19681943862
51%

Ran 25 Nov 2025 07:40PM UTC

Jobs 1

Files 381

Run time 1min

Badge

Embed ▾

Committed 25 Nov 2025 07:39PM UTC coverage: 49.262%. Remained the same

Build # 19681943862

Build Type

push

github

Committed by

web-flow

Commit Message

Add proposal for custom package mirror support (#2732)

* Add proposal for custom package mirror support

This proposal introduces support for configuring custom package mirrors
for protocol builds (npx://, uvx://, go://). Organizations operating in
restricted network environments can now configure ToolHive to use
internal, approved mirrors instead of public registries.

Signed-off-by: Juan Antonio Osorio <ozz@stacklok.com>

* Rename proposal file to include PR number

Signed-off-by: Juan Antonio Osorio <ozz@stacklok.com>

* Simplify proposal to use general build-env mechanism

Remove convenience aliases for package mirrors in favor of a simpler,
more general approach using build-env directly.

* Use UV_DEFAULT_INDEX instead of deprecated UV_INDEX_URL

* Fix dry-run example to use 'thv build' instead of 'thv run'

* Add security section for value escaping and injection safety

Address review feedback about validating values for shell escape
vulnerabilities. Add guidance on escaping double quotes, shell
metacharacters, and restricting potentially dangerous characters.

---------

Signed-off-by: Juan Antonio Osorio <ozz@stacklok.com>

Run Details

24894 of 50534 relevant lines covered (49.26%)

61.1 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	19681943862.1	25 Nov 2025 07:40PM UTC	381	49.26	GitHub Action Run

stacklok / toolhive / 19681943862
51%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 19681943862

stacklok / toolhive / 19681943862 51%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 19681943862

stacklok / toolhive / 19681943862
51%

README BADGES
x