Skip to content

Commit 3bae28e

Browse files
authored
chore(server): add provenance to toolhive-doc-mcp entries (#1226)
Add the sigstore/cosign signing identity block to both the official and toolhive registry entries for toolhive-doc-mcp. Images were already being signed keylessly from StacklokLabs/toolhive-doc-mcp release.yml; this just records the expected identity so the catalog's verifier can check it. Verified locally with: catalog update-metadata --verify-provenance. Signed-off-by: Dan Barr <6922515+danbarr@users.noreply.github.com> Co-authored-by: Dan Barr <6922515+danbarr@users.noreply.github.com>
1 parent 1ab5308 commit 3bae28e

2 files changed

Lines changed: 14 additions & 0 deletions

File tree

registries/official/servers/toolhive-doc-mcp/server.json

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,13 @@
99
"stars": 3
1010
},
1111
"overview": "## ToolHive Docs MCP Server\n\nThe toolhive-doc-mcp server allows you to search ToolHive documentation for help with using and contributing to the project (local version). The system maintains a pre-built SQLite vector database containing documentation that undergoes parsing, chunking, and embedding using a local bge-small-en-v1.5 model. When queried, it performs semantic search by comparing queries against stored embeddings to return relevant documentation chunks.",
12+
"provenance": {
13+
"cert_issuer": "https://token.actions.githubusercontent.com",
14+
"repository_uri": "https://github.com/StacklokLabs/toolhive-doc-mcp",
15+
"runner_environment": "github-hosted",
16+
"signer_identity": "/.github/workflows/release.yml",
17+
"sigstore_url": "tuf-repo-cdn.sigstore.dev"
18+
},
1219
"status": "Active",
1320
"tags": [
1421
"docs",

registries/toolhive/servers/toolhive-doc-mcp/server.json

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,13 @@
99
"stars": 3
1010
},
1111
"overview": "## ToolHive Docs MCP Server\n\nThe toolhive-doc-mcp server allows you to search ToolHive documentation for help with using and contributing to the project (local version). The system maintains a pre-built SQLite vector database containing documentation that undergoes parsing, chunking, and embedding using a local bge-small-en-v1.5 model. When queried, it performs semantic search by comparing queries against stored embeddings to return relevant documentation chunks.",
12+
"provenance": {
13+
"cert_issuer": "https://token.actions.githubusercontent.com",
14+
"repository_uri": "https://github.com/StacklokLabs/toolhive-doc-mcp",
15+
"runner_environment": "github-hosted",
16+
"signer_identity": "/.github/workflows/release.yml",
17+
"sigstore_url": "tuf-repo-cdn.sigstore.dev"
18+
},
1219
"status": "Active",
1320
"tags": [
1421
"docs",

0 commit comments

Comments
 (0)