32911499845
38%
main: 38%

Ran 25 Aug 2026 11:43PM UTC

Jobs 1

Files 73

Run time 1min

Badge

Embed ▾

Committed 25 Aug 2026 11:30PM UTC coverage: 38.495%. Remained the same

Build # 32911499845

Build Type

push

github

Committed by

cdesiniotis

Commit Message

fix(ci): avoid OpenSSF dangerous-workflow false positive in cherrypick.yml

OpenSSF Scorecard's Dangerous-Workflow check flags any pull_request_target
checkout step whose ref contains the literal string
"github.event.pull_request", regardless of whether it resolves to the base
or head ref. The backport job's checkout only ever uses the base ref, which
is not attacker-controlled, but still trips this substring-based heuristic.

Capture the base ref into a step output first and reference that in the
checkout step instead, preserving identical runtime behavior while
avoiding the flagged pattern.

Signed-off-by: Christopher Desiniotis <cdesiniotis@nvidia.com>

Coverage Stats

5598 of 14542 relevant lines covered (38.5%)

0.44 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	32911499845.1	25 Aug 2026 11:43PM UTC	73	38.5	GitHub Action Run

NVIDIA / gpu-operator / 32911499845
38%
main: 38%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 32911499845

NVIDIA / gpu-operator / 32911499845 38% main: 38%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 32911499845

NVIDIA / gpu-operator / 32911499845
38%
main: 38%

README BADGES
x