nvidia-holoscan / holoscan-cli / 28777668938

79%

main: 80%

Build Type

Pull #193

github

Committed by wyli

Commit Message

fix: tighten elevation env handling and CI job privileges per review

- Drop `sudo -E`: only the explicit preserve_env allowlist reaches the
  root process via /usr/bin/env; extend the run --as-root allowlist
  with the project-declared run/mode env keys so declared variables
  still arrive.
- Clear PYTHONHOME unconditionally for setup scripts; a stale value
  breaks the python/pip resolved from the prepended PATH even outside
  a venv.
- Resolve wget/gpg to absolute paths in the Kitware key fetch (S607).
- holohub-integration job: `permissions: contents: read` and
  `persist-credentials: false` on both checkouts.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Pull Request Pull Request #193: fix: install CLI in one env and elevate only per-operation

Coverage Stats

132 of 178 new or added lines in 7 files covered. (74.16%)

4 existing lines in 2 files now uncovered.

3079 of 3953 relevant lines covered (77.89%)

0.78 hits per line