1
48%
main: 48%

Ran 10 Feb 2026 03:33PM UTC

Files 34

Run time 1s

Badge

Embed ▾

Committed 10 Feb 2026 03:31PM UTC coverage: 46.049% (-0.01%) from 46.06%

Job # 21871222693.1

Build Type

push

github

Committed by

web-flow

Commit Message

fix(ssh): use TOFU host key verification in all SSH connections (#630)

* fix(ssh): use TOFU host key verification in all SSH connections

Extract tofuHostKeyCallback from provisioner into shared pkg/sshutil
and wire it into cmd/cli/common/ConnectSSH() and dryrun connectOrDie().
All SSH connections now use Trust-On-First-Use verification instead of
InsecureIgnoreHostKey.

Addresses RISK 5 from PROJECT_360_EVALUATION.md.

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(sshutil): address code review feedback on TOFU extraction

Restore detailed doc comment on exported TOFUHostKeyCallback(),
remove unnecessary host:=hostname alias, and normalize nolint
directive spacing to canonical //nolint:gosec format.

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>

---------

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
Co-authored-by: Cursor <cursoragent@cursor.com>

Run Details

2308 of 5012 relevant lines covered (46.05%)

0.51 hits per line

NVIDIA / holodeck / 21871222693 / 1
48%
main: 48%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 21871222693.1

NVIDIA / holodeck / 21871222693 / 1 48% main: 48%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 21871222693.1

NVIDIA / holodeck / 21871222693 / 1
48%
main: 48%

README BADGES
x