Back to Home
alexandremahdhaoui icon

forge

Verified Safe

by alexandremahdhaoui

Overview

Forge is a modern, declarative, AI-native build orchestrator that streamlines Go project development by managing builds, tests, and integration environments using the Model Context Protocol (MCP).

Installation

Run Command
forge --mcp

Environment Variables

  • GO_BUILD_LDFLAGS
  • CONTAINER_BUILD_ENGINE
  • PREPEND_CMD
  • FORGE_RUN_LOCAL_ENABLED
  • KUBECONFIG
  • KIND_BINARY
  • S3_ENDPOINT
  • S3_ACCESS_KEY
  • S3_SECRET_KEY
  • OCI_REGISTRY_USERNAME
  • OCI_REGISTRY_PASSWORD
  • LOG_LEVEL

Security Notes

The system design inherently relies on executing external commands (e.g., `go build`, `docker build`, `kind`, `kubectl`, arbitrary commands via `generic-builder` and `generic-test-runner`). While these operations are fundamental to its purpose as a build and testing tool, executing untrusted `forge.yaml` configurations or external MCP inputs could lead to arbitrary command execution. Environment configuration in `testenv-lcr` includes TLS and authentication for local registries. `SKIP_CLEANUP` can leave resources for debugging. Overall, the tool itself is not malicious but its power requires trusted inputs.

Similar Servers

Stats

Interest Score0
Security Score7
Cost ClassMedium
Avg Tokens500
Stars0
Forks0
Last Update2025-12-26

Tags

build-orchestratorci-cdtest-automationkubernetes-toolingai-native-development