NVIDIA / holodeck / 21827525554

46%

main: 48%

push

github

fix: add SSH TOFU host key verification

- Replace ssh.InsecureIgnoreHostKey() with Trust-On-First-Use (TOFU)
  pattern that records host keys on first connection and verifies on
  subsequent ones, eliminating MITM vulnerability
- Host keys cached in ~/.cache/holodeck/known_hosts with 0600 permissions

Re-implemented against current upstream/main.

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
Co-authored-by: Cursor <cursoragent@cursor.com>

0 of 31 new or added lines in 1 file covered. (0.0%)

2319 of 5015 relevant lines covered (46.24%)

0.51 hits per line