embedchain
v0.1.128Simplest open source retrieval (RAG) framework
162
Total
14
Critical
72
High
76
Medium
Findings
unknownEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
41: raise AttributeError(
42: "Elasticsearch needs a URL or CLOUD_ID attribute, "
>>> 43: "this can either be passed to `ElasticsearchDBConfig` or as `ELASTICSEARCH_URL` or `ELASTICSEARCH_CLOUD_ID` in `.env`" # noqa: E501
44: )
45: self.ES_EXTRA_PARAMS = ES_EXTRA_PARAMSReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
26: name="embedchain-app",
27: image=image,
>>> 28: secrets=[Secret.from_dotenv(".env")],
29: )
30: Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
>>> 1: .envReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
5: from embedchain import App
6:
>>> 7: load_dotenv(".env")
8:
9: image = Image.debian_slim().pip_install(Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
>>> 1: .envReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
220: return
221:
>>> 222: env_vars = read_env_file(".env")
223: secrets_command = ["flyctl", "secrets", "set", "-a", app_name] + [f"{k}={v}" for k, v in env_vars.items()]
224: Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
76: console.print(f"🚀 [bold cyan]Running: {' '.join(render_setup_cmd)}[/bold cyan]")
77: subprocess.run(render_setup_cmd, check=True)
>>> 78: shutil.move(".env.example", ".env")
79: console.print(
80: """Great! Now you can install the dependencies by doing: \nReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
188:
189: Args:
>>> 190: env_file_path (str): The path to the .env file.
191:
192: Returns:Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
54: console.print(f"🚀 [bold cyan]Running: {' '.join(modal_setup_cmd)}[/bold cyan]")
55: subprocess.run(modal_setup_cmd, check=True)
>>> 56: shutil.move(".env.example", ".env")
57: console.print(
58: """Great! Now you can install the dependencies by doing: \nReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
32: try:
33: console.print(f"🚀 [bold cyan]Running: {' '.join(fly_launch_command)}[/bold cyan]")
>>> 34: shutil.move(".env.example", ".env")
35: subprocess.run(fly_launch_command, check=True)
36: console.print("✅ [bold green]'fly launch' executed successfully.[/bold green]")Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
5: from embedchain import App
6:
>>> 7: load_dotenv(".env")
8:
9: app = FastAPI(title="Embedchain FastAPI App")Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
40: raise AttributeError(
41: "Zilliz needs a token attribute, "
>>> 42: "this can either be passed to `ZILLIZ_CLOUD_TOKEN` or as `ZILLIZ_CLOUD_TOKEN` in `.env`,"
43: "if having a username and password, pass it in the form 'username:password' to `ZILLIZ_CLOUD_TOKEN`"
44: )Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
33: raise AttributeError(
34: "Zilliz needs a URI attribute, "
>>> 35: "this can either be passed to `ZILLIZ_CLOUD_URI` or as `ZILLIZ_CLOUD_URI` in `.env`"
36: )
37: Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
44: )
45: self.ES_EXTRA_PARAMS = ES_EXTRA_PARAMS
>>> 46: # Load API key from .env if it's not explicitly passed.
47: # Can only set one of 'api_key', 'basic_auth', and 'bearer_auth'
48: if (Report false positiveDynamic code evaluation via eval()
Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.
2: Name: embedchain
3: Version: 0.1.128
>>> 4: Summary: Simplest open source retrieval (RAG) framework
5: License: Apache License
6: Author: Taranjeet SinghReport false positiveDecoded base64 content: ���ʘ����m�\���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: ����+mz�ߢYh���m�\���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: r��v��{�{8�K>��\Ki�ns���A
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �֫���{k�ۜ�*'
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: j/ܢ{k������v�,
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: ���ʘ����m�\���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: ����+mz�ߢYh���m�\���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: r��v��{�{8�K>��\Ki�ns���A
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �֫���{k�ۜ�*'
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: j/ܢ{k������v�,
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDynamic code evaluation via eval()
Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.
286: else:
287: if data_type == "qna_pair":
>>> 288: data_value = list(ast.literal_eval(data_value))
289: metadata = {}
290: Report false positiveDynamic code evaluation via eval()
Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.
417: )
418:
>>> 419: def _eval(self, dataset: list[EvalData], metric: Union[BaseMetric, str]):
420: """
421: Evaluate the app on a dataset for a given metric.Report false positiveDecoded base64 content: ��ƭr/j[��*'
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: I�r�֧q�/j[��*'
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: ��ƭr/j[��*'
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: I�r�֧q�/j[��*'
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
109:
110: if docker:
>>> 111: subprocess.run(["docker-compose", "build"], check=True)
112: else:
113: ctx.invoke(install_reqs)Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
120: time.sleep(2)
121: os.chdir("api")
>>> 122: subprocess.run(["pip", "install", "-r", "requirements.txt"], check=True)
123: os.chdir("..")
124: console.print("\n ✅ [bold green]Installed API requirements successfully.[/bold green]\n")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
130: try:
131: os.chdir("ui")
>>> 132: subprocess.run(["yarn"], check=True)
133: console.print("\n✅ [bold green]Successfully installed frontend requirements.[/bold green]")
134: anonymous_telemetry.capture(event_name="ec_install_reqs", properties={"success": True})Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
142: def start(docker):
143: if docker:
>>> 144: subprocess.run(["docker-compose", "up"], check=True)
145: return
146: Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
152: try:
153: os.chdir("api")
>>> 154: api_process = subprocess.Popen(["python", "-m", "main"], stdout=None, stderr=None)
155: os.chdir("..")
156: console.print("✅ [bold green]API server started successfully.[/bold green]")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
166: try:
167: os.chdir("ui")
>>> 168: subprocess.run(["yarn"], check=True)
169: ui_process = subprocess.Popen(["yarn", "dev"])
170: console.print("✅ [bold green]UI server started successfully.[/bold green]")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
167: os.chdir("ui")
168: subprocess.run(["yarn"], check=True)
>>> 169: ui_process = subprocess.Popen(["yarn", "dev"])
170: console.print("✅ [bold green]UI server started successfully.[/bold green]")
171: anonymous_telemetry.capture(event_name="ec_start", properties={"success": True})Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
227: try:
228: console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
>>> 229: subprocess.run(uvicorn_command, check=True)
230: except subprocess.CalledProcessError as e:
231: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
228: console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
229: subprocess.run(uvicorn_command, check=True)
>>> 230: except subprocess.CalledProcessError as e:
231: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
232: except KeyboardInterrupt:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
238: try:
239: console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(modal_run_cmd)}[/bold cyan]")
>>> 240: subprocess.run(modal_run_cmd, check=True)
241: except subprocess.CalledProcessError as e:
242: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
239: console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(modal_run_cmd)}[/bold cyan]")
240: subprocess.run(modal_run_cmd, check=True)
>>> 241: except subprocess.CalledProcessError as e:
242: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
243: except KeyboardInterrupt:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
249: try:
250: console.print(f"🚀 [bold cyan]Running Streamlit app with command: {' '.join(streamlit_run_cmd)}[/bold cyan]")
>>> 251: subprocess.run(streamlit_run_cmd, check=True)
252: except subprocess.CalledProcessError as e:
253: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
250: console.print(f"🚀 [bold cyan]Running Streamlit app with command: {' '.join(streamlit_run_cmd)}[/bold cyan]")
251: subprocess.run(streamlit_run_cmd, check=True)
>>> 252: except subprocess.CalledProcessError as e:
253: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
254: except KeyboardInterrupt:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
266: try:
267: console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
>>> 268: subprocess.run(uvicorn_command, check=True)
269: except subprocess.CalledProcessError as e:
270: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
267: console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
268: subprocess.run(uvicorn_command, check=True)
>>> 269: except subprocess.CalledProcessError as e:
270: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
271: except KeyboardInterrupt:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
277: try:
278: console.print(f"🚀 [bold cyan]Running Gradio app with command: {' '.join(gradio_run_cmd)}[/bold cyan]")
>>> 279: subprocess.run(gradio_run_cmd, check=True)
280: except subprocess.CalledProcessError as e:
281: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
278: console.print(f"🚀 [bold cyan]Running Gradio app with command: {' '.join(gradio_run_cmd)}[/bold cyan]")
279: subprocess.run(gradio_run_cmd, check=True)
>>> 280: except subprocess.CalledProcessError as e:
281: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
282: except KeyboardInterrupt:Report false positiveDecoded base64 content: ��b��i�(�{l��b
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: u���G�������}w��y�5�V�q�t��ѽ=�v��5q�4ӭv�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: =��z�^��-y��K�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: =��z�^��-y��K�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: =��z�^��-y��K�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: =��z�^��-y��K�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: =��z�^��-y��K�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: =��z�^��-y��K�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
33: console.print(f"🚀 [bold cyan]Running: {' '.join(fly_launch_command)}[/bold cyan]")
34: shutil.move(".env.example", ".env")
>>> 35: subprocess.run(fly_launch_command, check=True)
36: console.print("✅ [bold green]'fly launch' executed successfully.[/bold green]")
37: except subprocess.CalledProcessError as e:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
35: subprocess.run(fly_launch_command, check=True)
36: console.print("✅ [bold green]'fly launch' executed successfully.[/bold green]")
>>> 37: except subprocess.CalledProcessError as e:
38: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
39: except FileNotFoundError:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
53: modal_setup_cmd = ["modal", "setup"] + list(extra_args)
54: console.print(f"🚀 [bold cyan]Running: {' '.join(modal_setup_cmd)}[/bold cyan]")
>>> 55: subprocess.run(modal_setup_cmd, check=True)
56: shutil.move(".env.example", ".env")
57: console.print(Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
75: render_setup_cmd = ["render", "config", "init"]
76: console.print(f"🚀 [bold cyan]Running: {' '.join(render_setup_cmd)}[/bold cyan]")
>>> 77: subprocess.run(render_setup_cmd, check=True)
78: shutil.move(".env.example", ".env")
79: console.print(Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
98:
99: def setup_hf_app():
>>> 100: subprocess.run(["pip", "install", "huggingface_hub[cli]"], check=True)
101: hf_setup_file = os.path.join(os.path.expanduser("~"), ".cache/huggingface/token")
102: if os.path.exists(hf_setup_file):Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
112: """
113: )
>>> 114: subprocess.run(["huggingface-cli", "login"], check=True)
115: console.print("Great! Now you can install the dependencies by doing `pip install -r requirements.txt`")
116: Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
126: try:
127: console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
>>> 128: subprocess.run(uvicorn_command, check=True)
129: except subprocess.CalledProcessError as e:
130: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
127: console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
128: subprocess.run(uvicorn_command, check=True)
>>> 129: except subprocess.CalledProcessError as e:
130: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
131: except KeyboardInterrupt:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
137: try:
138: console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(modal_run_cmd)}[/bold cyan]")
>>> 139: subprocess.run(modal_run_cmd, check=True)
140: except subprocess.CalledProcessError as e:
141: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
138: console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(modal_run_cmd)}[/bold cyan]")
139: subprocess.run(modal_run_cmd, check=True)
>>> 140: except subprocess.CalledProcessError as e:
141: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
142: except KeyboardInterrupt:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
148: try:
149: console.print(f"🚀 [bold cyan]Running Streamlit app with command: {' '.join(streamlit_run_cmd)}[/bold cyan]")
>>> 150: subprocess.run(streamlit_run_cmd, check=True)
151: except subprocess.CalledProcessError as e:
152: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
149: console.print(f"🚀 [bold cyan]Running Streamlit app with command: {' '.join(streamlit_run_cmd)}[/bold cyan]")
150: subprocess.run(streamlit_run_cmd, check=True)
>>> 151: except subprocess.CalledProcessError as e:
152: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
153: except KeyboardInterrupt:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
165: try:
166: console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
>>> 167: subprocess.run(uvicorn_command, check=True)
168: except subprocess.CalledProcessError as e:
169: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
166: console.print(f"🚀 [bold cyan]Running FastAPI app with command: {' '.join(uvicorn_command)}[/bold cyan]")
167: subprocess.run(uvicorn_command, check=True)
>>> 168: except subprocess.CalledProcessError as e:
169: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
170: except KeyboardInterrupt:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
176: try:
177: console.print(f"🚀 [bold cyan]Running Gradio app with command: {' '.join(gradio_run_cmd)}[/bold cyan]")
>>> 178: subprocess.run(gradio_run_cmd, check=True)
179: except subprocess.CalledProcessError as e:
180: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
177: console.print(f"🚀 [bold cyan]Running Gradio app with command: {' '.join(gradio_run_cmd)}[/bold cyan]")
178: subprocess.run(gradio_run_cmd, check=True)
>>> 179: except subprocess.CalledProcessError as e:
180: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
181: except KeyboardInterrupt:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
227: # Set secrets
228: console.print(f"🔐 [bold cyan]Setting secrets for {app_name}[/bold cyan]")
>>> 229: subprocess.run(secrets_command, check=True)
230:
231: # Deploy applicationReport false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
231: # Deploy application
232: console.print(f"🚀 [bold cyan]Running: {' '.join(deploy_command)}[/bold cyan]")
>>> 233: subprocess.run(deploy_command, check=True)
234: console.print("✅ [bold green]'fly deploy' executed successfully.[/bold green]")
235: Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
234: console.print("✅ [bold green]'fly deploy' executed successfully.[/bold green]")
235:
>>> 236: except subprocess.CalledProcessError as e:
237: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
238: except FileNotFoundError:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
246: try:
247: console.print(f"🚀 [bold cyan]Running: {' '.join(modal_deploy_cmd)}[/bold cyan]")
>>> 248: subprocess.run(modal_deploy_cmd, check=True)
249: console.print("✅ [bold green]'modal deploy' executed successfully.[/bold green]")
250: except subprocess.CalledProcessError as e:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
248: subprocess.run(modal_deploy_cmd, check=True)
249: console.print("✅ [bold green]'modal deploy' executed successfully.[/bold green]")
>>> 250: except subprocess.CalledProcessError as e:
251: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
252: except FileNotFoundError:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
267: \n\n"""
268: )
>>> 269: subprocess.run(streamlit_deploy_cmd, check=True)
270: except subprocess.CalledProcessError as e:
271: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
268: )
269: subprocess.run(streamlit_deploy_cmd, check=True)
>>> 270: except subprocess.CalledProcessError as e:
271: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
272: except FileNotFoundError:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
282: try:
283: console.print(f"🚀 [bold cyan]Running: {' '.join(render_deploy_cmd)}[/bold cyan]")
>>> 284: subprocess.run(render_deploy_cmd, check=True)
285: console.print("✅ [bold green]'render blueprint launch' executed successfully.[/bold green]")
286: except subprocess.CalledProcessError as e:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
284: subprocess.run(render_deploy_cmd, check=True)
285: console.print("✅ [bold green]'render blueprint launch' executed successfully.[/bold green]")
>>> 286: except subprocess.CalledProcessError as e:
287: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
288: except FileNotFoundError:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
297: try:
298: console.print(f"🚀 [bold cyan]Running: {' '.join(gradio_deploy_cmd)}[/bold cyan]")
>>> 299: subprocess.run(gradio_deploy_cmd, check=True)
300: console.print("✅ [bold green]'gradio deploy' executed successfully.[/bold green]")
301: except subprocess.CalledProcessError as e:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
299: subprocess.run(gradio_deploy_cmd, check=True)
300: console.print("✅ [bold green]'gradio deploy' executed successfully.[/bold green]")
>>> 301: except subprocess.CalledProcessError as e:
302: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")
303: except FileNotFoundError:Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
315: try:
316: console.print(f"🚀 [bold cyan]Running: {' '.join(hf_spaces_deploy_cmd)}[/bold cyan]")
>>> 317: subprocess.run(hf_spaces_deploy_cmd, check=True)
318: console.print("✅ [bold green]'huggingface-cli upload' executed successfully.[/bold green]")
319: except subprocess.CalledProcessError as e:Report false positiveDynamic code evaluation via eval()
Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.
2: name = "embedchain"
3: version = "0.1.128"
>>> 4: description = "Simplest open source retrieval (RAG) framework"
5: authors = [
6: "Taranjeet Singh <taranjeet@embedchain.ai>",Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
317: subprocess.run(hf_spaces_deploy_cmd, check=True)
318: console.print("✅ [bold green]'huggingface-cli upload' executed successfully.[/bold green]")
>>> 319: except subprocess.CalledProcessError as e:
320: console.print(f"❌ [bold red]An error occurred: {e}[/bold red]")Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
247: if url.path.endswith(".yaml"):
248: try:
>>> 249: response = requests.get(source)
250: response.raise_for_status()
251: try:Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
89: def check(self, api_key):
90: validation_url = f"{self.host}/api/v1/accounts/api_keys/validate/"
>>> 91: response = requests.post(validation_url, headers={"Authorization": f"Token {api_key}"})
92: if response.status_code == 200:
93: return TrueReport false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveJavaScript fetch() call
Detected by automated pattern matching (rule NS-003) with medium confidence. May be a false positive.
105: if ids is not None:
106: for i in range(0, len(ids), self.batch_size):
>>> 107: result = self.pinecone_index.fetch(ids=ids[i : i + self.batch_size])
108: vectors = result.get("vectors")
109: batch_existing_ids = list(vectors.keys())Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePossible Base64-encoded payload (long encoded string)
Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.
30: if not config.model:
31: config.model = (
>>> 32: "a16z-infra/llama13b-v2-chat:df7690f1994d94e96ad9d568eac121aecf50684a0b0963b25a41cc40061269e5"
33: )
34: Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
40: ),
41: }
>>> 42: response = requests.get(url, headers=headers)
43: try:
44: response.raise_for_status()Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
84: def load_link(link: str):
85: try:
>>> 86: beehiiv_data = requests.get(link, headers=headers)
87: beehiiv_data.raise_for_status()
88: Report false positiveHigh-entropy string (4.9 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
23:
24: if url.scheme in ["http", "https"]:
>>> 25: response = requests.get(content)
26: response.raise_for_status()
27: return StringIO(response.text)Report false positivePossible Base64-encoded payload (long encoded string)
Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.
122: ## ✨ Live demo
123:
>>> 124: Checkout the [Chat with PDF](https://embedchain.ai/demo/chat-pdf) live demo we created using Embedchain. You can find the source code [here](https://github.com/mem0ai/mem0/tree/main/embedchain/examples/chat-pdf).
125:
126: ## 🔍 UsageReport false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (5.2 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (5.0 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.9 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
34: def _load_post(self, post_id):
35: post_url = f"{self.domain}posts/{post_id}.json"
>>> 36: response = requests.get(post_url)
37: try:
38: response.raise_for_status()Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
61: logger.info(f"Searching data on discourse url: {self.domain}, for query: {query}")
62: search_url = f"{self.domain}search.json?q={query}"
>>> 63: response = requests.get(search_url)
64: try:
65: response.raise_for_status()Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
32: current_path = parsed_url.path
33:
>>> 34: response = requests.get(url)
35: if response.status_code != 200:
36: logger.info(f"Failed to fetch the website: {response.status_code}")Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
56: @staticmethod
57: def _load_data_from_url(url: str) -> list:
>>> 58: response = requests.get(url)
59: if response.status_code != 200:
60: logger.info(f"Failed to fetch the website: {response.status_code}")Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePossible Base64-encoded payload (long encoded string)
Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.
45: ## ✨ Live demo
46:
>>> 47: Checkout the [Chat with PDF](https://embedchain.ai/demo/chat-pdf) live demo we created using Embedchain. You can find the source code [here](https://github.com/mem0ai/mem0/tree/main/embedchain/examples/chat-pdf).
48:
49: ## 🔍 UsageReport false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (5.2 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (5.0 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.9 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
69: json_data = json.load(json_file)
70: elif re.match(VALID_URL_PATTERN, content):
>>> 71: response = requests.get(content)
72: if response.status_code == 200:
73: json_data = response.json()Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
53: while not done:
54: block_url = self.BLOCK_CHILD_URL_TMPL.format(block_id=cur_block_id)
>>> 55: res = requests.get(block_url, headers=self.headers)
56: data = res.json()
57: Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
17:
18: if url.scheme in ["http", "https"]:
>>> 19: response = requests.get(content)
20: response.raise_for_status()
21: return StringIO(response.text)Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
40: if urlparse(sitemap_source).scheme in ("http", "https"):
41: try:
>>> 42: response = requests.get(sitemap_source, headers=headers)
43: response.raise_for_status()
44: soup = BeautifulSoup(response.text, "xml")Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
189: print("🛠️ Fetching pipeline details from the platform...")
190: url = f"{self.client.host}/api/v1/pipelines/{id}/cli/"
>>> 191: r = requests.get(
192: url,
193: headers={"Authorization": f"Token {self.client.api_key}"},Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
213: }
214: url = f"{self.client.host}/api/v1/pipelines/cli/create/"
>>> 215: r = requests.post(
216: url,
217: json=payload,Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
233: def _get_presigned_url(self, data_type, data_value):
234: payload = {"data_type": data_type, "data_value": data_value}
>>> 235: r = requests.post(
236: f"{self.client.host}/api/v1/pipelines/{self.id}/cli/presigned_url/",
237: json=payload,Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
244: try:
245: with open(file_path, "rb") as file:
>>> 246: response = requests.put(presigned_url, data=file)
247: response.raise_for_status()
248: return response.status_code == 200Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
269: url = f"{self.client.host}{endpoint}"
270: headers = {"Authorization": f"Token {self.client.api_key}"}
>>> 271: response = requests.post(url, json=payload, headers=headers)
272: response.raise_for_status()
273: return responseReport false positiveHigh-entropy string (5.2 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
32:
33: output = []
>>> 34: response = requests.get(url)
35:
36: try:Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
84: def load_link(link: str):
85: try:
>>> 86: substack_data = requests.get(link)
87: substack_data.raise_for_status()
88: Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePython requests library HTTP call
Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.
74: console.print(f"Creating a new embedchain app in [green]{Path().resolve()}[/green]\n")
75: try:
>>> 76: response = requests.get(zip_url)
77: response.raise_for_status()
78: with tempfile.NamedTemporaryFile(delete=False) as tmp_file:Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveScan History
| Date | Risk | Findings | Files | Duration |
|---|---|---|---|---|
| Feb 25, 2026 | critical | 162 | 211 | 0.00s |
| Feb 23, 2026 | critical | 162 | 211 | 0.00s |
| Feb 22, 2026 | critical | 162 | 211 | 0.00s |