stacklok / toolhive / 23250766151

64%

Build Type

push

github

Committed by web-flow

Commit Message

Validate RuntimeConfig fields at all entry points (#4196)

RuntimeConfig values (AdditionalPackages and BuilderImage) are
interpolated into Dockerfile templates. Add input validation to
harden these fields against malformed or unexpected values.

Add a Validate() method on RuntimeConfig that checks package names
against a strict allowlist regex and validates builder images using
go-containerregistry's ParseReference. Call Validate() at all entry
points: CLI flags, API requests, config file loading, and the
runtime config loader in the runner package.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Run Details

30 of 69 new or added lines in 4 files covered. (43.48%)

316 existing lines in 4 files now uncovered.

49474 of 77015 relevant lines covered (64.24%)

151.4 hits per line