NVIDIA / gpu-operator
44%
main: 45%

LAST BUILD BRANCH: pull-request/3089
DEFAULT BRANCH: main
Repo Added
Files 75
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH pull-request/2794
branch: pull-request/2794
CHANGE BRANCH
x

coverage: 44.49%. Remained the same
36485313051

push

github

abrarshivani 
Generate third-party licence notices with working links and versions

The committed THIRD_PARTY_NOTICES.md listed dependencies without versions
and without links to any licence text, so a reader had no way to reach the
terms a package is offered under. It also went stale on every dependency
change, and the CI gate existed only to notice that.

The generator now has two subcommands. repo produces the document for a
working tree, linking relatively into vendor/ so every link serves the
exact text reproduced beneath it. release produces the per-release
artifact. It takes the release tag as --release-tag and refuses to run unless
that tag names the checked-out commit, so the document cannot claim a release
it was not built from. Its links cite the commit rather than the tag, because
a tag can be moved afterwards and several tags can share one commit. The
repository comes from the origin remote.

Licence text is now read from vendor/ rather than the go-licenses save
tree, so the licence-bearing files that save drops are reproduced as well.
license-overrides.tsv records curated identifiers for files that bundle
more than one licence.

bundled-components.tsv accounts for every path the Dockerfile copies into
the final image, so nothing reaches the image unattributed. busybox and the
node-feature-discovery CRDs are the third-party entries; the CUDA
compatibility libraries and the vectorAdd sample are NVIDIA's own. The
Dockerfile reader joins line continuations and folds instruction keywords,
because Docker accepts lowercase COPY and ADD and a copy the parser cannot
see is a component that ships unattributed. CRD rows are checked against
the appVersion of the chart they were generated from, so a chart bump
cannot silently leave the notices behind.

The Dockerfile now pins busybox-static to the version the catalogue records,
and the generator checks the two agree. apt resolves an unpinned package at
build time, so without the pin the recorded version was an ass... (continued)

5769 of 12967 relevant lines covered (44.49%)

0.45 hits per line

Relevant lines Covered
12967 RELEVANT LINES 5769 COVERED LINES
0.45 HITS PER LINE
Source Files on pull-request/2794

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
36485313051 pull-request/2794 Generate third-party licence notices with working links and versions The committed THIRD_PARTY_NOTICES.md listed dependencies without versions and without links to any licence text, so a reader had no way to reach the terms a package is offered u... push abrarshivani github
44.49
35918304526 pull-request/2794 Generate third-party licence notices with working links and versions The committed THIRD_PARTY_NOTICES.md listed dependencies without versions and without links to any licence text, so a reader had no way to reach the terms a package is offered u... push abrarshivani github
44.49
35872436514 pull-request/2794 Generate third-party licence notices with working links and versions The committed THIRD_PARTY_NOTICES.md listed dependencies without versions and without links to any licence text, so a reader had no way to reach the terms a package is offered u... push abrarshivani github
44.49
35815788737 pull-request/2794 Generate third-party licence notices with working links and versions The committed THIRD_PARTY_NOTICES.md listed dependencies without versions and without links to any licence text, so a reader had no way to reach the terms a package is offered u... push abrarshivani github
44.49
35791790714 pull-request/2794 Generate third-party licence notices with working links and versions The committed THIRD_PARTY_NOTICES.md listed dependencies without versions and without links to any licence text, so a reader had no way to reach the terms a package is offered u... push abrarshivani github
44.49
35788724425 pull-request/2794 Generate third-party licence notices with working links and versions The committed THIRD_PARTY_NOTICES.md listed dependencies without versions and without links to any licence text, so a reader had no way to reach the terms a package is offered u... push abrarshivani github
44.49
35785941702 pull-request/2794 Generate third-party licence notices with working links and versions The committed THIRD_PARTY_NOTICES.md listed dependencies without versions and without links to any licence text, so a reader had no way to reach the terms a package is offered u... push abrarshivani github
44.49
35785137822 pull-request/2794 Add the generated third-party notices for v26.7.0 Produced from the v26.7.0 tag, so the version in the header, the base image it reports and every link it carries describe that release rather than the branch the generator happens to sit on. Sign... push abrarshivani github
44.49
35784074788 pull-request/2794 Add the generated third-party notices for v26.7.0 Produced from the v26.7.0 tag, so the version in the header, the base image it reports and every link it carries describe that release rather than the branch the generator happens to sit on. Sign... push abrarshivani github
44.49
35781150131 pull-request/2794 Add the generated third-party notices for v26.7.0 Produced from the v26.7.0 tag, so the version in the header, the base image it reports and every link it carries describe that release rather than the branch the generator happens to sit on. Sign... push abrarshivani github
44.49
See All Builds (2865)