NVIDIA / gpu-operator / 35918304526
44%
main: 44%

LAST BUILD BRANCH: release-26.7
DEFAULT BRANCH: main
Ran
Jobs 1
Files 75
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 44.49%. Remained the same
35918304526

push

github

abrarshivani 
Generate third-party licence notices with working links and versions

The committed THIRD_PARTY_NOTICES.md listed dependencies without versions
and without links to any licence text, so a reader had no way to reach the
terms a package is offered under. It also went stale on every dependency
change, and the CI gate existed only to notice that.

The generator now has two subcommands. repo produces the document for a
working tree, linking relatively into vendor/ so every link serves the
exact text reproduced beneath it. release produces the per-release
artifact. It takes the release tag as --release-tag and refuses to run unless
that tag names the checked-out commit, so the document cannot claim a release
it was not built from. Its links cite the commit rather than the tag, because
a tag can be moved afterwards and several tags can share one commit. The
repository comes from the origin remote.

Licence text is now read from vendor/ rather than the go-licenses save
tree, so the licence-bearing files that save drops are reproduced as well.
license-overrides.tsv records curated identifiers for files that bundle
more than one licence.

bundled-components.tsv accounts for every path the Dockerfile copies into
the final image, so nothing reaches the image unattributed. busybox and the
node-feature-discovery CRDs are the third-party entries; the CUDA
compatibility libraries and the vectorAdd sample are NVIDIA's own. The
Dockerfile reader joins line continuations and folds instruction keywords,
because Docker accepts lowercase COPY and ADD and a copy the parser cannot
see is a component that ships unattributed. CRD rows are checked against
the appVersion of the chart they were generated from, so a chart bump
cannot silently leave the notices behind.

The Dockerfile now pins busybox-static to the version the catalogue records,
and the generator checks the two agree. apt resolves an unpinned package at
build time, so without the pin the recorded version was an ass... (continued)

5769 of 12967 relevant lines covered (44.49%)

0.45 hits per line

Jobs
ID Job ID Ran Files Coverage
1 35918304526.1 75
44.49
 GitHub Action Run
Source Files on build 35918304526