• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

stacklok / toolhive / 19900287993
59%

Build:
DEFAULT BRANCH: main
Ran 03 Dec 2025 04:07PM UTC
Jobs 1
Files 391
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

03 Dec 2025 04:01PM UTC coverage: 49.931% (-0.2%) from 50.113%
19900287993

push

github

web-flow
Add --from-secret and --from-env flags to set-build-env (#2860)

Implement secure credential handling for build environment variables
during protocol builds (npx://, uvx://, go://). This allows users to
reference ToolHive secrets or shell environment variables instead of
storing sensitive values in the configuration file.

New features:
- `--from-secret`: Reference a ToolHive secret by name, validated at
  configuration time, resolved at build time
- `--from-env`: Read value from shell environment at build time

Configuration model:
- BuildEnvFromSecrets: maps env var names to secret names
- BuildEnvFromShell: list of env var names to read from shell

Security:
- No sensitive values stored in config file
- Secret values validated against dangerous characters
- Multi-stage builds ensure credentials don't leak to final image

Example usage:
  thv secret set npm-registry "https://:token@npm.corp.example.com"
  thv config set-build-env --from-secret NPM_CONFIG_REGISTRY npm-registry
  thv config set-build-env --from-env GITHUB_TOKEN

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>

120 of 449 new or added lines in 5 files covered. (26.73%)

7 existing lines in 3 files now uncovered.

26168 of 52408 relevant lines covered (49.93%)

57.11 hits per line

New Missed Lines in Diff

Lines Coverage ∆ File
18
89.94
-10.06% pkg/config/buildenv.go
46
32.32
-3.6% pkg/runner/protocol.go
72
46.84
-20.44% pkg/config/interface.go
81
0.0
0.0% pkg/config/mocks/mock_provider.go
112
17.03
-0.25% cmd/thv/app/config_buildenv.go

Uncovered Existing Lines

Lines Coverage ∆ File
1
32.32
-3.6% pkg/runner/protocol.go
3
17.03
-0.25% cmd/thv/app/config_buildenv.go
3
72.39
-1.12% pkg/ignore/processor.go
Jobs
ID Job ID Ran Files Coverage
1 19900287993.1 03 Dec 2025 04:07PM UTC 391
49.93
GitHub Action Run
Source Files on build 19900287993
  • Tree
  • List 391
  • Changed 7
  • Source Changed 6
  • Coverage Changed 7
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Github Actions Build #19900287993
  • 0306e9c3 on github
  • Prev Build on main (#19899285358)
  • Next Build on main (#19900295274)
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc