nvidia-holoscan / holoscan-cli

77%

main: 77%

LAST BUILD ON BRANCH pull-request/193

branch: pull-request/193

CHANGE BRANCH

x

Reset

• pull-request/193
• codex-tool-runner-alias
• dependabot/github_actions/actions/cache-5
• dependabot/github_actions/actions/checkout-4
• dependabot/github_actions/actions/checkout-5
• dependabot/github_actions/actions/checkout-6
• dependabot/github_actions/actions/checkout-7
• dependabot/github_actions/actions/dependency-review-action-5
• dependabot/github_actions/actions/dependency-review-action-5.0.0
• dependabot/github_actions/actions/download-artifact-4.1.9
• dependabot/github_actions/actions/download-artifact-4.2.0
• dependabot/github_actions/actions/download-artifact-4.2.1
• dependabot/github_actions/actions/download-artifact-5.0.0
• dependabot/github_actions/actions/download-artifact-6.0.0
• dependabot/github_actions/actions/download-artifact-7.0.0
• dependabot/github_actions/actions/download-artifact-8.0.0
• dependabot/github_actions/actions/download-artifact-8.0.1
• dependabot/github_actions/actions/github-script-8.0.0
• dependabot/github_actions/actions/github-script-9.0.0
• dependabot/github_actions/actions/setup-python-6
• dependabot/github_actions/actions/setup-python-6.3.0
• dependabot/github_actions/actions/upload-artifact-4.5.0
• dependabot/github_actions/actions/upload-artifact-5
• dependabot/github_actions/actions/upload-artifact-6
• dependabot/github_actions/actions/upload-artifact-7
• dependabot/github_actions/actions/upload-artifact-7.0.1
• dependabot/github_actions/coverallsapp/github-action-2.3.6
• dependabot/github_actions/coverallsapp/github-action-2.3.7
• dependabot/github_actions/github/codeql-action-4
• dependabot/github_actions/test-summary/action-2.6
• dependabot/pip/cookiecutter-gte-2.7.1
• dependabot/pip/coverage-7.10.0
• dependabot/pip/coverage-7.10.1
• dependabot/pip/coverage-7.10.2
• dependabot/pip/coverage-7.10.3
• dependabot/pip/coverage-7.10.4
• dependabot/pip/coverage-7.10.5
• dependabot/pip/coverage-7.10.6
• dependabot/pip/coverage-7.10.7
• dependabot/pip/coverage-7.11.0
• dependabot/pip/coverage-7.11.1
• dependabot/pip/coverage-7.11.3
• dependabot/pip/coverage-7.12.0
• dependabot/pip/coverage-7.13.0
• dependabot/pip/coverage-7.13.1
• dependabot/pip/coverage-7.13.2
• dependabot/pip/coverage-7.13.3
• dependabot/pip/coverage-7.13.4
• dependabot/pip/coverage-7.13.5
• dependabot/pip/coverage-7.14.0
• dependabot/pip/coverage-7.9.0
• dependabot/pip/coverage-7.9.1
• dependabot/pip/coverage-7.9.2
• dependabot/pip/coverage-tw-7.14.1
• dependabot/pip/coverage-tw-7.14.3
• dependabot/pip/coveralls-4.0.2
• dependabot/pip/coveralls-4.1.0
• dependabot/pip/jsonschema-gte-4.26.0-and-lt-5.0
• dependabot/pip/mypy-1.16.0
• dependabot/pip/mypy-1.16.1
• dependabot/pip/mypy-1.17.0
• dependabot/pip/mypy-1.17.1
• dependabot/pip/mypy-1.18.1
• dependabot/pip/mypy-1.18.2
• dependabot/pip/mypy-1.19.0
• dependabot/pip/mypy-1.19.1
• dependabot/pip/mypy-1.20.0
• dependabot/pip/mypy-1.20.1
• dependabot/pip/mypy-1.20.2
• dependabot/pip/mypy-2.0.0
• dependabot/pip/mypy-2.1.0
• dependabot/pip/packaging-24.2
• dependabot/pip/packaging-25.0
• dependabot/pip/pip-25.3
• dependabot/pip/pip-26.0.1
• dependabot/pip/pip-512858e340
• dependabot/pip/pip-81c3d069c8
• dependabot/pip/pip-99a64d02cb
• dependabot/pip/pip-9aca4bcaf5
• dependabot/pip/pip-a0bd3f3b45
• dependabot/pip/pip-a6aa50acab
• dependabot/pip/pip-aa7cb66ac2
• dependabot/pip/pre-commit-4.2.0
• dependabot/pip/pre-commit-4.3.0
• dependabot/pip/pre-commit-4.4.0
• dependabot/pip/pre-commit-4.5.0
• dependabot/pip/pre-commit-4.5.1
• dependabot/pip/pre-commit-4.6.0
• dependabot/pip/psutil-7.0.0
• dependabot/pip/psutil-7.1.3
• dependabot/pip/psutil-7.2.0
• dependabot/pip/psutil-7.2.1
• dependabot/pip/psutil-7.2.2
• dependabot/pip/pytest-8.4.1
• dependabot/pip/pytest-8.4.2
• dependabot/pip/pytest-9.0.0
• dependabot/pip/pytest-9.0.1
• dependabot/pip/pytest-9.0.2
• dependabot/pip/pytest-9.0.3
• dependabot/pip/pytest-cov-6.2.1
• dependabot/pip/pytest-cov-6.3.0
• dependabot/pip/pytest-cov-7.0.0
• dependabot/pip/pytest-cov-7.1.0
• dependabot/pip/pytest-mock-3.14.1
• dependabot/pip/pytest-mock-3.15.0
• dependabot/pip/pytest-mock-3.15.1
• dependabot/pip/pytest-tw-9.1.1
• dependabot/pip/python-on-whales-0.74.0
• dependabot/pip/python-on-whales-0.77.0
• dependabot/pip/python-on-whales-0.79.0
• dependabot/pip/python-on-whales-0.80.0
• dependabot/pip/python-on-whales-0.81.0
• dependabot/pip/pyyaml-6.0.3
• dependabot/pip/referencing-gte-0.37.0
• dependabot/pip/requests-2.32.5
• dependabot/pip/requests-2.33.0
• dependabot/pip/requests-2.33.1
• dependabot/pip/requests-2.34.0
• dependabot/pip/requests-2.34.1
• dependabot/pip/requests-2.34.2
• dependabot/pip/tomli-tw-2.4
• fix-build-metadata
• fix-pypi-readme-links
• fix/port-holohub-cli-1601
• fix/privileged-setup-one-env
• fix/rc3-setup-script-fallback
• fix/restore-4.2.0-release-manifests
• fix/update-v1-comments-to-version
• main
• package-tgz
• pull-request/106
• pull-request/124
• pull-request/125
• pull-request/130
• pull-request/136
• pull-request/143
• pull-request/155
• pull-request/174
• pull-request/175
• pull-request/176
• pull-request/177
• pull-request/178
• pull-request/180
• pull-request/181
• pull-request/183
• pull-request/185
• pull-request/186
• pull-request/187
• pull-request/189
• pull-request/190
• pull-request/191
• pull-request/34
• pull-request/35
• pull-request/36
• pull-request/37
• pull-request/38
• pull-request/40
• pull-request/55
• pull-request/56
• pull-request/58
• pull-request/60
• pull-request/61
• pull-request/64
• pull-request/65
• pull-request/74
• pull-request/80
• pull-request/84
• pull-request/86
• pull-request/92
• releae/3.5.0
• release/2.9.0
• release/3.0.0
• release/3.1.0
• release/3.10.0
• release/3.11.0
• release/3.2.0
• release/3.3.0
• release/3.4.0
• release/3.4.1
• release/3.5.0
• release/3.6.0
• release/3.7.0
• release/3.8.0
• release/3.9.0
• release/4.0.0
• release/4.1.0
• release/4.2.0
• release/4.3.0
• release/4.4.0
• update-precommit-fix
• update-release-3.6.0
• v4.3.0rc5
• v4.3.0rc6
• vchang/3.3-software-stack
• vchang/app-test
• vchang/app-testing
• vchang/configure_release_2.9
• vchang/consolidate-platform
• vchang/copy-pr-bot
• vchang/cwes
• vchang/drop-python-3.9
• vchang/e2e-workflow-
• vchang/gh-8
• vchang/holohub
• vchang/jinja2-cve-2025-27516
• vchang/nv-runner
• vchang/package-filename
• vchang/poetry-setup
• vchang/release-action
• vchang/remove-no-commit-to-branch
• vchang/test-actions
• vchang/test-pypi
• vchang/tools-validation
• vchang/unit-tests
• wenqil/ctest-script-env-override
• wenqil/dev-release
• wenqil/document-release-process
• wenqil/holohub-cli
• wenqil/pr177-review-followups
• wenqil/setup-add-build-essential
• wenqil/sync-operator-names
• wenqil/test-help-surface-probe
• wenqil/track-a-coverage
• wenqil/versioning-base-image-default
• whom/add-blossom-action
• whom/fix-blossom-action

Build # 28579343741

Build Type

Pull #193

github

Committed by wyli

Commit Message

fix: harden setup elevation and Kitware repo flow (review feedback)

Address three CodeRabbit findings on the setup path:

- io.py: `--dryrun` no longer requires sudo to be installed. When sudo is
  missing on a non-root host, dry-run prints the would-be `sudo ...`
  command instead of exiting; real execution still fails with the clear
  actionable message. Adds unit tests for both paths and for the
  run-directly-as-root case.

- host_setup.py: fetch and dearmor the Kitware key as two separate
  subprocess steps instead of a `wget | gpg` shell pipeline, so a download
  failure cannot be masked by the pipeline's exit status and install an
  empty keyring (also removes shell=True).

- host_setup.py: force `apt-get update` after adding the Kitware apt
  source. `_apt_updated` may already be true from an earlier step, which
  made install_packages_if_missing skip the refresh and miss Kitware's
  cmake packages.

Signed-off-by: Wenqi Li <wenqil@nvidia.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Pull Request Pull Request #193: fix: install CLI in one env and elevate only per-operation

Coverage Stats

31 of 71 new or added lines in 3 files covered. (43.66%)

3 existing lines in 2 files now uncovered.

2969 of 3852 relevant lines covered (77.08%)

0.77 hits per line