stacklok / toolhive / 32853418747

71%

Build Type

push

github

Committed by web-flow

Commit Message

Merge commit from fork

Package names from npx://, uvx:// and go:// references were interpolated
into Dockerfile RUN instructions without validation. Constrain them to a
character class that excludes shell metacharacters, and quote the two
remaining bare interpolations in the templates.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

Coverage Stats

13 of 13 new or added lines in 1 file covered. (100.0%)

60 existing lines in 4 files now uncovered.

74846 of 107942 relevant lines covered (69.34%)

88.82 hits per line