stacklok / toolhive / 28858798601

push

github

Fix TOOLHIVE_DEV plain HTTP breaking real OCI registry pulls (#5735)

When TOOLHIVE_DEV=true, plain HTTP was enabled for all OCI pulls.
Real registries like ghcr.io redirect HTTP to HTTPS, and oras-go
blocks the auth handshake across that redirect, causing bare 401s.

Use plain HTTP only for loopback hosts via a dispatcher client.

Co-authored-by: Cursor <cursoragent@cursor.com>

5 of 27 new or added lines in 1 file covered. (18.52%)

72991 of 107526 relevant lines covered (67.88%)

64.69 hits per line