1
66%
main: 66%

Ran 16 Apr 2026 12:30PM UTC

Files 631

Run time 18s

Badge

Embed ▾

Committed 16 Apr 2026 12:24PM UTC coverage: 66.01% (-0.05%) from 66.056%

Job # 24510042617.1

Build Type

push

github

Committed by

web-flow

Commit Message

Use scoped secrets provider for registry auth (#4893)

After secret scope migration runs, registry tokens are moved from bare
keys (REGISTRY_OAUTH_*) to the scoped namespace (__thv_registry_*).
The factory and API login/logout handlers were still using the bare
provider, so token lookups failed after migration and returned 401.

Switch factory.go and the API registry auth handler to use
CreateProvider with WithScope(ScopeRegistry). ScopedProvider.GetSecret
falls back to bare keys during the migration window, and all new
reads/writes go through the scoped namespace consistently.

Also fix EncryptedManager.DeleteSecret to return ErrSecretNotFound
(matching GetSecret) so callers relying on IsNotFoundError handle
delete-not-found correctly.

Fix #4892

Coverage Stats

57254 of 86735 relevant lines covered (66.01%)

62.85 hits per line

stacklok / toolhive / 24510042617 / 1
66%
main: 66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 24510042617.1

stacklok / toolhive / 24510042617 / 1 66% main: 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 24510042617.1

stacklok / toolhive / 24510042617 / 1
66%
main: 66%

README BADGES
x