Skip to content

Commit 8af35e8

Browse files
LeoPatOZLeoPatOZ
authored
Merge branch 'main' into reorg-live-mode
2 parents c9de225 + bd42c2e commit 8af35e8

File tree

10 files changed

+155
-137
lines changed

10 files changed

+155
-137
lines changed

‎.github/workflows/check.yml‎

Lines changed: 28 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -29,11 +29,16 @@ jobs:
2929
runs-on: ubuntu-latest
3030

3131
steps:
32+
- name: Harden the runner (Audit all outbound calls)
33+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
34+
with:
35+
egress-policy: audit
36+
3237
- name: Fetch Repository
33-
uses: actions/checkout@v5
38+
uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
3439

3540
- name: Install stable toolchain
36-
uses: actions-rust-lang/setup-rust-toolchain@v1
41+
uses: actions-rust-lang/setup-rust-toolchain@02be93da58aa71fb456aa9c43b301149248829d8 # v1.15.1
3742

3843
- name: cargo build
3944
run: cargo b --locked --all-targets --all-features
@@ -43,11 +48,16 @@ jobs:
4348
runs-on: ubuntu-latest
4449

4550
steps:
51+
- name: Harden the runner (Audit all outbound calls)
52+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
53+
with:
54+
egress-policy: audit
55+
4656
- name: Fetch Repository
47-
uses: actions/checkout@v5
57+
uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
4858

4959
- name: Install stable toolchain
50-
uses: actions-rust-lang/setup-rust-toolchain@v1
60+
uses: actions-rust-lang/setup-rust-toolchain@02be93da58aa71fb456aa9c43b301149248829d8 # v1.15.1
5161
with:
5262
components: rustfmt
5363
toolchain: nightly
@@ -60,11 +70,16 @@ jobs:
6070
runs-on: ubuntu-latest
6171

6272
steps:
73+
- name: Harden the runner (Audit all outbound calls)
74+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
75+
with:
76+
egress-policy: audit
77+
6378
- name: Fetch Repository
64-
uses: actions/checkout@v5
79+
uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
6580

6681
- name: Install stable toolchain
67-
uses: actions-rust-lang/setup-rust-toolchain@v1
82+
uses: actions-rust-lang/setup-rust-toolchain@02be93da58aa71fb456aa9c43b301149248829d8 # v1.15.1
6883
with:
6984
components: clippy
7085

@@ -76,8 +91,13 @@ jobs:
7691
runs-on: ubuntu-latest
7792

7893
steps:
94+
- name: Harden the runner (Audit all outbound calls)
95+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
96+
with:
97+
egress-policy: audit
98+
7999
- name: Fetch Repository
80-
uses: actions/checkout@v5
100+
uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
81101

82102
- name: Check spelling of files in the workspace
83-
uses: crate-ci/typos@v1
103+
uses: crate-ci/typos@0c17dabcee8b8f1957fa917d17393a23e02e1583 # v1.36.3

‎.github/workflows/cla.yml‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
name: "CLA Assistant"
2+
on:
3+
issue_comment:
4+
types: [created]
5+
pull_request_target:
6+
types: [opened, closed, synchronize]
7+
8+
permissions:
9+
actions: write
10+
contents: write
11+
pull-requests: write
12+
statuses: write
13+
14+
jobs:
15+
CLAAssistant:
16+
runs-on: ubuntu-latest
17+
steps:
18+
- name: Harden the runner (Audit all outbound calls)
19+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
20+
with:
21+
egress-policy: audit
22+
23+
- name: Checkout Private Repo for Allowlist
24+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
25+
with:
26+
repository: OpenZeppelin/cla-sigs
27+
token: ${{ secrets.CLA_SIGS_ACCESS_PAT }}
28+
sparse-checkout: |
29+
allowlist.txt
30+
sparse-checkout-cone-mode: false
31+
- name: Read Allowlist File
32+
id: read_allowlist
33+
run: |
34+
ALLOWLIST=$(cat allowlist.txt)
35+
echo "allowlist=$ALLOWLIST" >> $GITHUB_OUTPUT
36+
- name: "CLA Assistant"
37+
if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I confirm that I have read and hereby agree to the OpenZeppelin Contributor License Agreement') || github.event_name == 'pull_request_target'
38+
uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1
39+
env:
40+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
41+
PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_SIGS_ACCESS_PAT }}
42+
with:
43+
path-to-signatures: 'signatures/${{ github.event.repository.name }}/v1_cla.json'
44+
path-to-document: 'https://github.com/OpenZeppelin/cla-assistant/blob/main/openzeppelin_2025_cla.md'
45+
branch: 'main'
46+
allowlist: ${{ steps.read_allowlist.outputs.allowlist }}
47+
remote-organization-name: 'OpenZeppelin'
48+
remote-repository-name: 'cla-sigs'
49+
custom-notsigned-prcomment: >
50+
Thank you for your contribution to OpenZeppelin Safe Utils.
51+
Before being able to integrate those changes, we would like you to
52+
sign our [Contributor License Agreement](https://github.com/OpenZeppelin/cla-assistant/blob/main/openzeppelin_2025_cla.md).
53+
54+
You can sign the CLA by just posting a Pull Request Comment with the sentence below. Thanks.
55+
custom-pr-sign-comment: 'I confirm that I have read and hereby agree to the OpenZeppelin Contributor License Agreement'
56+

‎.github/workflows/publish.yml‎

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,10 +21,15 @@ jobs:
2121
name: Publish event-scanner on crates.io
2222
runs-on: ubuntu-latest
2323
steps:
24-
- uses: actions/checkout@v5
24+
- name: Harden the runner (Audit all outbound calls)
25+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
26+
with:
27+
egress-policy: audit
28+
29+
- uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
2530

2631
- name: Install rust
27-
uses: actions-rust-lang/setup-rust-toolchain@v1
32+
uses: actions-rust-lang/setup-rust-toolchain@02be93da58aa71fb456aa9c43b301149248829d8 # v1.15.1
2833

2934
- name: Verify tag matches crate version
3035
id: version-check

‎.github/workflows/scorecard.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,11 +30,11 @@ jobs:
3030
# actions: read
3131
steps:
3232
- name: Harden Runner
33-
uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
33+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
3434
with:
3535
egress-policy: audit
3636
- name: Checkout code
37-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.5.4
37+
uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v5.0.0
3838
with:
3939
persist-credentials: false
4040
- name: Run analysis
@@ -52,6 +52,6 @@ jobs:
5252
path: results.sarif
5353
retention-days: 5
5454
- name: Upload SARIF to GitHub Code Scanning
55-
uses: github/codeql-action/upload-sarif@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
55+
uses: github/codeql-action/upload-sarif@303c0aef88fc2fe5ff6d63d3b1596bfd83dfa1f9 # v3.29.5
5656
with:
5757
sarif_file: results.sarif

‎.github/workflows/test.yml‎

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -19,25 +19,30 @@ jobs:
1919
runs-on: ubuntu-latest
2020

2121
steps:
22+
- name: Harden the runner (Audit all outbound calls)
23+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
24+
with:
25+
egress-policy: audit
26+
2227
- name: Fetch Repository
23-
uses: actions/checkout@v5
28+
uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
2429

2530
- name: Install stable toolchain
26-
uses: actions-rust-lang/setup-rust-toolchain@v1
31+
uses: actions-rust-lang/setup-rust-toolchain@02be93da58aa71fb456aa9c43b301149248829d8 # v1.15.1
2732

2833
- name: Install Foundry
29-
uses: foundry-rs/foundry-toolchain@v1
34+
uses: foundry-rs/foundry-toolchain@82dee4ba654bd2146511f85f0d013af94670c4de # v1.4.0
3035

3136
- name: Cache cargo-nextest binary
3237
id: cache-cargo-nextest
33-
uses: actions/cache@v4
38+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
3439
with:
3540
path: ~/.cargo/bin/cargo-nextest
3641
key: ${{ runner.os }}-cargo-nextest-${{ hashFiles('**/Cargo.lock') }}
3742

3843
- name: Install cargo-nextest
3944
if: steps.cache-cargo-nextest.outputs.cache-hit != 'true'
40-
uses: taiki-e/install-action@v2
45+
uses: taiki-e/install-action@71d339ebf191fcbc3d49cd04b9484a4261f29975 # v2.62.9
4146
with:
4247
tool: cargo-nextest
4348

‎Cargo.lock‎

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎Cargo.toml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ authors = ["OpenZeppelin"]
77
edition = "2024"
88
license = "AGPL-3.0-only"
99
repository = "https://github.com/OpenZeppelin/Event-Scanner"
10-
version = "0.1.0-alpha.1"
10+
version = "0.1.0-alpha.2"
1111

1212
[workspace.lints.clippy]
1313
pedantic = "warn"

0 commit comments

Comments
 (0)