Harden MCP registry publication (#3389)

This commit is contained in:
zhifu gao
2026-07-23 12:02:35 +08:00
committed by GitHub
parent 8c299df62b
commit 147a132cf7
3 changed files with 22 additions and 2 deletions
+2 -2
View File
@@ -3,7 +3,7 @@
"name": "io.github.modelscope/funasr-mcp",
"title": "FunASR",
"description": "Transcribe local audio with FunASR and SenseVoice using private, on-device inference.",
"version": "0.1.0",
"version": "0.1.1",
"websiteUrl": "https://github.com/modelscope/FunASR/tree/main/examples/mcp_server",
"repository": {
"url": "https://github.com/modelscope/FunASR",
@@ -14,7 +14,7 @@
"packages": [
{
"registryType": "oci",
"identifier": "ghcr.io/modelscope/funasr-mcp:0.1.0",
"identifier": "ghcr.io/modelscope/funasr-mcp:0.1.1",
"runtimeHint": "docker",
"runtimeArguments": [
{
@@ -97,6 +97,10 @@ class MCPRegistryMetadataTest(unittest.TestCase):
self.assertIn("docker/build-push-action@v7", workflow)
self.assertIn("docker/setup-buildx-action@v4", workflow)
self.assertIn("docker/login-action@v4", workflow)
self.assertIn("continue-on-error: true", workflow)
self.assertIn("Verify the versioned image is publicly pullable", workflow)
self.assertIn("scope=repository:modelscope/funasr-mcp:pull", workflow)
self.assertIn("https://ghcr.io/v2/modelscope/funasr-mcp/manifests/${IMAGE_VERSION}", workflow)
self.assertNotIn("actions/checkout@v4", workflow)
self.assertNotIn("actions/setup-python@v5", workflow)
self.assertNotIn("docker/build-push-action@v6", workflow)