Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release - Devnet from Arbitrum Sepolia to Sepolia #169

Open
wants to merge 386 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
386 commits
Select commit Hold shift + click to select a range
054ab59
fix: title
jaybuidl Apr 27, 2023
717a222
Merge branch 'dev' into feat(web)/veascan
jaybuidl Apr 27, 2023
7a3b608
chore: added CODEOWNERS
jaybuidl Apr 27, 2023
6028bac
feat: add txcard mobile responsiveness
nhestrompia Apr 27, 2023
a4c6b8d
Merge branch 'dev' into feat(web)/veascan
jaybuidl Apr 27, 2023
8abc305
chore: tweak to codeowners
jaybuidl Apr 27, 2023
581864e
Merge branch 'dev' into feat(web)/veascan
jaybuidl Apr 27, 2023
3965d9b
chore: tweaked again
jaybuidl Apr 27, 2023
eefe4b4
Merge branch 'dev' into feat(web)/veascan
jaybuidl Apr 27, 2023
8dfaca9
chore(contracts): permissioned testnet contracts
shotaronowhere Apr 28, 2023
04a019e
feat(contracts): inbox calldata optimization
shotaronowhere Apr 28, 2023
cdc2e8a
feat(contracts): event refactoring + encodeCall
shotaronowhere Apr 28, 2023
527944d
Merge branch 'dev' of https://github.com/kleros/vea into dev-events-e…
shotaronowhere Apr 28, 2023
2329282
chore(contracts): testnet contract simplification
shotaronowhere Apr 28, 2023
5e9fe9f
chore(contracts): update pragma even for canonical
shotaronowhere Apr 28, 2023
b350dcf
fix(contracts): gnosis router
shotaronowhere Apr 28, 2023
48122cf
Merge pull request #148 from kleros/feat(web)/improve-snapshot-fetch-…
alcercu Apr 28, 2023
5fee886
fix: fix width in mobile version
kemuru Apr 28, 2023
35a00a1
fix: chain tag margin
nhestrompia Apr 28, 2023
318d1be
fix(web): make filter headers responsive
alcercu Apr 28, 2023
fae33d5
feat: smallscreenstyle to 950px, delete mobilescreenstyle
kemuru Apr 28, 2023
f73e414
fix: changing hardcoded style values
nhestrompia Apr 28, 2023
e6ba2be
fix: txcard text color fix
nhestrompia Apr 28, 2023
bd6c900
feat: remove fixed widths SearchBar and Accordion
kemuru Apr 29, 2023
fad89f5
chore: renamed the testnet dev-focused contracts (aka devnet), and mo…
jaybuidl Apr 29, 2023
b390003
feat: add update.sh script for inbox
kemuru Apr 14, 2023
25428fd
feat: add update.sh script for outbox
kemuru Apr 14, 2023
e1e3c00
chore(deps): bump vm2 from 3.9.14 to 3.9.17
dependabot[bot] Apr 29, 2023
5e6e7bd
chore: non-major versions bump
jaybuidl Apr 29, 2023
1e823ef
chore: improved publish script
jaybuidl Apr 29, 2023
69b8942
fix: companion networks issues inherited from #62 #43
jaybuidl Apr 29, 2023
30ec009
test: fixed incorrect event filter on MessageReceived, outdated mock …
jaybuidl Apr 29, 2023
c781809
chore(deps): bump actions/cache from 3.2.3 to 3.3.1
dependabot[bot] Apr 26, 2023
b65eeed
Merge branch 'dev' into feat(web)/veascan
jaybuidl Apr 30, 2023
e1f8065
chore: removing unnecessary lru-cache
jaybuidl Apr 30, 2023
94a4074
feat: add missing types
kemuru May 1, 2023
cbc2647
chore: change any type to string
kemuru May 1, 2023
3b10b04
fix(web): make accordion title responsive
alcercu May 2, 2023
bae1466
chore: middle-content to max-width 1120px again
kemuru May 2, 2023
f4f93b6
refactor: modularize accordion-title elements
kemuru May 2, 2023
905caf2
feat(subgraph): update veaoutbox
alcercu May 2, 2023
c8dba0b
feat(subgraph): update veainbox
alcercu May 2, 2023
53b55af
feat(subgraph): add more complete data to subgraphs
alcercu May 2, 2023
cd863ed
Merge branch 'feat(web)/veascan' into feat(web)/veascan-mobile-version
alcercu May 2, 2023
972aa0b
Merge pull request #147 from kleros/feat(web)/veascan-mobile-version
alcercu May 2, 2023
d4a4008
fix(subgraph): save verification entity
alcercu May 2, 2023
e8264d8
chore: refactor
nhestrompia May 2, 2023
dd6fc2a
Merge branch 'feat(web)/veascan' into feat(subgraph)/update-subgraphs
alcercu May 3, 2023
09bc77c
feat(veascan-subgraph-outbox): chiado support
jaybuidl Apr 30, 2023
b677882
feat(subgraph): execute update function before deployment
alcercu May 2, 2023
f4b324b
feat(web): update graph queries and refactor accordion
alcercu May 3, 2023
81160af
Merge pull request #161 from kleros/feat(web)/refactor-styled-compone…
alcercu May 3, 2023
f78ff7f
Merge branch 'feat(web)/veascan' into feat(subgraph)/update-subgraphs
alcercu May 3, 2023
4389c79
fix(web): coloredtag style on accordion title
alcercu May 3, 2023
d409794
Merge pull request #160 from kleros/feat(subgraph)/update-subgraphs
alcercu May 3, 2023
25fb28d
fix: bug fixes
kemuru May 3, 2023
49b95a1
fix: accordionbody without border
kemuru May 3, 2023
e43806e
Merge pull request #162 from kleros/fix(web)/veascan-bug-fixes
alcercu May 3, 2023
31ccf16
fix(web): fix theme typing
alcercu May 4, 2023
46c8f05
refactor(web): move navbar and footer to layout component and occupy …
alcercu May 4, 2023
daeb97e
feat(web): custom scrollbar
alcercu May 4, 2023
e07eb99
Merge pull request #163 from kleros/refactor(web/style)/improve-styling
alcercu May 4, 2023
5c59b38
chore: refactor imports
nhestrompia May 4, 2023
6d2be52
Merge pull request #164 from kleros/feat(web)/import-refactor
alcercu May 4, 2023
47899be
chore(contracts): comment cleanup
shotaronowhere May 8, 2023
d2c7ec3
Merge branch 'dev' into feat(web)/veascan
jaybuidl May 10, 2023
b145acd
Merge pull request #110 from kleros/feat(web)/veascan
jaybuidl May 10, 2023
914ced9
feat(devnet): chiado and goeli
shotaronowhere May 11, 2023
a342ee7
fix(calidator-cli): typo
shotaronowhere May 11, 2023
4b7351a
fix(calidator-cli): typo
shotaronowhere May 11, 2023
31d6e5b
Merge branch 'devnet' of https://github.com/kleros/vea into devnet
shotaronowhere May 11, 2023
3810fee
fix(validator-cli): devnet automation
shotaronowhere May 11, 2023
e95815c
fix(validator-cli): devnet automation
shotaronowhere May 11, 2023
1dece55
Merge branch 'devnet' of https://github.com/kleros/vea into devnet
shotaronowhere May 11, 2023
d7c72bd
chore(contracts): update readme deployments
shotaronowhere May 11, 2023
dda9ac2
chore(contracts): comments
shotaronowhere May 12, 2023
d12d00c
feat(relayer-cli): relayer init
shotaronowhere May 12, 2023
521e95d
feat(validator-cli): happy path fix
shotaronowhere May 12, 2023
764b959
feat(web): add pagination
alcercu May 4, 2023
0f78d3c
fix: outbox subgraph error
alcercu May 12, 2023
8a26036
chore(web): update ui-components-library
alcercu May 12, 2023
37d8b96
chore(web): update ui-components-library
alcercu May 15, 2023
3612f0e
fix: hide pagination numbers
alcercu May 15, 2023
6643712
chore(web): add contexts alias
alcercu May 18, 2023
fe928b6
feat(web): add filters context
alcercu May 18, 2023
455e333
feat(web): use filters context
alcercu May 18, 2023
74abe83
Merge branch 'dev' into feat(web)/filters
alcercu May 18, 2023
1c9129f
fix(web): delete test bridge
alcercu May 18, 2023
2887781
feat(web/WIP): advanced filtering
alcercu May 19, 2023
c5d2f81
feat(contracts): danil's Review
shotaronowhere May 22, 2023
ce11b35
Merge branch 'dev' into devnet
shotaronowhere May 22, 2023
aed85da
feat: improved goldsky deploy script and redeployed chiado outbox sub…
jaybuidl May 22, 2023
bbffc9a
fix: removing subgraph tagging due to a goldsky bug
jaybuidl May 22, 2023
d6211c9
Merge branch 'devnet' into feat(web)/filters
alcercu May 22, 2023
08f18e9
chore: lockfile fixed
jaybuidl May 22, 2023
60bd6cb
fix(contracts): deploy script misconfig
shotaronowhere May 22, 2023
89f9c67
Merge branch 'devnet' of https://github.com/kleros/vea into devnet
shotaronowhere May 22, 2023
d8774d1
feat: improved distinction between the outbox and router implementati…
jaybuidl May 22, 2023
fc5c934
[StepSecurity] Apply security best practices
step-security-bot May 23, 2023
eeb45bd
chore: reverted changes to dependabot
jaybuidl May 23, 2023
6910d16
docs: readme
jaybuidl May 23, 2023
a968996
feat: contracts verification on sourcify
jaybuidl May 23, 2023
9c036e7
Merge branch 'dev' into devnet
jaybuidl May 23, 2023
29a8974
chore(contracts): comments and consistent style
shotaronowhere May 23, 2023
e1a3977
fix(web): use hook to copy to clipboard
alcercu May 23, 2023
846d60b
Add .whitesource configuration file
mend-bolt-for-github[bot] May 23, 2023
d95e837
chore: mend bolt config
jaybuidl May 23, 2023
e602026
Merge branch 'devnet' into feat(web)/filters
alcercu May 23, 2023
2016936
fix: security patches for CVE-2023-32314 CVE-2023-32313 CVE-2023-28155
jaybuidl May 23, 2023
f1cef66
style(contracts): private and constant var update
shotaronowhere May 23, 2023
3848904
Merge branch 'dev' into devnet
jaybuidl May 23, 2023
4df0a58
chore: sonarcloud config
jaybuidl May 23, 2023
c173568
Merge branch 'dev' into devnet
jaybuidl May 23, 2023
6e4812d
chore: sonarcloud config
jaybuidl May 23, 2023
6575c2c
[StepSecurity] ci: Harden GitHub Actions
step-security-bot May 23, 2023
b0a41ae
Merge pull request #190 from step-security-bot/stepsecurity_remediati…
jaybuidl May 23, 2023
15b26e6
chore: testing workflow tweak
jaybuidl May 23, 2023
f374ead
docs: readme badges
jaybuidl May 23, 2023
636d42a
docs: natspec for kleros/builder-baseline#7 and kleros/builder-baseli…
jaybuidl May 23, 2023
58c7a50
Merge branch 'dev' into devnet
jaybuidl May 23, 2023
97db33e
fix: promises in relayer-cli
jaybuidl May 23, 2023
e4b400a
Merge pull request #176 from kleros/devnet
jaybuidl May 24, 2023
20dc90b
Merge branch 'dev' into feat(web)/filters
alcercu May 24, 2023
646d5ef
fix: correctly show verified instead of resolved
alcercu May 24, 2023
e72f000
feat(web): add chiado bridge
alcercu May 24, 2023
81a8056
fix(web): use bridgeId instead of bridge index, since filters modify …
alcercu May 24, 2023
2410617
chore: tweaked mend bold min severity
jaybuidl May 24, 2023
2d14473
fix: extra underscore in some event params
jaybuidl May 24, 2023
a3a9248
chore(contracts): remove WIP chains from dev
shotaronowhere May 25, 2023
183db6f
fix(subgraph): underscore event params inbox subgraph
alcercu May 25, 2023
5123c1e
fix(web): pagination bug
alcercu May 25, 2023
8717e02
feat(subgraph): correctly track honest variable claim and challenge
alcercu May 25, 2023
fa44f16
fix(subgraph): uninitialized non-nullable fiel honest in claim
alcercu May 25, 2023
ccf439b
chore(web): remove unused import
alcercu May 25, 2023
aa5c698
fix(web): prevent the click to the address in the accordion title fro…
alcercu May 25, 2023
67a020a
refactor: renaming files to index and object destructuring
kemuru May 25, 2023
8193642
fix(web): pagination bug
alcercu May 26, 2023
783067f
feat(subgraph): add full text search
alcercu May 26, 2023
d85f087
feat(contracts): claimDelay calculation
shotaronowhere May 26, 2023
535d2f7
chore(contracts): deploy param comments
shotaronowhere May 26, 2023
db4462c
feat(web/WIP): working searchbar
alcercu May 26, 2023
f5c5da0
feat(contracts): better avg case challenge period
shotaronowhere May 29, 2023
b073598
feat(web): add search functionality
alcercu May 29, 2023
49b7843
chore: action workflow triggers
jaybuidl May 29, 2023
dd79617
Merge branch 'dev' into feat(web)/filters
jaybuidl May 29, 2023
4c90ac2
Merge branch 'dev' into chore-remove-WIP-from-dev
jaybuidl May 29, 2023
0ced8d9
fix: cron
jaybuidl May 29, 2023
bfa8643
chore: workflow names
jaybuidl May 29, 2023
ed6ed78
Merge branch 'dev' into feat(web)/filters
jaybuidl May 29, 2023
5eb4608
Merge branch 'dev' into chore-remove-WIP-from-dev
jaybuidl May 29, 2023
d928356
Merge branch 'dev' into feat(web)/filters
jaybuidl May 29, 2023
e22a123
chore: refactor txcard for styled components
nhestrompia May 29, 2023
e794afb
chore: refactored imports and interface namings
nhestrompia May 28, 2023
45cfef3
fix(web-veascan): fix code smells
kemuru May 26, 2023
cc766c4
Merge pull request #210 from kleros/fix(web-veascan)/code-smells
jaybuidl May 29, 2023
d64d920
Merge branch 'dev' into refactor(web)/tx-card-styled-components
alcercu May 29, 2023
164d47a
Merge pull request #212 from kleros/refactor(web)/tx-card-styled-comp…
alcercu May 29, 2023
13eb9d2
Merge branch 'dev' into refactor(web)/naming-import-consistency
alcercu May 29, 2023
d3aa39c
Merge pull request #211 from kleros/refactor(web)/naming-import-consi…
alcercu May 29, 2023
a79263e
Merge branch 'dev' into refactor(web-veascan)/parameter-object-destru…
alcercu May 29, 2023
dbc3036
refactor(web): remove props
alcercu May 29, 2023
66fb7b1
refactor(web): rename SnapshotAccordion.tsx to index.tsx to make it m…
alcercu May 29, 2023
4e2ee33
Merge pull request #204 from kleros/refactor(web-veascan)/parameter-o…
alcercu May 29, 2023
3266614
Merge branch 'dev' into feat(web)/filters
alcercu May 29, 2023
add723d
fix(web): useMemo to avoid rerenders
alcercu May 29, 2023
fb47df3
fix(web): reset expanded accordion across pages
kemuru May 31, 2023
96fc060
fix: reset pages shown when filter applied
nhestrompia May 31, 2023
56e7563
chore: remove console log
nhestrompia May 31, 2023
bcfe12e
fix: prevent re-render
nhestrompia May 31, 2023
b30f287
Merge pull request #214 from kleros/fix(web-veascan)/reset-expanded-a…
alcercu May 31, 2023
bdb26dc
Merge branch 'dev' into fix(web)/reset-pages-when-filtered
alcercu May 31, 2023
74ea819
Merge pull request #215 from kleros/fix(web)/reset-pages-when-filtered
alcercu May 31, 2023
9a82c1f
docs: deployed contracts
jaybuidl Jun 1, 2023
b035f9a
feat(contracts): testnet update
shotaronowhere Jun 15, 2023
87c0eaa
chore(contracts): remove unnecessary require
shotaronowhere Jun 15, 2023
d747cd3
chore(contracts): typo
shotaronowhere Jun 16, 2023
2b273be
feat(contracts): disambiguate the sequencer param
shotaronowhere Jun 16, 2023
cc04592
chore(contracts): remove unused library
shotaronowhere Jun 16, 2023
02db10d
feat(contracts): sequencer limit relay timeout
shotaronowhere Jun 16, 2023
d15c3a8
fix(contracts): typo
shotaronowhere Jun 16, 2023
7e21dad
fix(contracts): update sequence limit bug
shotaronowhere Jun 16, 2023
ca1d626
fix(contracts): typo Gnosis, not Ethereum
shotaronowhere Jun 16, 2023
09e5773
fix(contracts): typo
shotaronowhere Jun 19, 2023
1554e7b
chore(contracts): explicit type casting
shotaronowhere Jun 19, 2023
7ea437b
feat(contracts): gnosis to arbitrum bridging
shotaronowhere Jun 28, 2023
33f3908
feat(contracts): revert claim window complexity
shotaronowhere Jun 29, 2023
fc25164
chore(contracts): event updates
shotaronowhere Jun 30, 2023
6928470
fix: typo
shotaronowhere Aug 20, 2023
0f3f2ad
chore: update deploy script
shotaronowhere Oct 13, 2023
bc96dc3
fix: typo and allow proxy challenges
shotaronowhere Oct 13, 2023
5c107af
chore: update weth interface
shotaronowhere Oct 13, 2023
c5abc81
feat: watcher utility functions
shotaronowhere Oct 13, 2023
1d6c378
feat: watcher
shotaronowhere Oct 13, 2023
ff5db2c
chore: relayer subgraph refactor
shotaronowhere Oct 20, 2023
636003e
fix: concat-stream source changed to npm
divyangchauhan Feb 12, 2024
de0e767
fix: update hardhat node command to allow connection from all interface
divyangchauhan Feb 16, 2024
eb04f81
chore: tea
jaybuidl Feb 23, 2024
fe7fb00
fix: update veascan outbox subgraph name
divyangchauhan Feb 25, 2024
8885c1e
fix: update hardhat voutbox to devnet
divyangchauhan Feb 26, 2024
62e5277
chore: redice epoch period for hardhat network
divyangchauhan Feb 26, 2024
35460b1
fix: abi decode for last saved count in validator bot
divyangchauhan Feb 26, 2024
a2d3715
fix: relayer bot bug fixes
divyangchauhan Feb 26, 2024
8984ea2
feat: migrate contracts from goerli to sepolia
divyangchauhan Feb 29, 2024
08ea171
fix: update arbiscan api url
divyangchauhan Mar 3, 2024
67eefdf
feat: migrate relayer subgraph from goerli to sepolia devnet
divyangchauhan Mar 7, 2024
848f024
feat: migrate bots from goerli to sepolia devnet
divyangchauhan Mar 7, 2024
9ed3f11
feat: migrate veascan subgraph and ui app from goerli to sepolia devnet
divyangchauhan Mar 7, 2024
187a50e
chore: update relayer cli state file
divyangchauhan Mar 7, 2024
6a48c8b
fix: revert contract to mock
divyangchauhan Mar 9, 2024
fda5170
chore: remove state files of relayer from source code
divyangchauhan Mar 9, 2024
b7d03c9
chore: update readme commands from goerli to sepolia
divyangchauhan Mar 9, 2024
d4b2e31
fix: update epoch period for devnet
divyangchauhan Mar 9, 2024
bbd5ae2
fix: update veascan subgraph commands from goerli to sepolia
divyangchauhan Mar 9, 2024
5b345f2
chore: remove generated files for relayer subgraph
divyangchauhan Mar 9, 2024
a6ddc45
chore: remove build files for relayer subgraph
divyangchauhan Mar 9, 2024
f90b660
feat: read state file location from env vars
divyangchauhan Mar 9, 2024
57012d0
fix: use do while loop to run loop atleast once
divyangchauhan Mar 11, 2024
b16dd31
chore(contracts): sol version update
Anmol-Dhiman May 6, 2024
3150ee5
chore(contract): oz version update
Anmol-Dhiman May 6, 2024
a0eb998
Merge pull request #1 from Anmol-Dhiman/testnet
divyangchauhan May 8, 2024
82fb3f7
chore: replace goerli with sepolia
divyangchauhan May 20, 2024
2fbcf9a
fix: update subgraph url
divyangchauhan May 20, 2024
7d63d07
Merge pull request #277 from divyangchauhan/testnet
jaybuidl Jun 4, 2024
c867679
chore: dependencies bump
jaybuidl Jun 5, 2024
16b836e
chore: bumped node, yarn and graphql
jaybuidl Jun 5, 2024
a359816
chore: fixes GHSA-ghr5-ch3p-vcr6 GHSA-c2qf-rxjj-qqgw
jaybuidl Jun 5, 2024
1128c80
Merge pull request #281 from kleros/chore/node-yarn-bump
jaybuidl Jun 5, 2024
7e14ea2
docs: minor natspec change
jaybuidl Jun 5, 2024
b476818
Merge branch 'dev' into testnet
jaybuidl Jun 5, 2024
df79ba4
Update contracts-testing.yml
jaybuidl Jun 5, 2024
b6f3f0a
Update contracts-testing.yml
jaybuidl Jun 5, 2024
513db56
chore: nvmrc
jaybuidl Jun 5, 2024
fb307ff
Update contracts-testing.yml
jaybuidl Jun 5, 2024
d9107c4
chore: resolutions added to package.json otherwise yarn fails in hard…
jaybuidl Jun 5, 2024
992dc11
Merge pull request #273 from kleros/testnet
jaybuidl Jun 5, 2024
9532c10
fix: amb addresses
Aug 6, 2024
55541e3
chore: devnet redeployments arbSep->Sep
Aug 8, 2024
258cb11
fix(devnet): subgraph deployments arbSep->Sep
Aug 9, 2024
83b892c
chore(relayer-devnet): relayer subgraph and lightbulb switch address …
Aug 21, 2024
f01e4f9
feat(config): refactor env vars and constants
Aug 31, 2024
69285d8
fix(relayer): chiado subgraph
mani99brar Aug 31, 2024
d302601
feat(config): veascan extracted subgraph vars
Sep 2, 2024
f4be9c8
chore: devnet deployments
Sep 17, 2024
a941696
fix: env file management for parcel
jaybuidl Sep 18, 2024
57a7cf1
fix: linting, frontend packages version bump
jaybuidl Sep 23, 2024
7cb9d80
chore: codeowners
jaybuidl Sep 23, 2024
5e64c2a
Merge pull request #305 from kleros/feat/migrate-goerli-to-sepolia
jaybuidl Sep 23, 2024
aaaf5f3
Merge branch 'dev' into feat/arbSep-to-chiado-devnet
mani99brar Sep 25, 2024
5ddd4a2
feat(veascan): added chiado devnet route
Sep 25, 2024
e22031e
Merge pull request #325 from kleros/feat/arbSep-to-chiado-devnet
jaybuidl Oct 9, 2024
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
11 changes: 11 additions & 0 deletions .github/CODEOWNERS
Validating CODEOWNERS rules …
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
# Default
* @jaybuidl @mani99brar

# Veascan
veascan-subgraph-inbox/ @jaybuidl @alcercu
veascan-subgraph-outbox/ @jaybuidl @alcercu
veascan-web/ @jaybuidl @alcercu

# Owned by everyone
yarn.lock @jaybuidl @mani99brar @alcercu
.gitignore @jaybuidl @mani99brar @alcercu
1 change: 0 additions & 1 deletion .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -38,4 +38,3 @@ updates:
assignees:
- jaybuidl
- alcercu

84 changes: 42 additions & 42 deletions .github/workflows/codeql-analysis.yml
Original file line number Diff line number Diff line change
@@ -1,24 +1,19 @@
# For most projects, this workflow file will not need changing; you simply need
# to commit it to your repository.
#
# You may wish to alter this file to override the set of languages analyzed,
# or to provide custom queries or build logic.
#
# ******** NOTE ********
# We have attempted to detect the languages in your repository. Please check
# the `language` matrix defined below to confirm you have the correct set of
# supported CodeQL languages.
#
name: "CodeQL"

name: CodeQL Advanced
on:
push:
branches: [ master ]
branches:
- master
- dev
pull_request:
# The branches below must be a subset of the branches above
branches: [ master ]
branches:
- master
- dev
schedule:
- cron: '37 20 * * 6'
- cron: "37 20 * * 6" # Every Saturday on 8:37pm UTC

permissions:
contents: read

jobs:
analyze:
Expand All @@ -32,39 +27,44 @@ jobs:
strategy:
fail-fast: false
matrix:
language: [ 'javascript' ]
language: ["javascript"]
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
# Learn more about CodeQL language support at https://git.io/codeql-language-support

steps:
- name: Checkout repository
uses: actions/checkout@v3
- name: Harden Runner
uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969 # v2.4.0
with:
egress-policy: audit

- name: Checkout repository
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@v2
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
# By default, queries listed here will override any specified in a config file.
# Prefix the list here with "+" to use these queries and those in the config file.
# queries: ./path/to/local/query, your-org/your-repo/queries@main
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
# By default, queries listed here will override any specified in a config file.
# Prefix the list here with "+" to use these queries and those in the config file.
# queries: ./path/to/local/query, your-org/your-repo/queries@main

# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
uses: github/codeql-action/autobuild@v2
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
uses: github/codeql-action/autobuild@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3

# ℹ️ Command-line programs to run using the OS shell.
# 📚 https://git.io/JvXDl
# ℹ️ Command-line programs to run using the OS shell.
# 📚 https://git.io/JvXDl

# ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
# and modify them (or add more) to build your code if your project
# uses a compiled language
# ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
# and modify them (or add more) to build your code if your project
# uses a compiled language

#- run: |
# make bootstrap
# make release
#- run: |
# make bootstrap
# make release

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3
28 changes: 21 additions & 7 deletions .github/workflows/contracts-testing.yml
Original file line number Diff line number Diff line change
@@ -1,27 +1,41 @@
name: Contracts Testing

on:
workflow_dispatch:
push:
branches:
- master
- dev
pull_request:
branches:
- "*"

permissions:
contents: read

jobs:
test:
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969 # v2.4.0
with:
egress-policy: audit

- name: Setup Node.js environment
uses: actions/setup-node@v3.6.0
uses: actions/setup-node@v4
with:
node-version: 16.x

- uses: actions/checkout@v3
node-version: 18.x

- name: Enable Corepack
run: corepack enable

- name: Set Yarn version to Berry
run: yarn set version 4.2.2

- uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2

- name: Cache node modules
uses: actions/cache@v3.2.3
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
env:
cache-name: cache-node-modules
with:
Expand Down Expand Up @@ -52,7 +66,7 @@ jobs:
working-directory: contracts

- name: Upload a build artifact
uses: actions/[email protected]
uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
with:
name: code-coverage-report
path: contracts/coverage
27 changes: 27 additions & 0 deletions .github/workflows/dependency-review.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
# Dependency Review Action
#
# This Action will scan dependency manifest files that change as part of a Pull Request,
# surfacing known-vulnerable versions of the packages declared or updated in the PR.
# Once installed, if the workflow run is marked as required,
# PRs introducing known-vulnerable packages will be blocked from merging.
#
# Source repository: https://github.com/actions/dependency-review-action
name: Dependency Review
on: [pull_request]

permissions:
contents: read

jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969 # v2.4.0
with:
egress-policy: audit

- name: 'Checkout Repository'
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
- name: 'Dependency Review'
uses: actions/dependency-review-action@0efb1d1d84fc9633afcdaad14c485cbbc90ef46c # v2.5.1
17 changes: 13 additions & 4 deletions .github/workflows/deploy-bots.yml
Original file line number Diff line number Diff line change
@@ -1,13 +1,22 @@
name: Build and Deploy Bots
on: [workflow_dispatch]

permissions:
contents: read

jobs:
build-deploy:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- uses: actions/setup-python@v4
- uses: aws-actions/setup-sam@v2
- uses: aws-actions/configure-aws-credentials@v1
- name: Harden Runner
uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969 # v2.4.0
with:
egress-policy: audit

- uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
- uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4.6.0
- uses: aws-actions/setup-sam@12a6719db503425e98edcc798b6779590a450e8f # v2
- uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838 # v1.7.0
with:
aws-access-key-id: ${{ secrets.STAGING_AWS_ACCESS_KEY }}
aws-secret-access-key: ${{ secrets.STAGING_AWS_SECRET_KEY }}
Expand Down
77 changes: 77 additions & 0 deletions .github/workflows/scorecards.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,77 @@
name: Scorecard supply-chain security
on:
# For Branch-Protection check. Only the default branch is supported. See
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
branch_protection_rule: # To guarantee Maintained check is occasionally updated. See

# https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
schedule:
- cron: "20 5 * * 0" # Every Sunday at 5:20 AM UTC
push:
branches:
- dev
pull_request:
# The branches below must be a subset of the branches above
branches:
- dev

# Declare default permissions as read only.
permissions: read-all

jobs:
analysis:
name: Scorecard analysis
runs-on: ubuntu-latest
permissions:
# Needed to upload the results to code-scanning dashboard.
security-events: write
# Needed to publish results and get a badge (see publish_results below).
id-token: write
contents: read
actions: read

steps:
- name: Harden Runner
uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969 # v2.4.0
with:
egress-policy: audit

- name: "Checkout code"
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
with:
persist-credentials: false

- name: "Run analysis"
uses: ossf/scorecard-action@99c53751e09b9529366343771cc321ec74e9bd3d # v2.0.6
with:
results_file: results.sarif
results_format: sarif
# (Optional) "write" PAT token. Uncomment the `repo_token` line below if:
# - you want to enable the Branch-Protection check on a *public* repository, or
# - you are installing Scorecards on a *private* repository
# To create the PAT, follow the steps in https://github.com/ossf/scorecard-action#authentication-with-pat.
# repo_token: ${{ secrets.SCORECARD_TOKEN }}

# Public repositories:
# - Publish results to OpenSSF REST API for easy access by consumers
# - Allows the repository to include the Scorecard badge.
# - See https://github.com/ossf/scorecard-action#publishing-results.
# For private repositories:
# - `publish_results` will always be set to `false`, regardless
# of the value entered here.
publish_results: true

# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
# format to the repository Actions tab.
- name: "Upload artifact"
uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
with:
name: SARIF file
path: results.sarif
retention-days: 5

# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
uses: github/codeql-action/upload-sarif@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3
with:
sarif_file: results.sarif
36 changes: 36 additions & 0 deletions .github/workflows/sonarcloud.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,36 @@
name: SonarCloud Analysis
on:
Fixed Show fixed Hide fixed
# Trigger analysis when pushing in master or pull requests, and when creating
# a pull request.
push:
branches:
- master
- dev
pull_request:
types: [opened, synchronize, reopened]

permissions:
contents: read

jobs:
sonarcloud:
permissions:
contents: read # for actions/checkout to fetch code
pull-requests: read # for sonarsource/sonarcloud-github-action to determine which PR to decorate
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
with:
egress-policy: audit

- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
# Disabling shallow clone is recommended for improving relevancy of reporting
fetch-depth: 0

- name: SonarCloud Scan
uses: sonarsource/sonarcloud-github-action@eb211723266fe8e83102bac7361f0a05c3ac1d1b # v3.0.0
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
22 changes: 20 additions & 2 deletions .gitignore
Original file line number Diff line number Diff line change
@@ -1,3 +1,15 @@
# misc
.DS_Store
.env
.env.test
.env.testnet
.env.devnet
.env.local
.env.development.local
.env.test.local
.env.production.local


#------------------------------------
# FILE GENERATED AS FOLLOWS
# curl -sL https://www.toptal.com/developers/gitignore/api/vim,node,visualstudiocode,yarn | sed 's|\(!.yarn/cache\)|#\1|' > .gitignore
Expand Down Expand Up @@ -198,5 +210,11 @@ tags
# End of https://www.toptal.com/developers/gitignore/api/vim,node,visualstudiocode,yarn

# subgraph
subgraph/generated/*
subgraph/build/*
veascan-subgraph-outbox/generated/*
veascan-subgraph-outbox/build/*
veascan-subgraph-inbox/generated/*
veascan-subgraph-inbox/build/*
validator-subgraph-inbox/generated/*
validator-subgraph-inbox/build/*

cache
3 changes: 1 addition & 2 deletions .husky/pre-commit
Original file line number Diff line number Diff line change
@@ -1,5 +1,4 @@
#!/bin/sh
. "$(dirname "$0")/_/husky.sh"

yarn lint-staged \
&& yarn depcheck
yarn lint-staged
2 changes: 1 addition & 1 deletion .nvmrc
Original file line number Diff line number Diff line change
@@ -1 +1 @@
lts/fermium
18
Loading
Loading