KT: changes needed for cve_remediation automation in github action

[roxanan1996]

It started from needing a way to list the kernels we support.

kt list-kernels

but cbr7.9 and fipslegacy are not fully automated.
This is how I came up with an extra flag automated.

For cve remediation automation, the user will be ciq_kernel_automation.
And not the system one. To make it possible, user is now configurable. By default it will be taken from env var USER.

Last thing required to use kt in a github action was to make sure the files under ktlib/data are accessible when kt is installed as a package.

[Copilot]

Pull request overview

Adds support for filtering kernel listings to “automated” targets and ensures YAML data files are packaged so kt works reliably in GitHub Actions.

Changes:

• Package kt/data/*.yaml into the wheel/sdist via setuptools configuration.
• Introduce an automated attribute in kernel metadata and expose --automated/-a in kt list-kernels.
• Replace direct $USER lookups with config.user in VM/cloud-init and workspace paths.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
pyproject.toml	Includes YAML package data so runtime loading works in CI/GitHub Actions.
kt/ktlib/vm.py	Uses configured user instead of $USER when generating cloud-init.
kt/ktlib/kernels.py	Adds automated flag to kernel metadata model.
kt/ktlib/kernel_workspace.py	Uses configured user instead of $USER during workspace setup.
kt/ktlib/config.py	Adds user to config and adjusts path coercion logic accordingly.
kt/data/kernels.yaml	Adds automated markers per kernel; removes an older fips entry.
kt/commands/list_kernels/impl.py	Adds filtering and stable sorting by kernel name.
kt/commands/list_kernels/command.py	Adds --automated/-a CLI option and updates epilog examples.

Comments suppressed due to low confidence (1)

kt/ktlib/config.py:1

• Config.DEFAULT still uses os.environ["USER"], which will raise KeyError in environments where USER isn’t set (common in GitHub Actions), undermining the goal of making the tool CI-friendly. Use a safer default (e.g., os.environ.get("USER"), getpass.getuser(), or a documented fallback) and keep config.user as the single source of truth.

import json

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[PlaidCat]

[bmastbergen]

🥌