From 4e66704c13f56e4c33e7ec7a810d06cfbe8adba1 Mon Sep 17 00:00:00 2001 From: Peter Du Date: Tue, 4 Aug 2026 08:01:47 -0700 Subject: [PATCH 1/9] add security.md --- SECURITY.md | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..9d1a711 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,24 @@ +## Security + +NVIDIA is dedicated to the security and trust of our software products and services, including all source code repositories managed through our organization. + +If you need to report a security issue, please use the appropriate contact points outlined below. **Please do not report security vulnerabilities through GitHub.** If a potential security issue is inadvertently reported via a public issue or pull request, NVIDIA maintainers may limit public discussion and redirect the reporter to the appropriate private disclosure channels. + +## Reporting Potential Security Vulnerability in an NVIDIA Product + +To report a potential security vulnerability in any NVIDIA product: +- Web: [Security Vulnerability Submission Form](https://www.nvidia.com/object/submit-security-vulnerability.html) +- E-Mail: psirt@nvidia.com + - We encourage you to use the following PGP key for secure email communication: [NVIDIA public PGP Key for communication](https://www.nvidia.com/en-us/security/pgp-key) + - Please include the following information: + - Product/Driver name and version/branch that contains the vulnerability + - Type of vulnerability (code execution, denial of service, buffer overflow, etc.) + - Instructions to reproduce the vulnerability + - Proof-of-concept or exploit code + - Potential impact of the vulnerability, including how an attacker could exploit the vulnerability + +While NVIDIA currently does not have a bug bounty program, we do offer acknowledgement when an externally reported security issue is addressed under our coordinated vulnerability disclosure policy. Please visit our [Product Security Incident Response Team (PSIRT)](https://www.nvidia.com/en-us/security/psirt-policies/) policies page for more information. + +## NVIDIA Product Security + +For all security-related concerns, please visit NVIDIA's Product Security portal at https://www.nvidia.com/en-us/security From 93ce9305634239d556eea87afb1a9636767ad7dc Mon Sep 17 00:00:00 2001 From: Peter Du Date: Tue, 4 Aug 2026 09:00:18 -0700 Subject: [PATCH 2/9] add contributing and update license to license.md --- CONTRIBUTING.md | 45 +++++++++++++++++++++++++++++++++++++++++++ CONTRIBUTORS.md | 23 ++++++++++++++++++++++ LICENSE => LICENSE.md | 4 +++- 3 files changed, 71 insertions(+), 1 deletion(-) create mode 100644 CONTRIBUTING.md create mode 100644 CONTRIBUTORS.md rename LICENSE => LICENSE.md (99%) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md new file mode 100644 index 0000000..a7848ec --- /dev/null +++ b/CONTRIBUTING.md @@ -0,0 +1,45 @@ +## Isaac AutoData Contribution Rules + +This document describes the rules for contributing to Isaac AutoData + + +#### Signing Your Work + +* We require that all contributors "sign-off" on their commits. +This certifies that the contribution is your original work, or you have rights to submit +it under the same license, or a compatible license. + +* Any contribution which contains commits that are not Signed-Off will not be accepted. + +* To sign off on a commit you simply use the `--signoff` (or `-s`) option when committing your changes: + ```bash + $ git commit -s -m "Add cool feature." + ``` + This will append the following to your commit message: + ``` + Signed-off-by: Your Name + ``` + +* Full text of the DCO: + + ``` + Developer Certificate of Origin Version 1.1 + + Copyright (C) 2004, 2006 The Linux Foundation and its contributors. + + Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. + ``` + + ``` + Developer's Certificate of Origin 1.1 + + By making a contribution to this project, I certify that: + + (a) The contribution was created in whole or in part by me and I have the right to submit it under the open source license indicated in the file; or + + (b) The contribution is based upon previous work that, to the best of my knowledge, is covered under an appropriate open source license and I have the right under that license to submit that work with modifications, whether created in whole or in part by me, under the same open source license (unless I am permitted to submit under a different license), as indicated in the file; or + + (c) The contribution was provided directly to me by some other person who certified (a), (b) or (c) and I have not modified it. + + (d) I understand and agree that this project and the contribution are public and that a record of the contribution (including all personal information I submit with it, including my sign-off) is maintained indefinitely and may be redistributed consistent with this project or the open source license(s) involved. + ``` diff --git a/CONTRIBUTORS.md b/CONTRIBUTORS.md new file mode 100644 index 0000000..7043abb --- /dev/null +++ b/CONTRIBUTORS.md @@ -0,0 +1,23 @@ +# Isaac AutoData Developers and Contributors + +This is the official list of Isaac AutoData Project developers and contributors. + +Guidelines for modifications: + +* Please keep the **lists sorted alphabetically**. +* name (optional institution) + +## Core Team +* Ansh Gandhi (NVIDIA) +* Benjamin Butin (NVIDIA) +* Heron Ordonez Guillen (NVIDIA) +* Neel Jawale (NVIDIA) +* Peter Du (NVIDIA) +* Stephan Pleines (NVIDIA) +* Tuur Stuyck (NVIDIA) + +## Contributors + +* Ashley Chow (NVIDIA) +* Caelan Gerrit (NVIDIA) +* Xinjie Yao (NVIDIA) diff --git a/LICENSE b/LICENSE.md similarity index 99% rename from LICENSE rename to LICENSE.md index 261eeb9..34af41d 100644 --- a/LICENSE +++ b/LICENSE.md @@ -1,3 +1,5 @@ +# License {#license} + Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ @@ -186,7 +188,7 @@ same "printed page" as the copyright notice for easier identification within third-party archives. - Copyright [yyyy] [name of copyright owner] + Copyright 2025 NVIDIA CORPORATION Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. From d147a4c460119a977870ae5f5a5865d06cb1f50d Mon Sep 17 00:00:00 2001 From: Peter Du Date: Tue, 4 Aug 2026 10:57:45 -0700 Subject: [PATCH 3/9] fix ngc login --- .github/workflows/ci.yml | 7 +++++++ .github/workflows/nightly.yml | 7 +++++++ 2 files changed, 14 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b806588..5829f1e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -89,6 +89,13 @@ jobs: git lfs install --local git lfs pull + - name: Log in to NVIDIA NGC + uses: docker/login-action@v3 + with: + registry: nvcr.io + username: '$oauthtoken' + password: ${{ secrets.NGC_API_KEY }} + - name: Run E2E tests run: ./scripts/ci/run_tests.sh diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index 9d4b4d2..a26b6f3 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -61,6 +61,13 @@ jobs: git lfs install --local git lfs pull + - name: Log in to NVIDIA NGC + uses: docker/login-action@v3 + with: + registry: nvcr.io + username: '$oauthtoken' + password: ${{ secrets.NGC_API_KEY }} + - name: Run full E2E suite run: ./scripts/ci/run_tests.sh From 282ab6cde3b0054ab313edc95dcaac7a0c4d1196 Mon Sep 17 00:00:00 2001 From: Peter Du Date: Tue, 4 Aug 2026 13:02:00 -0700 Subject: [PATCH 4/9] remove ngc login step from ci yaml --- .github/workflows/ci.yml | 7 ------- .github/workflows/nightly.yml | 7 ------- 2 files changed, 14 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5829f1e..b806588 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -89,13 +89,6 @@ jobs: git lfs install --local git lfs pull - - name: Log in to NVIDIA NGC - uses: docker/login-action@v3 - with: - registry: nvcr.io - username: '$oauthtoken' - password: ${{ secrets.NGC_API_KEY }} - - name: Run E2E tests run: ./scripts/ci/run_tests.sh diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index a26b6f3..9d4b4d2 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -61,13 +61,6 @@ jobs: git lfs install --local git lfs pull - - name: Log in to NVIDIA NGC - uses: docker/login-action@v3 - with: - registry: nvcr.io - username: '$oauthtoken' - password: ${{ secrets.NGC_API_KEY }} - - name: Run full E2E suite run: ./scripts/ci/run_tests.sh From 4468c38560e0b1194569f719cbbf5899b50d27d2 Mon Sep 17 00:00:00 2001 From: Peter Du Date: Tue, 4 Aug 2026 13:48:01 -0700 Subject: [PATCH 5/9] add ngc login step, ignore any potentailly stale credentials on runner --- .github/workflows/ci.yml | 10 ++++++++++ .github/workflows/nightly.yml | 10 ++++++++++ 2 files changed, 20 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b806588..bbaf4b3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -65,6 +65,8 @@ jobs: # both subprocess and unit tests run. env: TEST_PATH: "isaac_autodata_tests/e2e/ isaac_autodata_tests/interfaces/ isaac_autodata_tests/core/" + # Isolate registry authentication from credentials cached on persistent self-hosted runners. + DOCKER_CONFIG: ${{ runner.temp }}/autodata-docker-${{ github.run_id }}-${{ github.run_attempt }} steps: - name: nvidia-smi @@ -89,6 +91,14 @@ jobs: git lfs install --local git lfs pull + - name: Log in to NVIDIA NGC + uses: docker/login-action@v4 + with: + registry: nvcr.io + username: '$oauthtoken' + password: ${{ secrets.NGC_API_KEY }} + logout: true + - name: Run E2E tests run: ./scripts/ci/run_tests.sh diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index 9d4b4d2..5b6f725 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -33,6 +33,8 @@ jobs: FORCE_REBUILD: "true" PYTEST_MARK: "" ISAAC_AUTODATA_RESULTS_DIR: test-results + # Isolate registry authentication from credentials cached on persistent self-hosted runners. + DOCKER_CONFIG: ${{ runner.temp }}/autodata-docker-${{ github.run_id }}-${{ github.run_attempt }} steps: # Self-hosted runners persist the workspace; clear prior results so an early @@ -61,6 +63,14 @@ jobs: git lfs install --local git lfs pull + - name: Log in to NVIDIA NGC + uses: docker/login-action@v4 + with: + registry: nvcr.io + username: '$oauthtoken' + password: ${{ secrets.NGC_API_KEY }} + logout: true + - name: Run full E2E suite run: ./scripts/ci/run_tests.sh From 2ee8f762d9c9f7c41205406a7324c58463920efa Mon Sep 17 00:00:00 2001 From: Peter Du Date: Tue, 4 Aug 2026 14:18:03 -0700 Subject: [PATCH 6/9] fix ci yaml syntax --- .github/workflows/ci.yml | 2 +- .github/workflows/nightly.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index bbaf4b3..1d5e1e3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -66,7 +66,7 @@ jobs: env: TEST_PATH: "isaac_autodata_tests/e2e/ isaac_autodata_tests/interfaces/ isaac_autodata_tests/core/" # Isolate registry authentication from credentials cached on persistent self-hosted runners. - DOCKER_CONFIG: ${{ runner.temp }}/autodata-docker-${{ github.run_id }}-${{ github.run_attempt }} + DOCKER_CONFIG: /tmp/autodata-docker-${{ github.run_id }}-${{ github.run_attempt }} steps: - name: nvidia-smi diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index 5b6f725..6457df2 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -34,7 +34,7 @@ jobs: PYTEST_MARK: "" ISAAC_AUTODATA_RESULTS_DIR: test-results # Isolate registry authentication from credentials cached on persistent self-hosted runners. - DOCKER_CONFIG: ${{ runner.temp }}/autodata-docker-${{ github.run_id }}-${{ github.run_attempt }} + DOCKER_CONFIG: /tmp/autodata-docker-${{ github.run_id }}-${{ github.run_attempt }} steps: # Self-hosted runners persist the workspace; clear prior results so an early From 7800a652ee864119f560975d65ae75a234351c01 Mon Sep 17 00:00:00 2001 From: Peter Du Date: Tue, 4 Aug 2026 15:35:50 -0700 Subject: [PATCH 7/9] revert login change --- .github/workflows/ci.yml | 10 ---------- .github/workflows/nightly.yml | 10 ---------- 2 files changed, 20 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1d5e1e3..b806588 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -65,8 +65,6 @@ jobs: # both subprocess and unit tests run. env: TEST_PATH: "isaac_autodata_tests/e2e/ isaac_autodata_tests/interfaces/ isaac_autodata_tests/core/" - # Isolate registry authentication from credentials cached on persistent self-hosted runners. - DOCKER_CONFIG: /tmp/autodata-docker-${{ github.run_id }}-${{ github.run_attempt }} steps: - name: nvidia-smi @@ -91,14 +89,6 @@ jobs: git lfs install --local git lfs pull - - name: Log in to NVIDIA NGC - uses: docker/login-action@v4 - with: - registry: nvcr.io - username: '$oauthtoken' - password: ${{ secrets.NGC_API_KEY }} - logout: true - - name: Run E2E tests run: ./scripts/ci/run_tests.sh diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index 6457df2..9d4b4d2 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -33,8 +33,6 @@ jobs: FORCE_REBUILD: "true" PYTEST_MARK: "" ISAAC_AUTODATA_RESULTS_DIR: test-results - # Isolate registry authentication from credentials cached on persistent self-hosted runners. - DOCKER_CONFIG: /tmp/autodata-docker-${{ github.run_id }}-${{ github.run_attempt }} steps: # Self-hosted runners persist the workspace; clear prior results so an early @@ -63,14 +61,6 @@ jobs: git lfs install --local git lfs pull - - name: Log in to NVIDIA NGC - uses: docker/login-action@v4 - with: - registry: nvcr.io - username: '$oauthtoken' - password: ${{ secrets.NGC_API_KEY }} - logout: true - - name: Run full E2E suite run: ./scripts/ci/run_tests.sh From 3031f15b6bbaf6a59579258e90163c8bc05ca61b Mon Sep 17 00:00:00 2001 From: Peter Du Date: Tue, 4 Aug 2026 17:29:01 -0700 Subject: [PATCH 8/9] update contributors.md --- CONTRIBUTORS.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/CONTRIBUTORS.md b/CONTRIBUTORS.md index 7043abb..75c8cbd 100644 --- a/CONTRIBUTORS.md +++ b/CONTRIBUTORS.md @@ -9,7 +9,6 @@ Guidelines for modifications: ## Core Team * Ansh Gandhi (NVIDIA) -* Benjamin Butin (NVIDIA) * Heron Ordonez Guillen (NVIDIA) * Neel Jawale (NVIDIA) * Peter Du (NVIDIA) @@ -19,5 +18,5 @@ Guidelines for modifications: ## Contributors * Ashley Chow (NVIDIA) -* Caelan Gerrit (NVIDIA) +* Caelan Garrett (NVIDIA) * Xinjie Yao (NVIDIA) From f71d561d26b8c621c7ce1a4a29231b7da184b979 Mon Sep 17 00:00:00 2001 From: Peter Du Date: Tue, 4 Aug 2026 17:34:27 -0700 Subject: [PATCH 9/9] fix license.md year --- LICENSE.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/LICENSE.md b/LICENSE.md index 34af41d..2e0af2d 100644 --- a/LICENSE.md +++ b/LICENSE.md @@ -188,7 +188,7 @@ same "printed page" as the copyright notice for easier identification within third-party archives. - Copyright 2025 NVIDIA CORPORATION + Copyright 2026 NVIDIA CORPORATION Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.