ace-step / ACE-Step-1.5

1. high GuardDog Detects access to sensitive files (credentials, configs, keys) [threat-filesystem-read] /cli.py:15 96%
2. high YARA YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone /start_gradio_ui_macos.sh 1%
3. high YARA YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone /start_api_server_macos.sh 1%
4. high YARA YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone /install_uv.sh 1%
5. high YARA YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone /start_api_server.sh 1%
6. high YARA YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone /start_gradio_ui_manual.sh 1%
7. high YARA YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone /start_gradio_ui_macos_manual.sh 1%
8. high YARA YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone /README.md 1%
9. high YARA YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone /.claude/skills/acestep-docs/getting-started/README.md 1%
10. high YARA YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone /.claude/skills/acestep-docs/guides/ENVIRONMENT_SETUP.md 1%
11. high YARA YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone /start_gradio_ui.sh 1%
12. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /install_uv.sh 0%
13. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /.claude/skills/acestep-docs/guides/UPDATE_AND_BACKUP.md 0%
14. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /.claude/skills/acestep-docs/guides/ENVIRONMENT_SETUP.md 0%
15. medium GuardDog Detects access to sensitive files (credentials, configs, keys) [threat-filesystem-read] /profile_inference.py:124 96%
16. medium GuardDog Detects access to sensitive files (credentials, configs, keys) [threat-filesystem-read] /acestep/acestep_v15_pipeline.py:18 96%
17. medium GuardDog Detects access to sensitive files (credentials, configs, keys) [threat-filesystem-read] /acestep/api_server.py:173 96%
18. medium Dependency checker Unpinned dependency: 'modelscope' has no version lock — supply chain risk requirements.txt:44 54%
19. medium Dependency checker Unpinned dependency: 'setuptools' has no version lock — supply chain risk pyproject.toml 54%
20. medium Dependency checker Unpinned dependency: 'modelscope' has no version lock — supply chain risk pyproject.toml 54%
21. medium Dependency checker Unpinned dependency: 'lycoris-lora' has no version lock — supply chain risk pyproject.toml 54%
22. medium Dependency checker Unpinned dependency: 'diskcache' has no version lock — supply chain risk pyproject.toml 54%
23. medium Dependency checker Unpinned dependency: 'xxhash' has no version lock — supply chain risk requirements.txt:62 54%
24. medium Dependency checker Unpinned dependency: 'diffusers' has no version lock — supply chain risk requirements.txt:23 54%
25. medium Dependency checker Unpinned dependency: 'lycoris-lora' has no version lock — supply chain risk requirements.txt:48 54%
26. medium Dependency checker Unpinned dependency: 'torchao' has no version lock — supply chain risk pyproject.toml 54%
27. medium Dependency checker Unpinned dependency: 'torchvision' has no version lock — supply chain risk pyproject.toml 54%
28. medium Dependency checker Unpinned dependency: 'nano-vllm' has no version lock — supply chain risk pyproject.toml 54%
29. medium Dependency checker Unpinned dependency: 'toml' has no version lock — supply chain risk requirements.txt:43 54%
30. medium Dependency checker Unpinned dependency: 'toml' has no version lock — supply chain risk pyproject.toml 54%
31. medium Dependency checker Unpinned dependency: '--extra-index-url https://download.pytorch.org/whl/cu130' has no version lock — supply chain risk requirements.txt:4 50%
32. medium Dependency checker Unpinned dependency: '--extra-index-url https://download.pytorch.org/whl/cu128' has no version lock — supply chain risk requirements.txt:3 50%
33. medium Bandit Use of unsafe PyTorch load /acestep/training_v2/trainer_helpers.py:339 49%
34. medium Bandit Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected. /acestep/text_tasks/external_lm_model_discovery.py:51 49%
35. medium Bandit Call to requests without timeout /scripts/lora_data_prepare/gemini_caption.py:184 22%
36. medium Bandit Call to requests without timeout /scripts/lora_data_prepare/gemini_caption.py:171 22%
37. medium Bandit Call to requests without timeout /scripts/lora_data_prepare/gemini_caption.py:149 22%
38. medium Bandit Call to requests without timeout /scripts/lora_data_prepare/gemini_caption.py:125 22%
39. medium Bandit Unsafe Hugging Face Hub download without revision pinning in snapshot_download() /acestep/model_downloader.py:182 19%
40. medium Bandit Unsafe Hugging Face Hub download without revision pinning in snapshot_download() /acestep/api/model_download.py:54 19%
41. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/third_parts/nano-vllm/example.py:8 17%
42. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /scripts/profile_vram.py:384 17%
43. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /scripts/profile_vram.py:329 17%
44. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /scripts/profile_vram.py:328 17%
45. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /scripts/profile_vram.py:118 17%
46. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/training_v2/model_loader.py:315 17%
47. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/training_v2/model_loader.py:314 17%
48. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/training_v2/model_loader.py:234 17%
49. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/training_v2/model_loader.py:233 17%
50. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/training_v2/model_loader.py:159 17%
51. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/third_parts/nano-vllm/nanovllm/config.py:24 17%
52. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/core/generation/handler/init_service_loader.py:175 17%
53. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/core/generation/handler/init_service_loader_components.py:94 17%
54. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/core/generation/handler/init_service_loader_components.py:95 17%
55. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/llm_inference.py:404 17%
56. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/llm_inference.py:612 17%
57. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/llm_inference.py:4193 17%
58. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/llm_inference.py:4231 17%
59. medium Bandit Unsafe Hugging Face Hub download without revision pinning in from_pretrained() /acestep/third_parts/nano-vllm/nanovllm/engine/llm_engine.py:45 17%
60. low Bandit Possible hardcoded password: 'ollama' /acestep/text_tasks/external_lm_model_discovery.py:96 95%
61. low Bandit Possible hardcoded password: 'acestep.external_lm' /acestep/text_tasks/passphrase_store.py:13 95%
62. low Bandit Possible hardcoded password: 'ACESTEP_OLLAMA_SECRET_PATH' /acestep/text_tasks/external_lm_providers.py:78 95%
63. low Bandit Possible hardcoded password: 'ACESTEP_ANTHROPIC_SECRET_PATH' /acestep/text_tasks/external_lm_providers.py:64 95%
64. low Bandit Possible hardcoded password: 'ACESTEP_OPENAI_SECRET_PATH' /acestep/text_tasks/external_lm_providers.py:50 95%
65. low Bandit Possible hardcoded password: 'ACESTEP_GLM_SECRET_PATH' /acestep/text_tasks/external_lm_providers.py:35 95%
66. low Bandit Possible hardcoded password: 'external_lm_store_passphrase' /acestep/text_tasks/passphrase_store.py:14 95%
67. low Bandit Possible hardcoded password: 'lyric_token_ids' /acestep/ui/gradio/events/results/session_artifacts.py:22 95%
68. low Bandit Possible hardcoded password: 'anthropic_messages' /acestep/text_tasks/external_lm_model_discovery.py:92 95%
69. low GuardDog Detects reading of environment variables (credential access, often contains secrets) [threat-runtime-environment-read] /acestep/api_server.py:193 93%
70. low GuardDog Detects reading of environment variables (credential access, often contains secrets) [threat-runtime-environment-read] /acestep/handler.py:9 93%
71. low GuardDog Detects reading of environment variables (credential access, often contains secrets) [threat-runtime-environment-read] /acestep/api/server_cli.py:38 93%
72. low Bandit Possible hardcoded password: 'secret-tool' /acestep/text_tasks/passphrase_store.py:18 91%
73. low GuardDog Detects fully silent process execution (suppressing all output channels) [threat-process-spawn-silent] /acestep/api/runtime_helpers.py:71 83%
74. low GuardDog Detects fully silent process execution (suppressing all output channels) [threat-process-spawn-silent] /acestep/api/runtime_helpers.py:72 83%
75. low Bandit Possible hardcoded password: '' /acestep/core/scoring/dit_alignment.py:230 45%
76. low Bandit Possible hardcoded password: '' /acestep/core/scoring/dit_alignment.py:233 45%
77. low Bandit Possible hardcoded password: '' /acestep/text_tasks/passphrase_store.py:53 45%
78. low Bandit Possible hardcoded password: '' /acestep/text_tasks/secure_secret_store.py:68 45%
79. low Bandit Possible hardcoded password: '' /acestep/text_tasks/secure_secret_store.py:73 45%
80. low Bandit Possible hardcoded password: '' /acestep/text_tasks/secure_secret_store.py:101 45%
81. low Bandit Try, Except, Continue detected. /acestep/ui/gradio/events/training/lokr_training.py:239 28%
82. low Bandit Try, Except, Continue detected. /acestep/ui/gradio/events/training/lokr_training.py:291 28%
83. low Bandit Try, Except, Continue detected. /acestep/constrained_logits_processor.py:1125 28%
84. low Bandit Try, Except, Continue detected. /acestep/constrained_logits_processor.py:573 28%
85. low Bandit Consider possible security implications associated with the subprocess module. /acestep/gpu_config.py:611 14%
86. low Bandit Consider possible security implications associated with the subprocess module. /acestep/text_tasks/passphrase_store.py:7 14%
87. low Bandit Consider possible security implications associated with the subprocess module. /acestep/text_tasks/secure_secret_store.py:9 13%
88. low Bandit Consider possible security implications associated with the subprocess module. /acestep/api/runtime_helpers.py:7 13%
89. low Bandit Consider possible security implications associated with the subprocess module. /acestep/audio_utils.py:14 13%
90. low Bandit Consider possible security implications associated with the subprocess module. /scripts/check_gpu.py:17 13%
91. low Bandit Starting a process with a partial executable path /acestep/gpu_config.py:613 12%
92. low Bandit Starting a process with a partial executable path /scripts/check_gpu.py:137 12%
93. low Bandit Starting a process with a partial executable path /scripts/check_gpu.py:174 12%
94. low Dependency checker Loose version constraint: 'python-multipart>=0.0.18' — attacker could push malicious update pyproject.toml 4%
95. low Dependency checker Loose version constraint: 'python-multipart>=0.0.18' — attacker could push malicious update requirements.txt:33 4%
96. low Bandit subprocess call - check for execution of untrusted input. /scripts/check_gpu.py:174 3%
97. low Bandit subprocess call - check for execution of untrusted input. /acestep/api/runtime_helpers.py:62 3%
98. low Bandit subprocess call - check for execution of untrusted input. /acestep/audio_utils.py:182 3%
99. low Bandit subprocess call - check for execution of untrusted input. /acestep/gpu_config.py:613 3%
100. low Bandit subprocess call - check for execution of untrusted input. /acestep/text_tasks/passphrase_store.py:83 3%
101. low Bandit subprocess call - check for execution of untrusted input. /acestep/text_tasks/passphrase_store.py:117 3%
102. low Bandit subprocess call - check for execution of untrusted input. /acestep/text_tasks/secure_secret_store.py:142 3%
103. low Bandit subprocess call - check for execution of untrusted input. /scripts/check_gpu.py:137 3%
104. low Dependency checker Loose version constraint: 'torch>=2.9.1' — attacker could push malicious update pyproject.toml 2%
105. low Dependency checker Loose version constraint: 'mlx>=0.25.2' — attacker could push malicious update pyproject.toml 2%
106. low Dependency checker Loose version constraint: 'mlx-lm>=0.20.0' — attacker could push malicious update pyproject.toml 2%
107. low Dependency checker Loose version constraint: 'torchao>=0.16.0,<0.17.0' — attacker could push malicious update pyproject.toml 2%
108. low Dependency checker Loose version constraint: 'torchao>=0.16.0,<0.17.0; platform_machine != 'aarch64'' — attacker could push malicious update requirements.txt:41 2%
109. low Dependency checker Loose version constraint: 'torchaudio>=2.9.1' — attacker could push malicious update pyproject.toml 2%
110. low Dependency checker Loose version constraint: 'vector-quantize-pytorch>=1.27.15' — attacker could push malicious update pyproject.toml 2%
111. low Dependency checker Loose version constraint: 'scipy>=1.10.1' — attacker could push malicious update pyproject.toml 2%
112. low Dependency checker Loose version constraint: 'soundfile>=0.13.1' — attacker could push malicious update pyproject.toml 2%
113. low Dependency checker Loose version constraint: 'loguru>=0.7.3' — attacker could push malicious update pyproject.toml 2%
114. low Dependency checker Loose version constraint: 'einops>=0.8.1' — attacker could push malicious update pyproject.toml 2%
115. low Dependency checker Loose version constraint: 'accelerate>=1.12.0' — attacker could push malicious update pyproject.toml 2%
116. low Dependency checker Loose version constraint: 'fastapi>=0.110.0' — attacker could push malicious update pyproject.toml 2%
117. low Dependency checker Loose version constraint: 'uvicorn>=0.27.0' — attacker could push malicious update pyproject.toml 2%
118. low Dependency checker Loose version constraint: 'numba>=0.63.1' — attacker could push malicious update pyproject.toml 2%
119. low Dependency checker Loose version constraint: 'transformers>=4.51.0,<4.58.0' — attacker could push malicious update pyproject.toml 2%
120. low Dependency checker Loose version constraint: 'torchcodec>=0.9.1' — attacker could push malicious update pyproject.toml 2%
121. low Dependency checker Loose version constraint: 'peft>=0.18.0' — attacker could push malicious update pyproject.toml 2%
122. low Dependency checker Loose version constraint: 'lightning>=2.0.0' — attacker could push malicious update pyproject.toml 2%
123. low Dependency checker Loose version constraint: 'tensorboard>=2.0.0' — attacker could push malicious update pyproject.toml 2%
124. low Dependency checker Loose version constraint: 'tensorboard>=2.20.0' — attacker could push malicious update pyproject.toml 2%
125. low Dependency checker Loose version constraint: 'typer-slim>=0.21.1' — attacker could push malicious update pyproject.toml 2%
126. low Dependency checker Loose version constraint: 'pytorch-wavelets>=1.3.0' — attacker could push malicious update pyproject.toml 2%
127. low Dependency checker Loose version constraint: 'pywavelets>=1.9.0' — attacker could push malicious update pyproject.toml 2%
128. low Dependency checker Loose version constraint: 'transformers>=4.51.0,<4.58.0' — attacker could push malicious update requirements.txt:22 2%
129. low Dependency checker Loose version constraint: 'diffusers>=0.37.0' — attacker could push malicious update pyproject.toml 2%
130. low Dependency checker Loose version constraint: 'vitepress^1.6.3' — attacker could push malicious update package.json 2%
131. low Dependency checker Loose version constraint: 'tensorboard>=2.0.0' — attacker could push malicious update requirements.txt:50 2%
132. low Dependency checker Loose version constraint: 'lightning>=2.0.0' — attacker could push malicious update requirements.txt:49 2%
133. low Dependency checker Loose version constraint: 'peft>=0.18.0' — attacker could push malicious update requirements.txt:47 2%
134. low Dependency checker Loose version constraint: 'torchcodec>=0.9.1; platform_machine != 'aarch64'' — attacker could push malicious update requirements.txt:36 2%
135. low Dependency checker Loose version constraint: 'vector-quantize-pytorch>=1.27.15' — attacker could push malicious update requirements.txt:35 2%
136. low Dependency checker Loose version constraint: 'numba>=0.63.1' — attacker could push malicious update requirements.txt:34 2%
137. low Dependency checker Loose version constraint: 'fastapi>=0.110.0' — attacker could push malicious update requirements.txt:31 2%
138. low Dependency checker Loose version constraint: 'accelerate>=1.12.0' — attacker could push malicious update requirements.txt:30 2%
139. low Dependency checker Loose version constraint: 'einops>=0.8.1' — attacker could push malicious update requirements.txt:29 2%
140. low Dependency checker Loose version constraint: 'loguru>=0.7.3' — attacker could push malicious update requirements.txt:28 2%
141. low Dependency checker Loose version constraint: 'soundfile>=0.13.1' — attacker could push malicious update requirements.txt:27 2%
142. low Dependency checker Loose version constraint: 'scipy>=1.10.1' — attacker could push malicious update requirements.txt:26 2%
143. low Dependency checker Loose version constraint: 'matplotlib>=3.7.5' — attacker could push malicious update requirements.txt:25 2%
144. low Dependency checker Loose version constraint: 'matplotlib>=3.7.5' — attacker could push malicious update pyproject.toml 2%
145. low Dependency checker Loose version constraint: 'uvicorn[standard]>=0.27.0' — attacker could push malicious update requirements.txt:32 1%
146. low YARA YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version /install_uv.sh 0%
147. low YARA YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version /Dockerfile.jetson 0%
148. low YARA YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version /scripts/lora_data_prepare/gemini_caption.py 0%
149. low YARA YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version /Dockerfile 0%
150. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/xl_turbo/modeling_acestep_v15_xl_turbo.py:621 0%
151. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/engine/sequence.py:79 0%
152. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/engine/model_runner.py:262 0%
153. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/engine/model_runner.py:254 0%
154. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/engine/block_manager.py:146 0%
155. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/engine/block_manager.py:139 0%
156. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/engine/block_manager.py:134 0%
157. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/engine/block_manager.py:81 0%
158. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/engine/block_manager.py:71 0%
159. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/engine/block_manager.py:64 0%
160. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/config.py:26 0%
161. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/config.py:23 0%
162. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/config.py:22 0%
163. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/config.py:21 0%
164. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/xl_turbo/modeling_acestep_v15_xl_turbo.py:623 0%
165. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/xl_turbo/modeling_acestep_v15_xl_turbo.py:622 0%
166. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/layers/attention.py:111 0%
167. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/xl_sft/modeling_acestep_v15_xl_base.py:626 0%
168. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/xl_sft/modeling_acestep_v15_xl_base.py:625 0%
169. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/xl_sft/modeling_acestep_v15_xl_base.py:624 0%
170. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/xl_base/modeling_acestep_v15_xl_base.py:626 0%
171. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/xl_base/modeling_acestep_v15_xl_base.py:625 0%
172. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/xl_base/modeling_acestep_v15_xl_base.py:624 0%
173. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/turbo/modeling_acestep_v15_turbo.py:623 0%
174. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/turbo/modeling_acestep_v15_turbo.py:622 0%
175. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/turbo/modeling_acestep_v15_turbo.py:621 0%
176. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/sft/modeling_acestep_v15_base.py:626 0%
177. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/sft/modeling_acestep_v15_base.py:625 0%
178. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/sft/modeling_acestep_v15_base.py:624 0%
179. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/base/modeling_acestep_v15_base.py:626 0%
180. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/base/modeling_acestep_v15_base.py:625 0%
181. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/models/base/modeling_acestep_v15_base.py:624 0%
182. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/sampling_params.py:27 0%
183. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /scripts/flow_edit_overlay_smoke.py:59 0%
184. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /scripts/flow_edit_overlay_smoke.py:44 0%
185. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/training_v2/ui/summary.py:97 0%
186. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/training_v2/ui/progress.py:336 0%
187. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/training_v2/ui/errors.py:180 0%
188. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/training_v2/ui/config_panel.py:203 0%
189. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/training_v2/trainer_helpers.py:312 0%
190. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/training_v2/trainer_helpers.py:153 0%
191. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/training_v2/trainer_fixed.py:226 0%
192. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/training_v2/trainer_basic_loop.py:102 0%
193. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/training_v2/preprocess_vae.py:125 0%
194. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/training_v2/preprocess_vae.py:118 0%
195. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/training/dataset_builder_modules/preprocess_vae.py:146 0%
196. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/training/dataset_builder_modules/preprocess_vae.py:137 0%
197. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/sampling_params.py:28 0%
198. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /scripts/flow_edit_overlay_smoke.py:69 0%
199. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/sampling_params.py:25 0%
200. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/sampling_params.py:23 0%
201. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/sampling_params.py:22 0%
202. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/models/qwen3.py:110 0%
203. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/models/qwen3.py:35 0%
204. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/models/qwen3.py:32 0%
205. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/layers/rotary_embedding.py:61 0%
206. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/layers/rotary_embedding.py:30 0%
207. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/layers/linear.py:118 0%
208. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/layers/linear.py:10 0%
209. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/layers/embed_head.py:54 0%
210. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/layers/embed_head.py:20 0%
211. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/layers/attention.py:114 0%
212. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/layers/attention.py:113 0%
213. low Bandit Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. /acestep/third_parts/nano-vllm/nanovllm/layers/attention.py:112 0%

No findings match these filters. Clear filters