stacklok / toolhive

47%

main: 49%

LAST BUILD ON BRANCH feature/oidc-env-secret-support-clean

branch: feature/oidc-env-secret-support-clean

CHANGE BRANCH

x

Reset

• feature/oidc-env-secret-support-clean
• 2012-respect-x-forwarded
• 2023-inbound-network-permissions
• 2160-podman-mac
• accessor-helper-package
• add-anonymous-usage-metrics
• add-claude-agents
• add-ginkgolinter
• add-grafana-cli-example
• add-groups
• add-insecure-http-oidc-support
• add-k8s-export-format
• add-mcp-meta-field-support
• add-mcpgroup-proposal
• add-netwok-isolation-examples
• add-oidc-resolver
• add-proxy-logs-endpoint
• add-registry-groups-cli-support
• add-remote-mcp-e2e-tests
• add-stackers
• add-ubi-latest-tag
• add-vmcp-host-port-flags
• add-vulncheck
• add_vmcp_config
• adds-auth-runconfig
• adds-codecov-exclusions
• adds-global-config-otel
• adds-missing-tests
• adds-tests
• alternative-workaround
• api-proxy-port
• auth-refactored
• authenticated-token-source-monitoring
• auto-add-remote-server-to-clients
• bad_example
• bearer_token_util
• bump-go-1-25-3
• change-codecov
• change-default-proxy-mode-streamable-http
• change-default-proxy-mode-to-streamable-http
• change-otel-metric-defaults
• chore/change-renovate-commit-msg
• chore/ci-task-ensure-docs-proposal-names-format
• chore/decouple-transport-from-runtime
• chore/e2e-labels-matrix
• chore/fix-thv-2207-proposal-name
• chore/move-testkit-under-test
• chore/refactor-runconfig-builder-into-options
• chore/refactor-runconfigbuilder-to-option
• chore/rename-design-docs
• chore/use-testkit-client
• ci-tidy-names
• ci/add-renovate-config-validation
• claude-commands_2025-10-21
• claude-helm
• claude-helm-skill
• claude/issue-1452-20250827-1021
• claude/issue-2119-20251008-1230
• claude/issue-2385-20251030-1527
• claude/issue-2507-20251107-1918
• claude_skills
• concurrent-restart-keyring-race-condition
• config-refactor-phase2-validation
• configure-telemetry-namespace
• consistent-workload-naming
• containerfile-preflight
• continue-vmcp-crd
• corrects-errors
• cosign_bundle_signing
• coveralls
• decouple-configmap-operator
• default-callback-port
• dependabot/github_actions/github/codeql-action-4
• dependabot/go_modules/github.com/lestrrat-go/jwx/v3-3.0.11
• dependabot/go_modules/github.com/olekukonko/tablewriter-1.1.0
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.22.1
• deprecated-fields
• disable-selinux-labeling
• docs-update-remote-auth
• docs/add-mcpgroup-to-operator-arch
• docs/arch
• docs/clarify-docs-file-name-format
• docs/operator-e2e-tests-and-task-improvements
• docs/runconfig-proposal
• docs/runtime-authoring-guide
• docs/update-go-version
• docs/update-middleware-documentation
• domain-model-diagram
• downgrade-go-1.24
• drop-test-silent
• enable-configmap
• enforce-structured-logs-k8s
• ensure-version-output
• envtest_pin
• exclude-mocks
• export-detail-api-inconsistencies
• external-auth-controller-impl
• feat/add-continue-client
• feat/add-e2e-tests-for-tool-override-1515
• feat/add-proxy-mode-to-workload-api
• feat/add-tool-middleware-config-to-cli
• feat/add-tool-middleware-config-to-http-api
• feat/add_virtualmcpcompositetooldefinition_crd
• feat/add_vmcp_status
• feat/config-field-framework
• feat/improve-client-config-file-logic
• feat/issue-1638-configmap
• feat/issue-1638-state-storage
• feat/k8s-configmap-runconfig-1638
• feat/mcp-server-secrets-management
• feat/operator-audit-config
• feat/operator-authz-configmap
• feat/otel-use-config-framework
• feat/private-package-registries-proposal
• feat/restart-mcpserver-annotation-1880
• feat/session-storage-http-streaming
• feat/session-storage-interface-phase2
• feat/session-storage-pluggable
• feat/telemetry-tool-error-capture
• feat/token-exchange-env-var
• feat/update-mcp-parser-latest-spec
• feat/vmcp-routing-interfaces
• feat/vmcp_binary
• feat/vmcp_controller_tests
• feat/vmcp_crd
• feat/vmcp_k8s_controller
• feat/vmcp_service
• feat/vmcp_status_collector
• feature/add-mcpremoteproxy-crd
• feature/docker-workload-tests
• feature/github-oauth-provider
• feature/increase-session-ttl
• feature/mcpremoteproxy-implementation
• feature/remove-info-logger
• feature/secretkeyref-oidc
• feature/telemetry-configmap-support
• feature/toolconfig-crd
• fix--registry-remote-server-running
• fix-2466-auth-constants
• fix-api-timeout-large-images
• fix-atlassian-issuer-mismatch
• fix-auditor-middleware-transport
• fix-auth-flags-for-registry
• fix-chainsaw-install_2025-10-21
• fix-dashboard-uid
• fix-double-pod
• fix-duplicate-listing
• fix-duplicate-operator-e2e-runs
• fix-duplicate-workload
• fix-flacky-tests
• fix-git-test-race-condition
• fix-goreleaser
• fix-group-case-insensitive
• fix-host-networking
• fix-info-output
• fix-inspector
• fix-issuer
• fix-linter-cyclomatic-complexity
• fix-mcpremoteproxy-health-probe-timing
• fix-mkp-example
• fix-oauth-issuer-discovery
• fix-oauth-secret-empty-check
• fix-operator-datarace-logger
• fix-proxy-mode
• fix-releaser-warns
• fix-remote-servers-tests
• fix-renovate-kindest-node-patch-only
• fix-runconfig-save-race-condition-on-workload-edit
• fix-scopes-type
• fix-serviceaccount-configmap-mode
• fix-silent
• fix-staticcheck-nil-pointer
• fix-stdio-tests
• fix-thvignore-tmpcopyup
• fix-vmcp-health-test-flakiness
• fix-vmcp-name-mapping-conflict-resolution
• fix-vmcp-schema-double-nesting
• fix-warns
• fix/2314-mcpremoteproxy-reconcile-spec-changes
• fix/ci-security-scan-workflow
• fix/ct-install-all-charts
• fix/egress-proxy-arm64-build
• fix/env-var-nil-pointer-1469
• fix/fix-authz-middleware-tools-list
• fix/fix-authz-tools-list
• fix/flaky-registry-api-image-test
• fix/issue-1874-proxy-mode
• fix/issue-1957-oidc-issuer-mismatch
• fix/jsonschema-v6-upgrade
• fix/log-middleware-names
• fix/mcpserver-auth-audit-persistence
• fix/mcpserver-crd-size-reduction
• fix/mcpserver-remote-path
• fix/middleware-flusher-interface
• fix/operator-context-aware-logging
• fix/otel-insecure-config
• fix/proxy-mode-sse-label
• fix/proxyrunner-tools-override-middleware
• fix/remove-pointer-to-interface-2169
• fix/renovate-kindest-node-patch-only
• fix/set-correct-content-length
• fix/tool-middleware-connection-hang
• fix/tool-middleware-json-buffer-flushes
• fix/wait-for-initialize-before-client-update
• fix/zombie-supervisor-processes
• fix_ci
• fix_git_clone
• fix_registy_api
• fix_used_port
• fixes-flaky-order-assertion
• fixes-flaky-test
• fixes-mocks
• fixes-release
• fixes-tests
• go-24-dev-guide
• go-mod-tidy
• golang-build-ubi
• google-oauth
• goose
• groups-crd-storage
• groups-registry-alt
• groups-registry-proposal
• hack/fix-mcp-port-host-network-linux
• helm-chart-contributing
• hide-coverage
• identity-unify
• ignore-coverage
• implement-proper-health-checks
• implements-providers-strategies
• improve-test-coverage-and-fix-label-validation
• inherit-secret-codecov
• inline-crds
• installs-go-claude
• int-tests
• integration-tests-fix
• issue-1638-add-configmap-flag
• issue-1638-add-proxymode
• issue-1638-configmap-add-audit
• issue-1638-configmap-add-authn
• issue-1638-configmap-add-authz
• issue-1638-configmap-use
• issue-1638-use-configmap
• issue-1696-v1
• issue-1700
• issue-1717
• issue-1871
• issue-1873
• issue-1873-v1
• issue-1898
• issue-1941
• issue-1947
• issue-2114
• issue-2114-telemetry
• issue-2117
• issue-2166
• issuer-mistmatch
• jaosorior/vmcp-composition-workflow-engine
• jesseo.colima-runtime-support
• k8s-groups_2025-10-15
• k8s_and
• k8s_registry
• kill-patch-coverage
• lint-cache
• lint-fix
• lock-file-cleanup
• main
• maintainers
• mcp-optimizer-hide
• merge-integration-tests
• meta-mcp-in-registry
• migrate-pid-files
• migrate-pid-files-iii
• migrate_oauth_config
• misc
• missed-main-test
• mockgen-install
• move-crds-to-crds-directory
• move-workload-update-logic-into-manager
• moves-configmap-retrieval
• moves-tool-config
• multiple-rm-arguments
• multiple-rm-stop-arguments
• network-isolation-e2e
• op-img-micro-to-minimal
• operator-build-epel10-golang-update
• optimize-e2e-workflow-binary-build
• otel-custom-attributes
• otel-defaults
• otel-example
• path-clean-windows-destination
• pid-in-state-file
• pid-in-state-file-ii
• pins-envtest
• poc
• port-examples
• prm_discovery
• prm_with_path
• proposal-mcp-registry-upstream-support
• proposal/deployment-architecture-k8s
• proposal/dynamic-webhook-middleware
• proposal/operator-valkey-integration
• proposal/remote-mcp-proxy
• proposal/virtual-mcp-server
• refactor-rbac-operator
• refactor-status-collector
• refactor-telemetry
• refactor-telemetry-runconfog
• refactor/auth-resolution-logic
• refactor/ca-cert-config-pattern
• refactor/consolidate-oauth-package
• refactor/docker-api-adapter-tests
• refactor/extract-common-controller-helpers
• refactor/move-remote-auth-to-auth-package
• refactor/phase1-extract-common-helpers
• refactor/use-defaultAuthzKey-constant
• refactor_proposal
• registry-docs
• registry-groups-updated
• registry_apisource
• registry_cm
• registry_crds
• registry_filter
• registry_fix_sync
• registry_githandler
• registry_no_serverCount
• registry_promote
• registry_sync
• registry_tests
• reinstate-stale-config-fix
• releaser-thv-fix
• remote-mcp-server-restart-fix
• remote-server-apis
• remote-server-proxy-url-in-list
• remote-workload-spurious-warning
• remove-flag-driven-oidc
• remove-get-claims-from-context
• remove-old-status-methods
• remove-registry-api
• remove-secret-provider-depdendency
• removes-binary
• removes-flag-driven-config-more
• removes-flag-driven-config-patch
• removes-not-allowed-item
• removes-unused-flags
• renovate/actions-download-artifact-digest
• renovate/actions-setup-go-6.x
• renovate/actions-setup-python-6.x
• renovate/add-kindest-node-patch-updates
• renovate/alpine-3.x
• renovate/anchore-sbom-action-0.x
• renovate/anthropics-claude-code-action-digest
• renovate/docker-login-action-3.x
• renovate/docker-metadata-action-5.x
• renovate/dockerfile-template-base-images
• renovate/github-codeql-action-4.x
• renovate/github.com-cedar-policy-cedar-go-1.x
• renovate/github.com-charmbracelet-bubbletea-1.x
• renovate/github.com-charmbracelet-lipgloss-2.x
• renovate/github.com-docker-docker-28.x
• renovate/github.com-go-git-go-git-v5-5.x
• renovate/github.com-gofrs-flock-0.x
• renovate/github.com-lestrrat-go-jwx-v3-3.x
• renovate/github.com-mark3labs-mcp-go-0.x
• renovate/github.com-olekukonko-tablewriter-1.x
• renovate/github.com-onsi-ginkgo-v2-2.x
• renovate/github.com-prometheus-client_golang-1.x
• renovate/github.com-santhosh-tekuri-jsonschema-v5-6.x
• renovate/github.com-sigstore-sigstore-go-1.x
• renovate/github.com-sigstore-sigstore-go-digest
• renovate/github.com-spf13-pflag-1.x
• renovate/github.com-spf13-viper-1.x
• renovate/golang.org-x-exp-jsonrpc2-digest
• renovate/golang.org-x-mod-0.x
• renovate/golang.org-x-net-0.x
• renovate/golang.org-x-oauth2-0.x
• renovate/golang.org-x-sync-0.x
• renovate/golang.org-x-sys-0.x
• renovate/golang.org-x-term-0.x
• renovate/golang.org-x-time-0.x
• renovate/golangci-golangci-lint-action-9.x
• renovate/helm-chart-testing-action-2.x
• renovate/helm-kind-action-1.x
• renovate/helm-kind-action-digest
• renovate/k8s.io-utils-digest
• renovate/kindest-node-1.x
• renovate/kubernetes-go
• renovate/major-dockerfile-template-base-images
• renovate/major-github-artifact-actions
• renovate/python-3.x
• renovate/registry.access.redhat.com-ubi10-go-toolset-10.x
• renovate/registry.access.redhat.com-ubi10-ubi-10.x
• renovate/registry.access.redhat.com-ubi10-ubi-micro-10.x
• renovate/registry.access.redhat.com-ubi10-ubi-minimal-10.x
• renovate/sigs.k8s.io-controller-runtime-0.x
• renovate/sigstore-cosign-installer-3.x
• renovate/sigstore-cosign-installer-4.x
• research-67
• revert-accidental-merge
• revert_py3.14
• reverts-cosign-installer-bump
• reverts-mocks
• rfc8707
• rm-dependabot
• skills-mcp
• skip-mocks
• spec-generation
• sse-channel-full
• state-management-bug
• stop-reading-pid-files-tests
• support-colima
• task-test-fail-only
• telemetry-providers
• telemetry-refactor
• test/add-testkit
• test/docker-high-roi
• test/token-exchange-integration
• tests/docker-runtime-query-coverage
• thv-proxy-swap
• thv-registry-api
• thv-registry-api-file
• thv-registry-deploy-from-controller
• thv-registry-enforce
• thv-te-cli
• thv-te-iface
• thv-te-mware
• thv-te-proposal
• thv-vmcp-te
• tracing-operatpr
• trae-ide-client
• transport-mock
• typo
• unified-workload-manager
• update-claude-code-action
• update-docs-workflow
• update-inspector
• update-k8s-examples
• update-k8s-test-versions
• update-maintainers
• update-task-helm-deployment
• update-upstream-registry-schema
• upgrade-go
• use-new-update-url
• use-status-file-for-pids
• use_thv_client_secret
• validate-group-case
• validate_headers
• vault-annotations
• vault-te-proposal
• vault_fix
• vmcp-capability-merging-routing
• vmcp-conflict-resolution
• vmcp-partial-capabilities
• vmcp-server-shutdown-error
• vmcp/add-cache-and-registry-tests
• vmcp/capability-discovery
• vmcp/cli-serve-command-and-session-management
• vmcp_auth
• vmcp_out_strategies
• work-around-stale-config
• workload-manager-tests
• wrong-place

Build # 18784949071

Build Type

Pull #2325

github

Committed by web-flow

Commit Message

Merge 23ef2c330 into 374b73b8c

Pull Request Pull Request #2325: Add environment variable support for OIDC client secret

Run Details

2 of 4 new or added lines in 1 file covered. (50.0%)

7 existing lines in 2 files now uncovered.

18759 of 39753 relevant lines covered (47.19%)

15.54 hits per line