sagemaker-hyperpod 3.3.0__tar.gz → 3.3.1__tar.gz

{sagemaker_hyperpod-3.3.0/src/sagemaker_hyperpod.egg-info → sagemaker_hyperpod-3.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sagemaker-hyperpod
-Version: 3.3.0
+Version: 3.3.1
 Summary: Amazon SageMaker HyperPod SDK and CLI
 Home-page: https://github.com/aws/sagemaker-hyperpod-cli
 Author: Amazon Web Services
@@ -101,7 +101,7 @@ The SageMaker HyperPod CLI is a tool that helps create training jobs and inferen
 ### Prerequisites for Inference 
 
 - HyperPod CLI supports creating Inference Endpoints through jumpstart and through custom Endpoint config 
-  - You can follow [inference operator doc](https://github.com/aws/sagemaker-hyperpod-cli/tree/master/helm_chart/HyperPodHelmChart/charts/inference-operator) to install it.
+  - You can follow [inference operator doc](https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-hyperpod-model-deployment-setup.html) to install it.
 
 ## Platform Support
 

{sagemaker_hyperpod-3.3.0 → sagemaker_hyperpod-3.3.1}/README.md

@@ -46,7 +46,7 @@ The SageMaker HyperPod CLI is a tool that helps create training jobs and inferen
 ### Prerequisites for Inference 
 
 - HyperPod CLI supports creating Inference Endpoints through jumpstart and through custom Endpoint config 
-  - You can follow [inference operator doc](https://github.com/aws/sagemaker-hyperpod-cli/tree/master/helm_chart/HyperPodHelmChart/charts/inference-operator) to install it.
+  - You can follow [inference operator doc](https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-hyperpod-model-deployment-setup.html) to install it.
 
 ## Platform Support
 

{sagemaker_hyperpod-3.3.0 → sagemaker_hyperpod-3.3.1}/pyproject.toml

@@ -5,7 +5,7 @@ build-backend = "setuptools.build_meta"
 [project]
 dynamic = ["dependencies"]
 name = "sagemaker-hyperpod"
-version = "3.3.0"
+version = "3.3.1"
 description = "Amazon SageMaker HyperPod SDK and CLI"
 readme = "README.md"
 requires-python = ">=3.8"

{sagemaker_hyperpod-3.3.0 → sagemaker_hyperpod-3.3.1}/setup.py

@@ -47,7 +47,7 @@ for root, dirs, files in os.walk(
 setup(
     data_files=sagemaker_hyperpod_recipes,
     name="sagemaker-hyperpod",
-    version="3.3.0",
+    version="3.3.1",
     description="Amazon SageMaker HyperPod SDK and CLI",
     long_description=open("README.md").read(),
     long_description_content_type="text/markdown",

{sagemaker_hyperpod-3.3.0 → sagemaker_hyperpod-3.3.1}/src/sagemaker/hyperpod/cli/commands/cluster.py

@@ -77,6 +77,8 @@ from sagemaker.hyperpod.common.telemetry.telemetry_logging import (
     _hyperpod_telemetry_emitter,
 )
 from sagemaker.hyperpod.common.telemetry.constants import Feature
+from sagemaker.hyperpod.cli.utils import convert_datetimes
+from sagemaker_core.main.resources import Cluster
 
 RATE_LIMIT = 4
 RATE_LIMIT_PERIOD = 1  # 1 second
@@ -684,6 +686,75 @@ def get_cluster_context(
         sys.exit(1)
 
 
+@click.command("cluster")
+@click.argument("cluster-name", required=True)
+@click.option("--region", help="AWS region")
+@click.option("--debug", is_flag=True, help="Enable debug logging")
+@_hyperpod_telemetry_emitter(Feature.HYPERPOD_CLI, "describe_cluster_cli")
+def describe_cluster(cluster_name: str, debug: bool, region: str) -> None:
+    """Describe the status of a HyperPod cluster.
+    Shows detailed information about a SageMaker HyperPod cluster including its current status,
+    instance groups, orchestrator details, and configuration.
+    Usage Examples
+          # Describe a cluster
+          hyp describe cluster my-cluster-name
+          # Describe with specific region
+          hyp describe cluster my-cluster-name --region us-west-2
+    """
+    if debug:
+        set_logging_level(logger, logging.DEBUG)
+
+    try:
+        botocore_config = botocore.config.Config(
+            user_agent_extra=get_user_agent_extra_suffix()
+        )
+        session = boto3.Session(region_name=region) if region else boto3.Session()
+        sm_client = get_sagemaker_client(session, botocore_config)
+
+        # Get cluster details using SageMaker client
+        cluster_dict = sm_client.describe_cluster(ClusterName=cluster_name)
+
+        # Convert datetimes for display
+        cluster_dict = convert_datetimes(cluster_dict)
+
+        logger.debug(f"Describing cluster name: {cluster_name}\ninfo: {json.dumps(cluster_dict, indent=2, default=str)}")
+
+        click.echo(f"📋 Cluster Details for: {cluster_name}")
+
+        # Highlight cluster status
+        cluster_status = cluster_dict.get('ClusterStatus', 'UNKNOWN')
+        click.echo(f"Status: ", nl=False)
+        click.secho(cluster_status)
+
+        table_data = []
+        for key, value in cluster_dict.items():
+            if isinstance(value, (dict, list)):
+                formatted_value = json.dumps(value, indent=2, default=str)
+            else:
+                formatted_value = str(value)
+            table_data.append([key, formatted_value])
+
+        # Only display table if we have data
+        if table_data:
+            click.echo(tabulate(table_data, tablefmt="presto"))
+        else:
+            click.echo("No cluster data available")
+
+    except Exception as e:
+        logger.error(f"Failed to describe cluster: {e}")
+        if debug:
+            logger.exception("Detailed error information:")
+
+        if "does not exist" in str(e) or "not found" in str(e).lower():
+            click.echo(f"❌ Cluster '{cluster_name}' not found")
+        elif "AccessDenied" in str(e):
+            click.echo("❌ Access denied. Check AWS permissions")
+        else:
+            click.echo(f"❌ Error describing cluster: {e}")
+
+        sys.exit(1)
+        
+
 @click.command()
 @click.option("--grafana", is_flag=True, help="Returns Grafana Dashboard URL")
 @click.option("--prometheus", is_flag=True, help="Returns Prometheus Workspace URL")

{sagemaker_hyperpod-3.3.0 → sagemaker_hyperpod-3.3.1}/src/sagemaker/hyperpod/cli/commands/cluster_stack.py

@@ -53,8 +53,9 @@ def parse_status_list(ctx, param, value):
 @click.argument("config-file", required=True)
 @click.argument("stack-name", required=True)
 @click.option("--region", help="AWS region")
+@click.option("--template-version", type=click.INT, help="Version number of cluster creation template")
 @click.option("--debug", is_flag=True, help="Enable debug logging")
-def create_cluster_stack(config_file, region, debug):
+def create_cluster_stack(config_file, region, template_version, debug):
     """Create a new HyperPod cluster stack using the provided configuration.
 
     Creates a CloudFormation stack for a HyperPod cluster using settings from a YAML configuration file.
@@ -66,7 +67,7 @@ def create_cluster_stack(config_file, region, debug):
        .. code-block:: bash
 
           # Create cluster stack with config file
-          hyp create hyp-cluster cluster-config.yaml my-stack-name --region us-west-2
+          hyp create hyp-cluster cluster-config.yaml my-stack-name --region us-west-2 --template-version 1
 
           # Create with debug logging
           hyp create hyp-cluster cluster-config.yaml my-stack-name --debug
@@ -95,7 +96,7 @@ def create_cluster_stack(config_file, region, debug):
             config = model_instance.to_config(region=region)
 
             # Create the cluster stack
-            stack_id = HpClusterStack(**config).create(region)
+            stack_id = HpClusterStack(**config).create(region, template_version)
 
             logger.info(f"Stack creation initiated successfully with ID: {stack_id}")
             logger.info("You can monitor the stack creation in the AWS CloudFormation console.")

{sagemaker_hyperpod-3.3.0 → sagemaker_hyperpod-3.3.1}/src/sagemaker/hyperpod/cli/commands/init.py

@@ -22,7 +22,8 @@ from sagemaker.hyperpod.cli.init_utils import (
     display_validation_results,
     build_config_from_schema,
     save_template,
-    get_default_version_for_template
+    get_default_version_for_template,
+    create_from_k8s_yaml
 )
 from sagemaker.hyperpod.common.utils import get_aws_default_region
 from sagemaker.hyperpod.common.telemetry.telemetry_logging import (
@@ -271,8 +272,9 @@ def validate():
 
 @click.command(name="_default_create")
 @click.option("--region", "-r", default=None, help="Region to create cluster stack for, default to your region in aws configure. Not available for other templates.")
+@click.option("--template-version", type=click.INT, help="Version number of cluster creation template. Not available for other templates.")
 @_hyperpod_telemetry_emitter(Feature.HYPERPOD_CLI, "init_create_cli")
-def _default_create(region):
+def _default_create(region, template_version):
     """
     Validate configuration and render template files for deployment.
     
@@ -368,15 +370,16 @@ def _default_create(region):
             # Filter out CLI metadata fields before passing to model
             from sagemaker.hyperpod.cli.init_utils import _filter_cli_metadata_fields
             filtered_config = _filter_cli_metadata_fields(data)
-            flat = model(**filtered_config)
+            template_model = model(**filtered_config)
             
             # Pass region to to_domain for cluster stack template
             if template == "cluster-stack":
-                config = flat.to_config(region=region)
-                HpClusterStack(**config).create(region)
+                config = template_model.to_config(region=region)
+                HpClusterStack(**config).create(region, template_version)
             else:
-                domain = flat.to_domain()
-                domain.create()
+                # Create from k8s.yaml
+                k8s_file = out_dir / 'k8s.yaml'
+                create_from_k8s_yaml(str(k8s_file))
 
 
     except Exception as e:

{sagemaker_hyperpod-3.3.0 → sagemaker_hyperpod-3.3.1}/src/sagemaker/hyperpod/cli/constants/init_constants.py

@@ -41,26 +41,34 @@ TEMPLATES = {
     }
 }
 
+# K8s Kind to class mapping for create_from_k8s_yaml
+K8S_KIND_MAPPING = {
+    "InferenceEndpointConfig": {
+        "class_path": "sagemaker.hyperpod.inference.hp_endpoint.HPEndpoint",
+        "metadata_handling": "separate"  # metadata handled separately
+    },
+    "JumpStartModel": {
+        "class_path": "sagemaker.hyperpod.inference.hp_jumpstart_endpoint.HPJumpStartEndpoint", 
+        "metadata_handling": "separate"
+    },
+    "HyperPodPyTorchJob": {
+        "class_path": "sagemaker.hyperpod.training.hyperpod_pytorch_job.HyperPodPytorchJob",
+        "metadata_handling": "combined"  # metadata combined with spec
+    }
+}
 
-def _get_handler_from_latest_template(template_name, handler_name):
-    """Dynamically import handler from the latest version of a template"""
+
+def _get_handler_from_template_version(template_name, version, handler_name):
+    """Dynamically import handler from a specific version of a template"""
     try:
         template_info = TEMPLATES[template_name]
         registry = template_info["registry"]
-
-        # Get latest version using same logic as _get_latest_class
-        available_versions = list(registry.keys())
-        def version_key(v):
-            try:
-                return tuple(map(int, v.split('.')))
-            except ValueError:
-                return (0, 0)
-
-        latest_version = max(available_versions, key=version_key)
-        latest_model = registry[latest_version]
         
-        # Get handler from module
-        module = sys.modules[latest_model.__module__]
+        if version not in registry:
+            return None
+            
+        model_class = registry[version]
+        module = sys.modules[model_class.__module__]
         return getattr(module, handler_name)
     except (ImportError, AttributeError):
         return None
@@ -68,7 +76,8 @@ def _get_handler_from_latest_template(template_name, handler_name):
 
 # Template.field to handler mapping - avoids conflicts and works reliably
 SPECIAL_FIELD_HANDLERS = {
-    'hyp-pytorch-job.volume': _get_handler_from_latest_template("hyp-pytorch-job", "VOLUME_TYPE_HANDLER"),
+    'hyp-pytorch-job.1.0.volume': _get_handler_from_template_version("hyp-pytorch-job", "1.0", "VOLUME_TYPE_HANDLER"),
+    'hyp-pytorch-job.1.1.volume': _get_handler_from_template_version("hyp-pytorch-job", "1.1", "VOLUME_TYPE_HANDLER"),
 }
 
 USAGE_GUIDE_TEXT_CFN = """# SageMaker HyperPod CLI - Initialization Workflow

{sagemaker_hyperpod-3.3.0 → sagemaker_hyperpod-3.3.1}/src/sagemaker/hyperpod/cli/hyp_cli.py

@@ -8,7 +8,7 @@ from typing import Optional, Union
 from importlib.metadata import version, PackageNotFoundError
 
 from sagemaker.hyperpod.cli.commands.cluster import list_cluster, set_cluster_context, get_cluster_context, \
-    get_monitoring
+    get_monitoring, describe_cluster
 from sagemaker.hyperpod.cli.commands.cluster_stack import create_cluster_stack, describe_cluster_stack, \
     list_cluster_stacks, update_cluster, delete_cluster_stack
 from sagemaker.hyperpod.cli.commands.training import (
@@ -183,6 +183,7 @@ describe.add_command(pytorch_describe)
 describe.add_command(js_describe)
 describe.add_command(custom_describe)
 describe.add_command(describe_cluster_stack)
+describe.add_command(describe_cluster)
 
 update.add_command(update_cluster)
 

{sagemaker_hyperpod-3.3.0 → sagemaker_hyperpod-3.3.1}/src/sagemaker/hyperpod/cli/init_utils.py

@@ -533,4 +533,34 @@ def build_config_from_schema(template: str, version: str, model_config=None, exi
                 desc = f"[Required] {desc}"
             comment_map[key] = desc
     
-    return full_cfg, comment_map
+    return full_cfg, comment_map
+
+
+def create_from_k8s_yaml(yaml_file_path: str) -> None:
+    """Create HyperPod resource from K8s YAML file based on kind mapping."""
+    from sagemaker.hyperpod.cli.constants.init_constants import K8S_KIND_MAPPING
+    
+    with open(yaml_file_path, 'r') as f:
+        yaml_data = yaml.safe_load(f)
+    
+    kind = yaml_data.get('kind')
+    if not kind or kind not in K8S_KIND_MAPPING:
+        raise ValueError(f"Unsupported kind: {kind}")
+    
+    mapping = K8S_KIND_MAPPING[kind]
+    
+    # Dynamic import
+    module_path, class_name = mapping["class_path"].rsplit(".", 1)
+    module = importlib.import_module(module_path)
+    resource_class = getattr(module, class_name)
+    
+    # Handle different metadata patterns
+    if mapping["metadata_handling"] == "combined":
+        full_data = {**yaml_data['spec'], 'metadata': yaml_data['metadata']}
+        resource = resource_class.model_validate(full_data, by_name=True)
+    else:
+        from sagemaker.hyperpod.common.config.metadata import Metadata
+        resource = resource_class.model_validate(yaml_data['spec'], by_name=True)
+        resource.metadata = Metadata.model_validate(yaml_data['metadata'], by_name=True)
+    
+    resource.create()

sagemaker_hyperpod-3.3.1/src/sagemaker/hyperpod/cli/sagemaker_hyperpod_recipes/.coveragerc

@@ -0,0 +1,9 @@
+[run]
+# Exclude submodule directory from coverage
+omit =
+    launcher/nemo/nemo_framework_launcher/*
+    launcher/nova/constants/*
+    template/*
+
+[report]
+fail_under = 85

sagemaker_hyperpod-3.3.1/src/sagemaker/hyperpod/cli/sagemaker_hyperpod_recipes/.git

@@ -0,0 +1 @@
+gitdir: ../../../../../.git/modules/src/sagemaker/hyperpod/cli/sagemaker_hyperpod_recipes

sagemaker_hyperpod-3.3.1/src/sagemaker/hyperpod/cli/sagemaker_hyperpod_recipes/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,31 @@
+---
+name: Bug report
+about: File a report to help us reproduce and fix the problem
+title: ''
+labels: 'bug'
+assignees: ''
+
+---
+
+## Describe the bug
+A clear and concise description of what the bug is.
+
+## How to Reproduce?
+A clear, step-by-step set of instructions to reproduce the bug.
+The provided code need to be **complete** and **runnable**, if additional data is needed, please include them in the issue.
+
+## Expected behavior
+A clear and concise description of what you expected to happen.
+
+## Screenshots, error messages or logs
+If applicable, please share with us screenshots, error messages or logs to help explain your problem.
+
+## System information
+A description of your system. Please provide:
+- **Docker image you ran against**:
+- **Source code version you ran against**:
+- **Python version**:
+- **Hardware accelerator used**:
+
+## Additional context
+Add any other context about the problem here. Please provide any additional steps you have tried to solve your issue here.

sagemaker_hyperpod-3.3.1/src/sagemaker/hyperpod/cli/sagemaker_hyperpod_recipes/.github/ISSUE_TEMPLATE/documentation_request.md

@@ -0,0 +1,17 @@
+---
+name: Documentation request
+about: Request improved documentation
+title: ''
+labels: 'documentation request'
+assignees: ''
+
+---
+
+## What did you find confusing?
+A clear and concise description of what you found confusing. Ex. I tried to [...] but I didn't understand how to [...]
+
+## Describe how documentation can be improved
+A clear and concise description of where documentation was lacking and how it can be improved.
+
+## Additional context
+Add any other context or screenshots about the documentation request here.

sagemaker_hyperpod-3.3.1/src/sagemaker/hyperpod/cli/sagemaker_hyperpod_recipes/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,20 @@
+---
+name: Feature request
+about: Suggest new functionality for this project
+title: ''
+labels: 'feature request'
+assignees: ''
+
+---
+
+## Describe the feature you'd like
+A clear and concise description of the functionality you want.
+
+## How would this feature be used?
+A clear and concise description of the use case for this feature. Please provide an example, if possible.
+
+## Describe alternatives you've considered
+A clear and concise description of any alternative solutions or features you've considered.
+
+## Additional context
+Add any other context about the feature request here.

sagemaker_hyperpod-3.3.1/src/sagemaker/hyperpod/cli/sagemaker_hyperpod_recipes/.github/pull_request_template.md

@@ -0,0 +1,25 @@
+## Description
+
+### Motivation
+Explain the motivation
+
+### Changes
+* List your changes
+
+### Testing
+Explain how the changes were tested
+
+## Merge Checklist
+Put an x in the boxes that apply. If you're unsure about any of them, don't hesitate to ask. We're here to help! This is simply a reminder of what we are going to look for before merging your pull request.
+
+### General
+ - [ ] I have read the [CONTRIBUTING](../CONTRIBUTING.md) doc
+ - [ ] I have run `pre-commit run --all-files` on my code. It will check for [this configuration](../.pre-commit-config.yaml).
+ - [ ] I have updated any necessary documentation, including [READMEs](../README.md) and API docs (if appropriate)
+ - [ ] I have verified the licenses used in the license-files artifact generated in the Python License Scan CI check. If the license workflow fails, kindly check the licenses used in the artifact.
+
+### Tests
+ - [ ] I have run `pytest` on my code and all unit tests passed.
+ - [ ] I have added tests that prove my fix is effective or that my feature works (if appropriate)
+
+By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

sagemaker_hyperpod-3.3.1/src/sagemaker/hyperpod/cli/sagemaker_hyperpod_recipes/.github/workflows/pre-commit-check-runner-push.yml

@@ -0,0 +1,28 @@
+name: Python Pre Commit Check CI After Commit
+
+on:
+  push:
+    branches:
+      - main # Triggers on direct pushes to the main branch
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.8' # Set python version to 3.8
+
+      - name: Install pre-commit dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install pre-commit
+
+      - name: Run pre-commit checks
+        run: |
+          pre-commit run --all-files

sagemaker_hyperpod-3.3.1/src/sagemaker/hyperpod/cli/sagemaker_hyperpod_recipes/.github/workflows/repo-monitoring-cron.yml

@@ -0,0 +1,69 @@
+name: Repository Monitoring
+
+on:
+  schedule:
+    - cron: '0 16 * * *'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.run_id }}
+  cancel-in-progress: true
+
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read # This is required for actions/checkout
+
+jobs:
+  check-pr-alerts:
+    runs-on: ubuntu-latest
+    if: github.event.repository.visibility == 'public'
+    timeout-minutes: 10
+    outputs:
+      pr_count: ${{ steps.pr-count.outputs.count }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+      - name: Check for open PRs
+        id: pr-count
+        env:
+          GITHUB_TOKEN: ${{ secrets.GH_PAT }}
+        run: |
+          pr_count=$(gh pr list --state open --limit 1000 | wc -l)
+          echo "count=$pr_count" >> $GITHUB_OUTPUT
+
+  check-issue-alerts:
+    runs-on: ubuntu-latest
+    if: github.event.repository.visibility == 'public'
+    timeout-minutes: 10
+    outputs:
+      issue_count: ${{ steps.issue-count.outputs.count }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+      - name: Check for open issues
+        id: issue-count
+        env:
+          GITHUB_TOKEN: ${{ secrets.GH_PAT }}
+        run: |
+          issue_count=$(gh issue list --state open --limit 1000 | wc -l)
+          echo "count=$issue_count" >> $GITHUB_OUTPUT
+
+  put-metric-data:
+    runs-on: ubuntu-latest
+    if: github.event.repository.visibility == 'public'
+    timeout-minutes: 10
+    needs: [check-pr-alerts, check-issue-alerts]
+    steps:
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v2
+        with:
+          role-to-assume: ${{ secrets.RUNNER_ROLE_ARN }}
+          role-session-name: repo-monitoring-cron-session
+          aws-region: us-west-2
+
+      - name: Put PR Alert Metric Data
+        run: |
+          aws cloudwatch put-metric-data --metric-name PRAlert --namespace RepoMetrics --value ${{ needs.check-pr-alerts.outputs.pr_count }} --unit Count --dimensions ProjectName=sagemaker-hyperpod-recipes
+
+      - name: Put Issue Alert Metric Data
+        run: |
+          aws cloudwatch put-metric-data --metric-name IssueAlert --namespace RepoMetrics --value ${{ needs.check-issue-alerts.outputs.issue_count }} --unit Count --dimensions ProjectName=sagemaker-hyperpod-recipes

sagemaker_hyperpod-3.3.1/src/sagemaker/hyperpod/cli/sagemaker_hyperpod_recipes/.github/workflows/security-monitoring-cron.yml

@@ -0,0 +1,100 @@
+name: Security Monitoring
+
+on:
+  schedule:
+    - cron: '0 16 * * *'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.run_id }}
+  cancel-in-progress: true
+
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read # This is required for actions/checkout
+
+jobs:
+  check-dependabot-alerts:
+    runs-on: ubuntu-latest
+    outputs:
+      dependabot_alert_status: ${{ steps.check-dependabot-alerts.outputs.dependabot_alert_status }}
+    steps:
+      - name: Check for dependabot alerts
+        id: check-dependabot-alerts
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
+        with:
+          github-token: ${{ secrets.GH_PAT }}
+          script: |
+            async function checkAlerts() {
+              const owner = '${{ github.repository_owner }}';
+              const repo = '${{ github.event.repository.name }}';
+
+              const dependabotAlerts = await github.rest.dependabot.listAlertsForRepo({
+                owner,
+                repo,
+                headers: {
+                  'accept': 'applications/vnd.github+json'
+                }
+              });
+              const activeDependabotAlerts = dependabotAlerts.data.filter(alert => alert.state === 'open');
+              core.setOutput('dependabot_alert_status', activeDependabotAlerts.length > 0 ? '1': '0');
+            }
+            await checkAlerts();
+
+  check-code-scanning-alerts:
+    runs-on: ubuntu-latest
+    outputs:
+      code_scanning_alert_status: ${{ steps.check-code-scanning-alerts.outputs.code_scanning_alert_status }}
+    steps:
+      - name: Check for security alerts for public repository
+        id: check-code-scanning-alerts
+        if: github.event.repository.visibility == 'public'
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
+        with:
+          github-token: ${{ secrets.GH_PAT }}
+          script: |
+            async function checkAlerts() {
+              const owner = '${{ github.repository_owner }}';
+              const repo = '${{ github.event.repository.name }}';
+              const ref = 'refs/heads/main';
+
+              const codeScanningAlerts = await github.rest.codeScanning.listAlertsForRepo({
+                owner,
+                repo,
+                ref: ref
+              });
+              const activeCodeScanningAlerts = codeScanningAlerts.data.filter(alert => alert.state === 'open');
+              return activeCodeScanningAlerts.length > 0 ? '1': '0';
+            }
+            await checkAlerts();
+      - name: Set code scanning alerts output
+        id: set-code-scanning-alerts-output
+        run: |
+          if ${{ github.event.repository.visibility == 'public' }}; then
+            echo "code_scanning_alert_status=${{ steps.check-code-scanning-alerts.outputs.result }}" >> $GITHUB_OUTPUT
+          else
+            echo "code_scanning_alert_status=0" >> $GITHUB_OUTPUT
+          fi
+
+  put-metric-data:
+    runs-on: ubuntu-latest
+    needs: [check-dependabot-alerts, check-code-scanning-alerts]
+    steps:
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@12e3392609eaaceb7ae6191b3f54bbcb85b5002b
+        with:
+          role-to-assume: ${{ secrets.RUNNER_ROLE_ARN }}
+          aws-region: us-west-2
+      - name: Put Dependabot Alert Metric Data
+        run: |
+          if [ "${{ needs.check-dependabot-alerts.outputs.dependabot_alert_status }}" == "1" ]; then
+            aws cloudwatch put-metric-data --metric-name DependabotAlert --namespace SecurityMonitoringMetrics --value 1 --unit Count --dimensions ProjectName=sagemaker-hyperpod-recipes
+          else
+            aws cloudwatch put-metric-data --metric-name DependabotAlert --namespace SecurityMonitoringMetrics --value 0 --unit Count --dimensions ProjectName=sagemaker-hyperpod-recipes
+          fi
+      - name: Put Code Scanning Alert Metric Data
+        run: |
+          if [ "${{ needs.check-code-scanning-alerts.outputs.code_scanning_alert_status }}" == "1" ]; then
+            aws cloudwatch put-metric-data --metric-name CodeScanningAlert --namespace SecurityMonitoringMetrics --value 1 --unit Count --dimensions ProjectName=sagemaker-hyperpod-recipes
+          else
+            aws cloudwatch put-metric-data --metric-name CodeScanningAlert --namespace SecurityMonitoringMetrics --value 0 --unit Count --dimensions ProjectName=sagemaker-hyperpod-recipes
+          fi

sagemaker_hyperpod-3.3.1/src/sagemaker/hyperpod/cli/sagemaker_hyperpod_recipes/.github/workflows/unit-test-runner-push.yml

@@ -0,0 +1,32 @@
+name: Python Unit Test CI After Commit
+
+on:
+  push:
+    branches:
+      - main # Triggers on direct pushes to the main branch
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+        with:
+          submodules: recursive # Checkout submodules as well
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.8' # Set python version to 3.8
+
+      - name: Install unit test dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -r launcher/nemo/nemo_framework_launcher/requirements.txt
+          pip install pytest
+          pip install pytest-cov
+
+      - name: Run unit tests
+        run: |
+          python -m pytest