Move PIP_ROOT_USER_ACTION from container.env to job-level env

The pip root-user warning was still appearing because actions/setup-python
runs its internal "pip upgrade" on the host runner, not inside the
container. Container-level env vars are invisible to host-side actions.
Moving PIP_ROOT_USER_ACTION to the job-level env block makes it available
to both host-side actions (setup-python) and container-side run steps.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: leofang

.github/workflows/coverage.yml

@@ -43,6 +43,10 @@ jobs:
       HOST_PLATFORM: "linux-64"
       ARCH: "x86_64"
       CUDA_VER: ${{ needs.coverage-vars.outputs.CUDA_VER }}
+      # Suppress pip warnings in container jobs running as root.
+      # This must be at the job level (not container.env) so that actions
+      # running on the host (e.g. setup-python's internal pip upgrade) also see it.
+      PIP_ROOT_USER_ACTION: "ignore"
     # Our self-hosted runners require a container
     # TODO: use a different (nvidia?) container
     container:
@@ -51,7 +55,6 @@ jobs:
       env:
         NVIDIA_VISIBLE_DEVICES: ${{ env.NVIDIA_VISIBLE_DEVICES }}
         PIP_CACHE_DIR: "/tmp/pip-cache"
-        PIP_ROOT_USER_ACTION: "ignore"
     steps:
       - name: Ensure GPU is working
         run: nvidia-smi

.github/workflows/test-wheel-linux.yml

@@ -78,6 +78,11 @@ jobs:
     runs-on: "linux-${{ matrix.ARCH }}-gpu-${{ matrix.GPU }}-${{ matrix.DRIVER }}-${{ matrix.GPU_COUNT }}"
     # The build stage could fail but we want the CI to keep moving.
     if: ${{ github.repository_owner == 'nvidia' && !cancelled() }}
+    env:
+      # Suppress pip warnings in container jobs running as root.
+      # This must be at the job level (not container.env) so that actions
+      # running on the host (e.g. setup-python's internal pip upgrade) also see it.
+      PIP_ROOT_USER_ACTION: "ignore"
     # Our self-hosted runners require a container
     # TODO: use a different (nvidia?) container
     container:
@@ -86,7 +91,6 @@ jobs:
       env:
         NVIDIA_VISIBLE_DEVICES: ${{ env.NVIDIA_VISIBLE_DEVICES }}
         PIP_CACHE_DIR: "/tmp/pip-cache"
-        PIP_ROOT_USER_ACTION: "ignore"
     steps:
       - name: Ensure GPU is working
         run: nvidia-smi