nvidia-holoscan / holoscan-cli / 35706790964

81%

push

github

fix(deps): pin external refs and validate CMake manifest values (#234)

* fix(deps): reject mutable external module refs

Require remote module sources to use full commit SHAs before CMake FetchContent can consume them. Preserve local development through existing path overrides and omit remote coordinates when an override is active.

Co-authored-by: Codex <noreply@openai.com>
Signed-off-by: Wenqi Li <wenqil@nvidia.com>

* fix(deps): validate and encode CMake manifest values

Encode metadata-derived arguments and comments as CMake literals. Validate
Git URLs and local override paths before forwarding them to FetchContent,
which serializes values into further CMake code. Preserve immutable refs
and local override precedence, and adjust existing output assertions.

Co-authored-by: Codex <noreply@openai.com>
Signed-off-by: Wenqi Li <wenqil@nvidia.com>

---------

Signed-off-by: Wenqi Li <wenqil@nvidia.com>
Co-authored-by: Codex <noreply@openai.com>

23 of 23 new or added lines in 2 files covered. (100.0%)

4319 of 5384 relevant lines covered (80.22%)

0.8 hits per line