FreeOnePlus opened a new pull request, #133: URL: https://github.com/apache/doris-mcp-server/pull/133
## Summary - replace inline Compose passwords with ignored host-backed secrets and fail closed on missing or ambiguous secret configuration - remove fixed legacy token and Basic credentials from runtime authentication - pin Python, Doris, Redis, Prometheus, Grafana, and nginx images to explicit versions and immutable digests - update the bundled Doris images and mounts, and let Docker allocate a non-conflicting bridge subnet - redact real-integration passwords from pytest object representations and document secure Compose setup ## Testing - `uv run pytest -q`: 622 passed, 64 skipped - real Doris matrix: 7 passed across Streamable HTTP and true subprocess Stdio, including independent FE/BE HTTP endpoints - built and ran the pinned Docker image against real Doris; `/live` and `/ready` passed - unauthenticated MCP request returned 401; secret-backed Bearer token completed `SELECT 1` - verified fail-closed startup for missing and conflicting secret configuration - verified Compose secret mounts, Redis authentication, and automatic non-conflicting network allocation - `uv lock --check`, compileall, Bandit, dependency consistency, and `uv build` passed - audited wheel, sdist, and image contents for local reports, ledgers, secrets, tokens, and coverage artifacts -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
