUN_SLOW"] = "yes"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #052c70bb36525805 — Environment-variable access.

repo/utils/get_test_reports.py:240

        os.environ["PATCH_TESTING_METHODS_TO_COLLECT_OUTPUTS"] = "yes"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2ccc9c151e4ea780 — Environment-variable access.

repo/utils/get_test_reports.py:242

        os.environ["_PATCHED_TESTING_METHODS_OUTPUT_DIR"] = str(reports_dir)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d165e4d36108604 — Filesystem access.

repo/utils/models_to_deprecate.py:192

        with open("models_info.json", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7cbc1c75b8c64a6 — Filesystem access.

repo/utils/models_to_deprecate.py:277

        with open("models_info.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c7aac09f1441cbf4 — Filesystem access.

repo/utils/modular_model_converter.py:67

    with open(file_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #38770dbd559d1489 — Filesystem access.

repo/utils/modular_model_converter.py:1996

        with open(modular_file, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c0890f36795dcd4 — Filesystem access.

repo/utils/modular_model_converter.py:2046

        with open(new_file_name, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #304afed751073eeb — Filesystem access.

repo/utils/modular_model_converter.py:2053

    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #48cd7f8802660ce0 — Filesystem access.

repo/utils/modular_model_converter.py:2073

            with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7b14b4d61653fd6 — Environment-variable access.

repo/utils/modular_model_detector.py:135

os.environ["HF_HUB_DISABLE_PROGRESS_BARS"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #615f19ee1946189c — Environment-variable access.

repo/utils/modular_model_detector.py:136

os.environ["TRANSFORMERS_VERBOSITY"] = "error"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #48dc8dffc6634d0d — Filesystem access.

repo/utils/modular_model_detector.py:329

        source = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aaccebad8585aba1 — Filesystem access.

repo/utils/modular_model_detector.py:447

        with open(INDEX_MAP_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #846e27a0903ac072 — Filesystem access.

repo/utils/modular_model_detector.py:449

        with open(TOKENS_PATH, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8dba8bd36fbd4f4f — Filesystem access.

repo/utils/modular_model_detector.py:540

        with open(self._resolve_index_path(INDEX_MAP_PATH), "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f791b38c24f9dfc — Filesystem access.

repo/utils/modular_model_detector.py:543

        with open(self._resolve_index_path(TOKENS_PATH), "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd99d684e7263320 — Filesystem access.

repo/utils/modular_model_detector.py:605

            text = md_path.read_text(encoding="utf-8", errors="ignore")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ab49c068703dc89 — Filesystem access.

repo/utils/modular_model_detector.py:663

        source = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a63a5c15854f88c — Environment-variable access.

repo/utils/notification_service.py:236

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cae1ff30a4f8c4eb — Environment-variable access.

repo/utils/notification_service.py:256

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2dbad3eb86c1e39d — Environment-variable access.

repo/utils/notification_service.py:265

        job_link = f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #69d2fea3bcf4a207 — Filesystem access.

repo/utils/notification_service.py:487

        with open(file_path, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08dc5fa7f00651ae — Filesystem access.

repo/utils/notification_service.py:497

        with open(file_path, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd63915948491667 — Filesystem access.

repo/utils/notification_service.py:518

                    with open(file_path, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a536b42c8b1fcb6 — Environment-variable access.

repo/utils/notification_service.py:593

            include_all = os.environ.get("GITHUB_EVENT_NAME") in ["issue_comment", "pull_request"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #89e3a701bf8bb51d — Filesystem access.

repo/utils/notification_service.py:603

                with open(file_path, "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #657dbe36e26832e2 — Environment-variable access.

repo/utils/notification_service.py:613

                    token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f8c2675679b07f26 — Environment-variable access.

repo/utils/notification_service.py:683

            result = os.environ.get("OFFLINE_RUNNERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a4ab5f243d144c2a — Environment-variable access.

repo/utils/notification_service.py:716

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1241b686798bbe49 — Filesystem access.

repo/utils/notification_service.py:943

                with open(os.path.join(artifact_path, file)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9dd4a0241af929bb — Environment-variable access.

repo/utils/notification_service.py:1035

    client = WebClient(token=os.environ["CI_SLACK_BOT_TOKEN"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3147efc4c2b96c29 — Environment-variable access.

repo/utils/notification_service.py:1037

    SLACK_REPORT_CHANNEL_ID = os.environ["SLACK_REPORT_CHANNEL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #faa896916fcf8f20 — Environment-variable access.

repo/utils/notification_service.py:1041

    setup_status = os.environ.get("SETUP_STATUS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b7479a584ebf28b — Environment-variable access.

repo/utils/notification_service.py:1056

    ci_event = os.environ["CI_EVENT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e8bcecf15e1bb8d0 — Environment-variable access.

repo/utils/notification_service.py:1062

    ci_title = os.environ.get("CI_TITLE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cda2673f7ee7179e — Environment-variable access.

repo/utils/notification_service.py:1063

    ci_sha = os.environ.get("CI_SHA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52a02b5ca536414b — Environment-variable access.

repo/utils/notification_service.py:1079

        github_token = os.environ.get("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da33b1ff0b654bf5 — Environment-variable access.

repo/utils/notification_service.py:1151

        workflow_run_id=os.environ["GITHUB_RUN_ID"], token=os.environ["ACCESS_REPO_INFO_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eaf28da15c5f1581 — Environment-variable access.

repo/utils/notification_service.py:1176

    job_name = os.getenv("CI_TEST_JOB")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #536b286e5a711c09 — Environment-variable access.

repo/utils/notification_service.py:1313

    report_repo_id = os.getenv("REPORT_REPO_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #447c7b97aa7fe3fb — Environment-variable access.

repo/utils/notification_service.py:1317

    if os.getenv("GITHUB_EVENT_NAME") != "schedule":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0dc1ff015b0c0534 — Environment-variable access.

repo/utils/notification_service.py:1318

        report_repo_subfolder = f"{os.getenv('GITHUB_RUN_NUMBER')}-{os.getenv('GITHUB_RUN_ID')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c62e0a35ecc86f63 — Environment-variable access.

repo/utils/notification_service.py:1322

        token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_run_id=os.getenv("GITHUB_RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c2038de40aca17b0 — Filesystem access.

repo/utils/notification_service.py:1403

            with open(os.path.join(directory, "selected_warnings.json")) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a6758ebf66c2da6 — Environment-variable access.

repo/utils/notification_service.py:1417

    is_nvidia_daily_ci_workflow = os.environ.get("GITHUB_WORKFLOW_REF").startswith(nvidia_daily_ci_workflow)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5c526fdb5b9c6630 — Environment-variable access.

repo/utils/notification_service.py:1418

    is_amd_daily_ci_workflow = os.environ.get("GITHUB_WORKFLOW_REF").startswith(amd_daily_ci_workflows)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9413c5b63735c221 — Environment-variable access.

repo/utils/notification_service.py:1420

    is_scheduled_ci_run = os.environ.get("GITHUB_EVENT_NAME") == "schedule"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1467ee5f9eb9a06e — Environment-variable access.

repo/utils/notification_service.py:1423

    if os.environ.get("GITHUB_EVENT_NAME") == "workflow_run":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b132c7b648363c0 — Environment-variable access.

repo/utils/notification_service.py:1425

        event_payload_path = os.environ.get("GITHUB_EVENT_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d185803002e0a57 — Filesystem access.

repo/utils/notification_service.py:1427

        with open(event_payload_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf0e00b0e2e17e5a — Filesystem access.

repo/utils/notification_service.py:1442

        with open(f"ci_results_{job_name}/{test_to_result_name[test_name]}_results.json", "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e7e5c22012879c87 — Environment-variable access.

repo/utils/notification_service.py:1450

            token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f8680baa6989c009 — Filesystem access.

repo/utils/notification_service.py:1454

        with open(
            f"ci_results_{job_name}/{test_to_result_name[test_name]}_results_extra.json", "w", encoding="UTF-8"
        ) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #964d6093ce854a52 — Environment-variable access.

repo/utils/notification_service.py:1464

            token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e6bc9d2e6e1a0f15 — Filesystem access.

repo/utils/notification_service.py:1496

    with open(f"ci_results_{job_name}/job_links.json", "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62f4a6aa47710b90 — Environment-variable access.

repo/utils/notification_service.py:1504

        token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2c1f39077241e488 — Environment-variable access.

repo/utils/notification_service.py:1512

            token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_id=workflow_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #35418afc958a6eb9 — Environment-variable access.

repo/utils/notification_service.py:1520

                token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_id=other_workflow_id, commit_sha=ci_sha

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f10eb145f5268acb — Environment-variable access.

repo/utils/notification_service.py:1524

        prev_workflow_run_id = os.environ["PREV_WORKFLOW_RUN_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #083b427b1e063ddd — Environment-variable access.

repo/utils/notification_service.py:1525

        other_workflow_run_id = os.environ["OTHER_WORKFLOW_RUN_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #deebed1307f131f8 — Environment-variable access.

repo/utils/notification_service.py:1542

                token=os.environ["ACCESS_REPO_INFO_TOKEN"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd214168ff9222ad — Environment-variable access.

repo/utils/notification_service.py:1558

                token=os.environ["ACCESS_REPO_INFO_TOKEN"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79de8fc783b94f02 — Filesystem access.

repo/utils/notification_service.py:1575

            with open(f"ci_results_{job_name}/test_results_diff.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea06c10c6cfed639 — Environment-variable access.

repo/utils/notification_service.py:1584

                token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5510fb89448651c — Environment-variable access.

repo/utils/notification_service_doc_tests.py:24

client = WebClient(token=os.environ["CI_SLACK_BOT_TOKEN"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0fc9ebcefb28cbe5 — Environment-variable access.

repo/utils/notification_service_doc_tests.py:107

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1fb5e1871c85d97f — Environment-variable access.

repo/utils/notification_service_doc_tests.py:126

                "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #817aa819d125b4ca — Environment-variable access.

repo/utils/notification_service_doc_tests.py:195

                    "url": f"https://github.com/huggingface/transformers/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cb3dc69c2ccb5280 — Filesystem access.

repo/utils/notification_service_doc_tests.py:283

                with open(os.path.join(name, file), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5499ca1f7e507ac9 — Environment-variable access.

repo/utils/notification_service_doc_tests.py:317

    SLACK_REPORT_CHANNEL_ID = os.environ["SLACK_REPORT_CHANNEL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ddba65e312a6be9 — Environment-variable access.

repo/utils/notification_service_doc_tests.py:320

        workflow_run_id=os.environ["GITHUB_RUN_ID"], token=os.environ["ACCESS_REPO_INFO_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6530e31b13b32a6 — Filesystem access.

repo/utils/notification_service_doc_tests.py:379

    with open("doc_test_results/doc_test_results.json", "w", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #332ed1018fd82329 — Environment-variable access.

repo/utils/process_bad_commit_report.py:27

    job_name = os.environ.get("JOB_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a601ac8e31008e58 — Environment-variable access.

repo/utils/process_bad_commit_report.py:32

    if os.getenv("GITHUB_EVENT_NAME") != "schedule":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c4d4b05dba02a6cf — Environment-variable access.

repo/utils/process_bad_commit_report.py:33

        report_repo_subfolder = f"{os.getenv('GITHUB_RUN_NUMBER')}-{os.getenv('GITHUB_RUN_ID')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0eadbfd8557e6dfe — Environment-variable access.

repo/utils/process_bad_commit_report.py:37

        token=os.environ["ACCESS_REPO_INFO_TOKEN"], workflow_run_id=os.getenv("GITHUB_RUN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1bfb7a3f531bd162 — Environment-variable access.

repo/utils/process_bad_commit_report.py:46

    report_repo_id = os.getenv("REPORT_REPO_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #07d82bea1b25ac60 — Filesystem access.

repo/utils/process_bad_commit_report.py:48

    with open("new_failures_with_bad_commit.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b9efab4cc074a6a — Filesystem access.

repo/utils/process_bad_commit_report.py:51

    with open(f"ci_results_{job_name}/job_links.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7dc6e01dd1f2166c — Filesystem access.

repo/utils/process_bad_commit_report.py:64

    with open("new_failures_with_bad_commit.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9dff4b8cdb98f22f — Environment-variable access.

repo/utils/process_bad_commit_report.py:72

        token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50f5b39498958fb5 — Filesystem access.

repo/utils/process_bad_commit_report.py:76

    with open("new_failures_with_bad_commit_url.txt", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6013db44cc302a5 — Filesystem access.

repo/utils/process_bad_commit_report.py:132

    with open("new_failures_with_bad_commit_grouped_by_authors.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1c52f2422cd49c9 — Environment-variable access.

repo/utils/process_bad_commit_report.py:139

        token=os.environ.get("TRANSFORMERS_CI_RESULTS_UPLOAD_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7174ada840e26096 — Environment-variable access.

repo/utils/process_circleci_workflow_test_reports.py:30

        headers={"Circle-Token": os.environ.get("CIRCLE_TOKEN", "")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08259495874f5112 — Environment-variable access.

repo/utils/process_circleci_workflow_test_reports.py:41

            r = requests.get(url, headers={"Circle-Token": os.environ.get("CIRCLE_TOKEN", "")})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9142386b72a305ba — Environment-variable access.

repo/utils/process_circleci_workflow_test_reports.py:52

                    r = requests.get(url, headers={"Circle-Token": os.environ.get("CIRCLE_TOKEN", "")})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ddb7ef3e8466e6fd — Environment-variable access.

repo/utils/process_circleci_workflow_test_reports.py:55

                    r = requests.get(url, headers={"Circle-Token": os.environ.get("CIRCLE_TOKEN", "")})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00210f342357d79e — Filesystem access.

repo/utils/process_circleci_workflow_test_reports.py:69

            with open(f"outputs/{job['name']}/test_summary.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1981cd39ffa8f02e — Filesystem access.

repo/utils/process_circleci_workflow_test_reports.py:112

    with open("outputs/test_summary.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5194bd539e9fdd08 — Filesystem access.

repo/utils/process_circleci_workflow_test_reports.py:145

    with open("outputs/failure_summary.json", "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8f1fae812ab1a29 — Filesystem access.

repo/utils/process_test_artifacts.py:32

        with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10f02b9641660882 — Filesystem access.

repo/utils/process_test_artifacts.py:48

    with open(input_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ef4af0d3ae6d0c2 — Filesystem access.

repo/utils/process_test_artifacts.py:67

    with open(output_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #37cf6bc4cd43a800 — Filesystem access.

repo/utils/release.py:89

    with open(fname, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e07974d9e9e6c93c — Filesystem access.

repo/utils/release.py:94

    with open(fname, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #48614c745a7ab63f — Filesystem access.

repo/utils/release.py:112

                if UV_SCRIPT_MARKER in Path(folder, fname).read_text():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #310ffefd342f5799 — Filesystem access.

repo/utils/release.py:157

    with open(REPLACE_FILES["init"], "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bffcf84150accdd1 — Filesystem access.

repo/utils/scan_skipped_tests.py:38

        content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #81248e870b7aa378 — Filesystem access.

repo/utils/scan_skipped_tests.py:83

        file_content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c2ee1a179fd9f6d8 — Filesystem access.

repo/utils/scan_skipped_tests.py:90

    output_path.write_text(json.dumps(obj, indent=2), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #317a315e1d41d180 — Environment-variable access.

repo/utils/set_cuda_devices_for_ci.py:21

    elif "CUDA_VISIBLE_DEVICES" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3b64cda81770c24 — Environment-variable access.

repo/utils/set_cuda_devices_for_ci.py:22

        cuda_visible_devices = os.environ.get("CUDA_VISIBLE_DEVICES")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca4ac30072ec279d — Filesystem access.

repo/utils/sort_auto_mappings.py:67

    with open(fname, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #93428a54793cd82c — Filesystem access.

repo/utils/sort_auto_mappings.py:101

        with open(fname, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #029f6804d2051cf6 — Filesystem access.

repo/utils/tests_fetcher.py:208

        with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bad9b313d9d4c931 — Filesystem access.

repo/utils/tests_fetcher.py:211

    with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1e7495bfcccf826b — Filesystem access.

repo/utils/tests_fetcher.py:234

        with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b55051092dc9c481 — Filesystem access.

repo/utils/tests_fetcher.py:237

    with open(folder / filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1edae12cd9bc48d — Filesystem access.

repo/utils/tests_fetcher.py:279

            with open(folder / "tests/utils/tiny_model_summary.json", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #827c7ef6f6358323 — Filesystem access.

repo/utils/tests_fetcher.py:282

        with open(folder / "tests/utils/tiny_model_summary.json", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cfdf79cd14698a59 — Filesystem access.

repo/utils/tests_fetcher.py:458

    with open("utils/not_doctested.txt") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c22609b6d879c013 — Filesystem access.

repo/utils/tests_fetcher.py:482

            with open(folder / "utils/not_doctested.txt", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7392ecf8a85bc342 — Filesystem access.

repo/utils/tests_fetcher.py:484

        with open(folder / "utils/not_doctested.txt", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87648b5602af6214 — Filesystem access.

repo/utils/tests_fetcher.py:530

    with open("utils/slow_documentation_tests.txt") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #48a4e46c4dbd8e14 — Filesystem access.

repo/utils/tests_fetcher.py:582

    with open(PATH_TO_REPO / module_fname, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d95e8a201297427e — Filesystem access.

repo/utils/tests_fetcher.py:824

        with open(test_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ce6509952205441 — Filesystem access.

repo/utils/tests_fetcher.py:1065

        with open(doctest_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #482079938a4eebe3 — Filesystem access.

repo/utils/tests_fetcher.py:1080

    with open(output_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #980c14e2c83977f4 — Filesystem access.

repo/utils/tests_fetcher.py:1092

    with open(output_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fbbb31bf18d2c9c8 — Filesystem access.

repo/utils/tests_fetcher.py:1158

        with open(file_name, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b2322107ef00cce — Filesystem access.

repo/utils/update_metadata.py:285

    with open(hub_frameworks_json) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b78f53c6d07dc070 — Filesystem access.

repo/utils/update_metadata.py:294

    with open(hub_pipeline_tags_json) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a03a4251fe860656 — Filesystem access.

repo/utils/update_metadata.py:301

        with open(os.path.join(tmp_dir, "frameworks.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7c3eebc8ff8ea5c — Filesystem access.

repo/utils/update_metadata.py:303

        with open(os.path.join(tmp_dir, "pipeline_tags.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #156acf6076e16a06 — Environment-variable access.

repo/utils/update_pr_ci_dashboard_recap.py:331

    token = os.environ["GITHUB_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d76a8072dfc29b8 — Environment-variable access.

repo/utils/update_pr_ci_dashboard_recap.py:332

    repo = os.environ["GITHUB_REPOSITORY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6484ca4e925edd44 — Environment-variable access.

repo/utils/update_pr_ci_dashboard_recap.py:333

    event_path = os.environ["GITHUB_EVENT_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2bb57a83e5edb707 — Filesystem access.

repo/utils/update_pr_ci_dashboard_recap.py:335

    with open(event_path, encoding="utf-8") as event_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2ad7d98918f90ed8 — Filesystem access.

repo/utils/update_tiny_models.py:60

    with open("tests/utils/tiny_model_summary.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #421f742bfc0ac55c — Filesystem access.

repo/utils/update_tiny_models.py:143

        with open(os.path.join(output_path, "hub_tiny_model_summary.json"), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a71caf84759aeb12 — Environment-variable access.

repo/utils/update_tiny_models.py:171

        token=os.environ.get("TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Close Open Privacy Scan

verified_user Application data leak confirmed

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Confirmed data exfiltration in application code

</> First-Party Code

first-party (python)