[DRAFT DO NOT REVIEW] adds claude integration test and plugin#1511
[DRAFT DO NOT REVIEW] adds claude integration test and plugin#1511jomitchellnv wants to merge 1 commit intomainfrom
Conversation
Signed-off-by: Jonathan Mitchell <jomitchell@nvidia.com>
jomitchellnv
requested review from
cspades,
dorotat-nv,
jstjohn,
jwilber,
pstjohn,
savitha-eng and
trvachov
as code owners
|
Important Review skippedAuto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| runs-on: linux-amd64-gpu-l4-latest-1 | ||
| container: | ||
| image: nvcr.io/nvidia/pytorch:25.06-py3 | ||
| env: | ||
| ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }} | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
|
|
||
| - name: Install Claude Code CLI | ||
| run: npm install -g @anthropic-ai/claude-code | ||
|
|
||
| - name: Install test dependencies | ||
| run: pip install pytest pytest-timeout | ||
|
|
||
| - name: Run integration tests | ||
| run: cd bionemo-recipes/integration-tests && pytest -v --timeout=600 | ||
| timeout-minutes: 30 |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 8 days ago
In general, the fix is to explicitly define a permissions block in the workflow or job to restrict the GITHUB_TOKEN to the least privileges needed. This job only checks out code and runs tests, so it should only require read access to repository contents.
The best fix without changing functionality is to add a top-level permissions section (so it applies to all jobs) immediately after the name: declaration in .github/workflows/integration-tests-claude.yml, specifying contents: read. This matches the minimal suggestion from CodeQL and GitHub, and does not interfere with the existing steps (actions/checkout, npm install, pip install, pytest, all of which run locally in the container). No new imports or external dependencies are required; we are only changing the YAML configuration of the workflow.
Concretely:
- Edit
.github/workflows/integration-tests-claude.yml. - Insert:
permissions:
contents: readafter line 1 (name: Claude Integration Tests) and before the on: block. No other lines need to be modified.
| @@ -1,4 +1,6 @@ | ||
| name: Claude Integration Tests | ||
| permissions: | ||
| contents: read | ||
| on: | ||
| schedule: | ||
| - cron: "0 6 * * 1" # Weekly Monday 6am UTC |
1 participant
Description
Usage
Type of changes
CI Pipeline Configuration
Configure CI behavior by applying the relevant labels. By default, only basic unit tests are run.
Unit tests marked as
@pytest.mark.multi_gpuor@pytest.mark.distributedare not run in the PR pipeline.For more details, see CONTRIBUTING
Note
By default, only basic unit tests are run. Add appropriate labels to enable an additional test coverage.
Authorizing CI Runs
We use copy-pr-bot to manage authorization of CI
runs on NVIDIA's compute resources.
automatically be copied to a pull-request/ prefixed branch in the source repository (e.g. pull-request/123)
/ok to testcomment on the pull request to trigger CI. This will need to be done for each new commit.Triggering Code Rabbit AI Review
To trigger a code review from code rabbit, comment on a pull request with one of these commands:
See https://docs.coderabbit.ai/reference/review-commands for a full list of commands.
Pre-submit Checklist