1
51%
main: 51%

Ran 25 Nov 2025 07:40PM UTC

Files 381

Run time 19s

Badge

Embed ▾

Committed 25 Nov 2025 07:39PM UTC coverage: 49.262%. Remained the same

Job # 19681943862.1

Build Type

push

github

Committed by

web-flow

Commit Message

Add proposal for custom package mirror support (#2732)

* Add proposal for custom package mirror support

This proposal introduces support for configuring custom package mirrors
for protocol builds (npx://, uvx://, go://). Organizations operating in
restricted network environments can now configure ToolHive to use
internal, approved mirrors instead of public registries.

Signed-off-by: Juan Antonio Osorio <ozz@stacklok.com>

* Rename proposal file to include PR number

Signed-off-by: Juan Antonio Osorio <ozz@stacklok.com>

* Simplify proposal to use general build-env mechanism

Remove convenience aliases for package mirrors in favor of a simpler,
more general approach using build-env directly.

* Use UV_DEFAULT_INDEX instead of deprecated UV_INDEX_URL

* Fix dry-run example to use 'thv build' instead of 'thv run'

* Add security section for value escaping and injection safety

Address review feedback about validating values for shell escape
vulnerabilities. Add guidance on escaping double quotes, shell
metacharacters, and restricting potentially dangerous characters.

---------

Signed-off-by: Juan Antonio Osorio <ozz@stacklok.com>

Run Details

24894 of 50534 relevant lines covered (49.26%)

61.1 hits per line

stacklok / toolhive / 19681943862 / 1
51%
main: 51%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 19681943862.1

stacklok / toolhive / 19681943862 / 1 51% main: 51%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 19681943862.1

stacklok / toolhive / 19681943862 / 1
51%
main: 51%

README BADGES
x