• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

NVIDIA / nvidia-container-toolkit
39%
main: 43%

Build:
Build:
LAST BUILD BRANCH: pull-request/1670
DEFAULT BRANCH: main
Repo Added 22 May 2025 04:41PM UTC
Token yURQA9qJZkSTLsagBnXzxNupHtB5LQLk7 regen
Build 2117 Last
Files 236
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH pull-request/1662
branch: pull-request/1662
CHANGE BRANCH
x
Reset
Sync Branches
  • pull-request/1662
  • 1.18.0rc2
  • CNT-4739/additional-gids
  • CNT-4766/create-so-symlinks
  • NewEmpty
  • add-additional-device-node-information
  • add-as-package-for-conversion
  • add-basic-csv-test
  • add-dev-root-to-driver
  • add-device-ids-to-getspec
  • add-disable-all-device
  • add-dlopen-library-locator
  • add-driver-lib-root-envvar
  • add-existing-runtimes-to-containerd-drop-in
  • add-imex-channel-to-jit-cdi
  • add-issue-templates
  • add-ldconfig-path-as-hook-creator-option
  • add-nspect-integration
  • add-nvidiascape-test
  • add-openrm-discoverer-to-csv-mode
  • add-restart-to-refresh-service
  • add-version-to-driver-struct
  • allow-config-override-by-envvar
  • allow-config-source-to-be-overridden
  • allow-device-ids-on-cdi-generate
  • allow-scan-failures
  • b/5363680
  • b/5366608
  • b/5371533
  • bug/5366608
  • bump-golang-125
  • bump-image-in-tests
  • bump-release-v1.18.0-rc.1
  • bump-release-v1.18.0-rc.3
  • bump-release-v1.18.0-rc.4
  • bump-release-v1.19.0-rc.1
  • bump-release-v1.19.0-rc.2
  • bump-release-v1.19.0-rc.3
  • bump-release-v1.19.0-rc.4
  • cdi_generate_env_cli
  • chore-cleanup-test
  • clean-runtime-config-api
  • cleanup-default-runtime-field
  • cleanup-internal-functions
  • cleanup-logger-interface
  • codecov
  • configure-nvgpu-compat
  • cuda-elf-header
  • default-to-cdi
  • dependabot/docker/deployments/container/main/nvidia/cuda-12.9.1-base-ubuntu20.04
  • dependabot/docker/deployments/container/main/nvidia/distroless/go-v3.1.10-dev
  • dependabot/docker/deployments/container/main/nvidia/distroless/go-v3.1.11-dev
  • dependabot/docker/deployments/container/main/nvidia/distroless/go-v3.1.12-dev
  • dependabot/docker/deployments/container/main/nvidia/distroless/go-v3.2.2-dev
  • dependabot/docker/deployments/container/main/nvidia/distroless/go-v4.0.0-dev
  • dependabot/docker/deployments/container/main/nvidia/distroless/go-v4.0.1-dev
  • dependabot/docker/deployments/devel/main/golang-1.24.4
  • dependabot/docker/deployments/devel/main/golang-1.24.5
  • dependabot/docker/deployments/devel/main/golang-1.24.6
  • dependabot/docker/deployments/devel/main/golang-1.25.1
  • dependabot/docker/deployments/devel/main/golang-1.25.6
  • dependabot/docker/deployments/devel/main/golang-1.25.7
  • dependabot/docker/deployments/devel/main/golang-1.26.0
  • dependabot/github_actions/main/NVIDIA/holodeck-0.2.10
  • dependabot/github_actions/main/actions/checkout-5
  • dependabot/github_actions/main/actions/download-artifact-5
  • dependabot/github_actions/main/actions/download-artifact-7
  • dependabot/github_actions/main/actions/setup-go-6
  • dependabot/github_actions/main/actions/upload-artifact-6
  • dependabot/github_actions/main/slackapi/slack-github-action-2.1.1
  • dependabot/go_modules/deployments/devel/github.com/go-viper/mapstructure/v2-2.3.0
  • dependabot/go_modules/deployments/devel/main/github.com/matryer/moq-0.6.0
  • dependabot/go_modules/main/github.com/NVIDIA/go-nvlib-0.7.3
  • dependabot/go_modules/main/github.com/NVIDIA/go-nvlib-0.7.4
  • dependabot/go_modules/main/github.com/NVIDIA/go-nvlib-0.9.0
  • dependabot/go_modules/main/github.com/NVIDIA/go-nvml-0.12.9-0
  • dependabot/go_modules/main/github.com/NVIDIA/go-nvml-0.13.0-1
  • dependabot/go_modules/main/github.com/opencontainers/runc-1.3.1
  • dependabot/go_modules/main/github.com/opencontainers/runc-1.3.2
  • dependabot/go_modules/main/github.com/opencontainers/runc-1.4.0
  • dependabot/go_modules/main/github.com/sirupsen/logrus-1.9.4
  • dependabot/go_modules/main/github.com/stretchr/testify-1.11.0
  • dependabot/go_modules/main/github.com/stretchr/testify-1.11.1
  • dependabot/go_modules/main/github.com/urfave/cli-altsrc/v3-3.1.0
  • dependabot/go_modules/main/github.com/urfave/cli/v2-2.27.7
  • dependabot/go_modules/main/github.com/urfave/cli/v3-3.4.0
  • dependabot/go_modules/main/github.com/urfave/cli/v3-3.4.1
  • dependabot/go_modules/main/github.com/urfave/cli/v3-3.6.2
  • dependabot/go_modules/main/golang.org/x/mod-0.25.0
  • dependabot/go_modules/main/golang.org/x/mod-0.26.0
  • dependabot/go_modules/main/golang.org/x/mod-0.27.0
  • dependabot/go_modules/main/golang.org/x/mod-0.28.0
  • dependabot/go_modules/main/golang.org/x/mod-0.31.0
  • dependabot/go_modules/main/golang.org/x/mod-0.32.0
  • dependabot/go_modules/main/golang.org/x/mod-0.33.0
  • dependabot/go_modules/main/golang.org/x/sys-0.34.0
  • dependabot/go_modules/main/golang.org/x/sys-0.35.0
  • dependabot/go_modules/main/golang.org/x/sys-0.36.0
  • dependabot/go_modules/main/golang.org/x/sys-0.39.0
  • dependabot/go_modules/main/golang.org/x/sys-0.40.0
  • dependabot/go_modules/main/golang.org/x/sys-0.41.0
  • dependabot/go_modules/main/tags.cncf.io/container-device-interface-1.1.0
  • dependabot/go_modules/tests/main/github.com/onsi/ginkgo/v2-2.24.0
  • dependabot/go_modules/tests/main/github.com/onsi/ginkgo/v2-2.25.0
  • dependabot/go_modules/tests/main/github.com/onsi/ginkgo/v2-2.25.1
  • dependabot/go_modules/tests/main/github.com/onsi/ginkgo/v2-2.25.2
  • dependabot/go_modules/tests/main/github.com/onsi/ginkgo/v2-2.25.3
  • dependabot/go_modules/tests/main/github.com/onsi/ginkgo/v2-2.26.0
  • dependabot/go_modules/tests/main/github.com/onsi/ginkgo/v2-2.27.3
  • dependabot/go_modules/tests/main/github.com/onsi/ginkgo/v2-2.27.4
  • dependabot/go_modules/tests/main/github.com/onsi/ginkgo/v2-2.27.5
  • dependabot/go_modules/tests/main/github.com/onsi/ginkgo/v2-2.28.1
  • dependabot/go_modules/tests/main/github.com/onsi/gomega-1.38.0
  • dependabot/go_modules/tests/main/github.com/onsi/gomega-1.38.1
  • dependabot/go_modules/tests/main/github.com/onsi/gomega-1.38.2
  • dependabot/go_modules/tests/main/github.com/onsi/gomega-1.38.3
  • dependabot/go_modules/tests/main/github.com/onsi/gomega-1.39.0
  • dependabot/go_modules/tests/main/github.com/onsi/gomega-1.39.1
  • dependabot/go_modules/tests/main/golang.org/x/crypto-0.39.0
  • dependabot/go_modules/tests/main/golang.org/x/crypto-0.40.0
  • dependabot/go_modules/tests/main/golang.org/x/crypto-0.41.0
  • dependabot/go_modules/tests/main/golang.org/x/crypto-0.42.0
  • dependabot/go_modules/tests/main/golang.org/x/crypto-0.46.0
  • dependabot/go_modules/tests/main/golang.org/x/crypto-0.47.0
  • dependabot/go_modules/tests/main/golang.org/x/crypto-0.48.0
  • dependabot/go_modules/tests/main/golang.org/x/mod-0.33.0
  • dependabot/submodules/main/third_party/libnvidia-container-5476521
  • dependabot/submodules/main/third_party/libnvidia-container-6eda4d7
  • dependabot/submodules/main/third_party/libnvidia-container-710a0f1
  • dependabot/submodules/main/third_party/libnvidia-container-7585946
  • dependabot/submodules/main/third_party/libnvidia-container-889a3bb
  • dependabot/submodules/main/third_party/libnvidia-container-a83ddc0
  • dependabot/submodules/main/third_party/libnvidia-container-bceabbc
  • dependabot/submodules/main/third_party/libnvidia-container-fe0d8e5
  • dgpu-on-nvgpu
  • disable-device-node-creation
  • drop-in-demo
  • drop-in-in-container
  • dropins
  • dropins_ctk_cmd
  • e2e/nvidia-container-cli
  • e2e_containerd
  • ensure-libcuda.so-in-ldcache
  • ensure-that-edit-factory-is-propagated
  • expose-tooling
  • feat-debug-level-log
  • fix-1517
  • fix-alpine-support
  • fix-cdi-spec-generation
  • fix-compat-on-csv
  • fix-debug-in-config
  • fix-deduplicate-driver-store-wsl
  • fix-docker-swarm-in-nvidia-runtime
  • fix-dri-symlinks
  • fix-driver-library-refactor
  • fix-dummy-sign-job
  • fix-e2e-for-docker-29.2.0
  • fix-gdrcopy-in-jit-cdi
  • fix-gitlab-references
  • fix-golangci-lint
  • fix-logged-spec-version
  • fix-merge-error
  • fix-mixed-csv
  • fix-nvswitch-support
  • fix-orin-compat-path
  • fix-publish
  • fix-publishing-dummy-job
  • fix-purecsv
  • fix-release-of-annotated-tags
  • fix-release-tooling
  • fix-rpm-package-definition
  • fix-stale-action
  • fix-symlink-tests
  • fix-verison-string
  • fix-visible-devices-none
  • fix/1049
  • fix/remove-ro-from-ipc-mounts
  • fix_cdi_service
  • fix_systemd_install
  • forward-compat-tegra
  • forward-golang-version-to-libnvidia-container
  • gds-unprivileged
  • ghost-file-config
  • go-wrapper
  • holodeck_update_0213
  • i-1218
  • i/1049
  • i/1075
  • i1225
  • install-only-mode
  • integrate-ngc-automation
  • isue_1215
  • main
  • make-cdi-device-extraction-consistent
  • multiple_drivers_e2e
  • multiple_drivers_e2e_v2
  • no-pivot-root
  • nri-plugin-server
  • opt-out-of-drop-in
  • order-of-precedence-envvar
  • pass-options-to-asserts-in-test
  • patch-1
  • pin-libnvidia-container-tools-version
  • pr/1083
  • pull-request/1030
  • pull-request/1076
  • pull-request/1083
  • pull-request/1100
  • pull-request/1107
  • pull-request/1110
  • pull-request/1113
  • pull-request/1118
  • pull-request/1119
  • pull-request/1120
  • pull-request/1123
  • pull-request/1125
  • pull-request/1129
  • pull-request/1130
  • pull-request/1131
  • pull-request/1132
  • pull-request/1143
  • pull-request/1145
  • pull-request/1150
  • pull-request/1152
  • pull-request/1153
  • pull-request/1154
  • pull-request/1158
  • pull-request/1159
  • pull-request/1160
  • pull-request/1165
  • pull-request/1166
  • pull-request/1168
  • pull-request/1169
  • pull-request/1172
  • pull-request/1174
  • pull-request/1175
  • pull-request/1179
  • pull-request/1180
  • pull-request/1181
  • pull-request/1182
  • pull-request/1183
  • pull-request/1185
  • pull-request/1187
  • pull-request/1188
  • pull-request/1189
  • pull-request/1194
  • pull-request/1195
  • pull-request/1201
  • pull-request/1202
  • pull-request/1206
  • pull-request/1211
  • pull-request/1212
  • pull-request/1216
  • pull-request/1219
  • pull-request/1221
  • pull-request/1223
  • pull-request/1229
  • pull-request/1230
  • pull-request/1231
  • pull-request/1235
  • pull-request/1241
  • pull-request/1250
  • pull-request/1251
  • pull-request/1255
  • pull-request/1256
  • pull-request/1258
  • pull-request/1259
  • pull-request/1263
  • pull-request/1264
  • pull-request/1265
  • pull-request/1266
  • pull-request/1267
  • pull-request/1270
  • pull-request/1272
  • pull-request/1273
  • pull-request/1276
  • pull-request/1277
  • pull-request/1279
  • pull-request/1280
  • pull-request/1281
  • pull-request/1285
  • pull-request/1287
  • pull-request/1291
  • pull-request/1293
  • pull-request/1294
  • pull-request/1298
  • pull-request/1299
  • pull-request/1300
  • pull-request/1303
  • pull-request/1304
  • pull-request/1308
  • pull-request/1311
  • pull-request/1313
  • pull-request/1314
  • pull-request/1315
  • pull-request/1322
  • pull-request/1323
  • pull-request/1325
  • pull-request/1326
  • pull-request/1327
  • pull-request/1330
  • pull-request/1331
  • pull-request/1335
  • pull-request/1336
  • pull-request/1337
  • pull-request/1339
  • pull-request/1341
  • pull-request/1342
  • pull-request/1344
  • pull-request/1345
  • pull-request/1348
  • pull-request/1351
  • pull-request/1354
  • pull-request/1355
  • pull-request/1358
  • pull-request/1359
  • pull-request/1360
  • pull-request/1362
  • pull-request/1365
  • pull-request/1366
  • pull-request/1367
  • pull-request/1368
  • pull-request/1372
  • pull-request/1373
  • pull-request/1374
  • pull-request/1377
  • pull-request/1378
  • pull-request/1382
  • pull-request/1383
  • pull-request/1400
  • pull-request/1401
  • pull-request/1403
  • pull-request/1407
  • pull-request/1408
  • pull-request/1409
  • pull-request/1410
  • pull-request/1411
  • pull-request/1418
  • pull-request/1419
  • pull-request/1420
  • pull-request/1421
  • pull-request/1424
  • pull-request/1428
  • pull-request/1431
  • pull-request/1432
  • pull-request/1438
  • pull-request/1440
  • pull-request/1441
  • pull-request/1444
  • pull-request/1448
  • pull-request/1450
  • pull-request/1451
  • pull-request/1453
  • pull-request/1454
  • pull-request/1459
  • pull-request/1461
  • pull-request/1462
  • pull-request/1464
  • pull-request/1466
  • pull-request/1467
  • pull-request/1469
  • pull-request/1471
  • pull-request/1473
  • pull-request/1486
  • pull-request/1489
  • pull-request/1490
  • pull-request/1491
  • pull-request/1493
  • pull-request/1496
  • pull-request/1498
  • pull-request/1500
  • pull-request/1504
  • pull-request/1505
  • pull-request/1506
  • pull-request/1507
  • pull-request/1510
  • pull-request/1511
  • pull-request/1512
  • pull-request/1515
  • pull-request/1516
  • pull-request/1521
  • pull-request/1528
  • pull-request/1529
  • pull-request/1530
  • pull-request/1533
  • pull-request/1535
  • pull-request/1536
  • pull-request/1538
  • pull-request/1539
  • pull-request/1551
  • pull-request/1556
  • pull-request/1561
  • pull-request/1562
  • pull-request/1563
  • pull-request/1571
  • pull-request/1576
  • pull-request/1577
  • pull-request/1579
  • pull-request/1580
  • pull-request/1581
  • pull-request/1586
  • pull-request/1591
  • pull-request/1593
  • pull-request/1596
  • pull-request/1597
  • pull-request/1598
  • pull-request/1600
  • pull-request/1601
  • pull-request/1604
  • pull-request/1609
  • pull-request/1610
  • pull-request/1612
  • pull-request/1614
  • pull-request/1615
  • pull-request/1628
  • pull-request/1629
  • pull-request/1631
  • pull-request/1633
  • pull-request/1636
  • pull-request/1637
  • pull-request/1638
  • pull-request/1645
  • pull-request/1646
  • pull-request/1647
  • pull-request/1648
  • pull-request/1649
  • pull-request/1651
  • pull-request/1652
  • pull-request/1653
  • pull-request/1654
  • pull-request/1655
  • pull-request/1656
  • pull-request/1657
  • pull-request/1658
  • pull-request/1659
  • pull-request/1660
  • pull-request/1661
  • pull-request/1665
  • pull-request/1666
  • pull-request/1667
  • pull-request/1668
  • pull-request/1669
  • pull-request/1670
  • pull-request/315
  • pull-request/326
  • pull-request/602
  • pull-request/630
  • pull-request/700
  • pull-request/763
  • pull-request/910
  • pull-request/927
  • pull-request/947
  • pull-request/958
  • pull-request/960
  • refactor-add-modifier-factory
  • refactor-cdi-api
  • refactor-device-node-tests
  • refactor-ldcache-locator
  • refactor-normalize-search-paths
  • refactor-nvcdi-options
  • refactor-optional-locator
  • refresh_cdi
  • relax-refresh-service-restart
  • release-1.18
  • remove-dist-tag
  • remove-docker-runc
  • remove-release-archive
  • remove-unneeded-cdi-annotations
  • rename-receivers
  • return-on-jid-cdi-error
  • run-golang-checks-on-prs
  • security/e2e-ssh-key-handling
  • set-gid-for-device-nodes
  • switch-default-crio-config-mode
  • switch-to-distroless
  • switch-to-fedora-43-image
  • switch-to-ubi9
  • sync_cg_permissions
  • systemd-envfile
  • systemd_e2e
  • unconditional-ldcache
  • unify-csv-and-jit-cdi
  • update-driver-branches
  • update_ctk_unit_test
  • use-cdi-producer-api
  • use-config-path-when-running-config-dump
  • use-go-logr-for-nvcdi
  • use-public-runners
  • use-rpm-rebuild-for-shas
  • use-securejoin
  • use-ubi8-image
  • vfio-cdi-mode
  • vulkan-target-cpu

18 Feb 2026 08:35AM UTC coverage: 38.95% (+0.005%) from 38.945%
22132422154

push

github

elezar
fix: Address gosec lint errors

* G703: Path traversal via taint analysis (gosec)

This change uses os.Root to handle the files created when
saving a CDI spec. This ensures that the user supplied content
(the path of the CDI spec file) does not resolve outside of
this root.

Signed-off-by: Evan Lezar <elezar@nvidia.com>

18 of 20 new or added lines in 1 file covered. (90.0%)

54 existing lines in 2 files now uncovered.

5698 of 14629 relevant lines covered (38.95%)

0.43 hits per line

Relevant lines Covered
Build:
Build:
14629 RELEVANT LINES 5698 COVERED LINES
0.43 HITS PER LINE
Source Files on pull-request/1662
  • Tree
  • List 241
  • Changed 1
  • Source Changed 1
  • Coverage Changed 1
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
22132422154 pull-request/1662 fix: Address gosec lint errors * G703: Path traversal via taint analysis (gosec) This change uses os.Root to handle the files created when saving a CDI spec. This ensures that the user supplied content (the path of the CDI spec file) does not re... push 18 Feb 2026 08:36AM UTC elezar github
38.95
22132069552 pull-request/1662 fix: Address gosec lint errors * G703: Path traversal via taint analysis (gosec) This change uses os.Root to handle the files created when saving a CDI spec. This ensures that the user supplied content (the path of the CDI spec file) does not re... push 18 Feb 2026 08:23AM UTC elezar github
38.94
See All Builds (2032)

Badge your Repo: nvidia-container-toolkit

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.

Could not find badge in README.

Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh
  • Settings
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc