docs: correct incorrect package and image references in ADR-025 and altk README - #6788
Merged
ja8zyjits merged 2 commits intoSep 14, 2026
Merged
Conversation
brian-hussey
requested review from
Lang-Akshay,
crivetimihai,
ja8zyjits and
msureshkumar88
as code owners
September 11, 2026 13:51
Collaborator
|
@brian-hussey |
Member
Author
Yes, this is a reference to a incorrect package or container image name and is still a risk in our documentation even if it's a historical or theoretical. I've pinged you about this as well @ja8zyjits, thanks. |
…ltk README ADR-025 (superseded, retained for historical record) contained docker run and pip install references that were incorrect and posed a potential security concern. Retroactively corrected to canonical references and added notes clarifying these are historical commands only. plugins/altk_json_processor/README.md contained an incorrect pip install package name. Corrected to the canonical mcp-contextforge-gateway[altk]. Fixes: #75, #76 (brian-hussey/workflow_mgr) Signed-off-by: Brian Hussey <brian.hussey@ie.ibm.com>
brian-hussey
force-pushed
the
fix/security-incorrect-package-image-refs-in-docs
branch
from
September 11, 2026 14:03
e9d2cce to
9221587
Compare
gandhipratik203
previously approved these changes
Sep 11, 2026
gandhipratik203
left a comment
gandhipratik203
left a comment
Collaborator
There was a problem hiding this comment.
Looks good to me. I have added is a inline suggestion comment, non blocking for this PR.
brian-hussey
marked this pull request as draft
September 11, 2026 15:47
…Dockerfiles Replace 'mcpgateway' and 'mcp-gateway' (non-existent PyPI packages) with the canonical 'mcp-contextforge-gateway' in Dockerfile examples in: - docs/docs/using/mcpgateway-translate.md - docs/docs/using/reverse-proxy.md Partially addresses internal issue #625. Signed-off-by: Brian Hussey <brian.hussey@ie.ibm.com>
brian-hussey
dismissed stale reviews from gandhipratik203 and ja8zyjits
via
September 11, 2026 16:35
f4e99ef
brian-hussey
marked this pull request as ready for review
September 11, 2026 16:38
ja8zyjits
deleted the
fix/security-incorrect-package-image-refs-in-docs
branch
September 14, 2026 09:41
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Retroactively corrects documentation files that contained incorrect package and container image references. These references posed a potential security concern and have been corrected to the canonical values.
Partially addresses internal issue #625.
Changes
docs/docs/architecture/adr/025-granian-http-server.mddocker runexamples to use the canonicalghcr.io/ibm/mcp-context-forge:latestimagepip installreference to use the canonicalmcp-contextforge-gateway[granian]package name!!! noteadmonitions after both blocks clarifying this is a superseded historical ADR, that the references were incorrect and have been retroactively corrected for security reasons, and that readers should consult current documentationplugins/altk_json_processor/README.mdpip install mcp-context-forge[altk]→pip install mcp-contextforge-gateway[altk]to match the canonical package namedocs/docs/using/mcpgateway-translate.mdRUN pip install mcpgateway mcp→RUN pip install mcp-contextforge-gateway mcpin the Container Deployment Dockerfile example (mcpgatewayis not a published PyPI package)docs/docs/using/reverse-proxy.mdRUN pip install mcp-gateway mcp-server-git→RUN pip install mcp-contextforge-gateway mcp-server-gitin the Container Deployment Dockerfile example (mcp-gatewayis not the correct package name)Testing
Documentation-only change. Pre-commit hooks passed (detect-secrets, ruff, etc.).