iExecBlockchainComputing
diff --git a/‎.github/workflows/propose-safe-multisig-tx.yml‎
Lines changed: 78 additions & 0 deletions b/‎.github/workflows/propose-safe-multisig-tx.yml‎
Lines changed: 78 additions & 0 deletions
diff --git a/‎README.md‎
Lines changed: 3 additions & 0 deletions b/‎README.md‎
Lines changed: 3 additions & 0 deletions
diff --git a/‎propose-safe-multisig-tx/.gitignore‎
Lines changed: 22 additions & 0 deletions b/‎propose-safe-multisig-tx/.gitignore‎
Lines changed: 22 additions & 0 deletions
diff --git a/‎propose-safe-multisig-tx/CHANGELOG.md‎
Lines changed: 7 additions & 0 deletions b/‎propose-safe-multisig-tx/CHANGELOG.md‎
Lines changed: 7 additions & 0 deletions
diff --git a/‎propose-safe-multisig-tx/README.md‎
Lines changed: 58 additions & 0 deletions b/‎propose-safe-multisig-tx/README.md‎
Lines changed: 58 additions & 0 deletions
@@ -0,0 +1,78 @@
+name: 'Propose Safe Multisig Transaction'
+on:
+  workflow_call:
+    inputs:
+      rpc-url:
+        description: 'RPC URL for the blockchain network'
+        required: true
+        type: string
+      safe-address:
+        description: 'Address of the Safe contract'
+        required: true
+        type: string
+      transaction-to:
+        description: 'Target address of the transaction'
+        required: true
+        type: string
+      transaction-value:
+        description: 'Value to send in the transaction (in wei, default: 0)'
+        required: false
+        default: '0'
+        type: string
+      transaction-data:
+        description: 'Transaction data/calldata'
+        required: true
+        type: string
+    secrets:
+      safe-proposer-private-key:
+        description: 'Private key of the proposer wallet'
+        required: true
+      safe-api-key:
+        description: 'Safe API key for transaction service'
+        required: true
+    outputs:
+      tx-hash:
+        description: 'Hash of the Safe transaction'
+        value: ${{ jobs.propose-transaction.outputs.tx-hash }}
+      tx-details:
+        description: 'Created transaction details'
+        value: ${{ jobs.propose-transaction.outputs.tx-details }}
+
+jobs:
+  propose-transaction:
+    runs-on: ubuntu-latest
+    outputs:
+      tx-hash: ${{ steps.safe-transaction.outputs.tx-hash }}
+      tx-details: ${{ steps.safe-transaction.outputs.tx-details }}
+    
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          repository: iExecBlockchainComputing/github-actions-workflows
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Install dependencies
+        run: npm ci
+        working-directory: ./propose-safe-multisig-tx
+
+      - name: Build action
+        run: npm run build
+        working-directory: ./propose-safe-multisig-tx
+
+      - name: Propose Safe Transaction
+        run: npm run propose
+        working-directory: ./propose-safe-multisig-tx
+        env:
+          RPC_URL: ${{ inputs.rpc-url }}
+          SAFE_ADDRESS: ${{ inputs.safe-address }}
+          TRANSACTION_TO: ${{ inputs.transaction-to }}
+          TRANSACTION_VALUE: ${{ inputs.transaction-value }}
+          TRANSACTION_DATA: ${{ inputs.transaction-data }}
+          SAFE_PROPOSER_PRIVATE_KEY: ${{ secrets.safe-proposer-private-key }}
+          SAFE_API_KEY: ${{ secrets.safe-api-key }}
+        id: safe-transaction
@@ -25,6 +25,9 @@ Provides a standardized workflow for building, testing, and publishing Rust pack
 ### 🧹 [Stale Issues and PRs](./stale)
 Automatically identifies and closes stale issues and pull requests to maintain a clean and focused repository. Helps your team concentrate on active work items and reduces maintenance overhead.
 
+### 🛡️ [Safe Multisig Transaction Proposer](./propose-safe-multisig-tx)
+Automates the process of proposing transactions to a Safe multi-signature wallet (Gnosis Safe). Features smart chain detection, comprehensive validation, and secure transaction handling for blockchain operations.
+
 ## 🔧 Usage
 
 Each workflow has its own detailed documentation in its respective directory. The comprehensive documentation includes:
 
@@ -0,0 +1,22 @@
+# Dependencies
+node_modules/
+
+# Build outputs
+dist/
+
+# IDE
+.vscode/
+.idea/
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Environment variables
+.env
+.env.local
+.env.*.local
+
+# Logs
+logs/
+*.log
@@ -0,0 +1,7 @@
+# Changelog
+
+## 1.0.0 (2025-09-29)
+
+### Features
+
+* **safe-transaction:** add workflow for safe transaction submission ([#85](https://github.com/iExecBlockchainComputing/github-actions-workflows/pull/85))
@@ -0,0 +1,58 @@
+# Safe Multisig Transaction Proposer - Reusable Workflow
+
+## Overview 🌟
+
+This reusable GitHub Actions workflow automates the process of proposing transactions to a Safe multi-signature wallet (Gnosis Safe). It handles the proposal submission, making it easy to integrate Safe transactions into your CI/CD pipeline.
+
+## Workflow Inputs 🛠️
+
+| **Input**                | **Description**                                               | **Required** | **Default**                         |
+| ------------------------ | ------------------------------------------------------------- | ------------ | ----------------------------------- |
+| **rpc-url**              | RPC URL for the blockchain network                            | Yes          | -                                   |
+| **safe-address**         | Address of the Safe contract                                  | Yes          | -                                   |
+| **transaction-to**       | Target address for the transaction                            | Yes          | -                                   |
+| **transaction-value**    | Value to send in the transaction (in wei)                     | No           | `0`                                 |
+| **transaction-data**     | Transaction data/calldata                                     | Yes           | -                                |
+| **safe-proposer-private-key** | Private key of the proposer wallet                           | Yes (Secret) | -                                   |
+| **safe-api-key**         | Safe API key for transaction service                          | Yes (Secret) | -                                   |
+
+## Workflow Outputs 📤
+
+| **Output**        | **Description**                           |
+| ----------------- | ----------------------------------------- |
+| **tx-hash**       | Hash of the Safe transaction created      |
+| **tx-details**    | Complete transaction details (JSON)       |
+
+## How to Use This Reusable Workflow 🔄
+
+1. **Call the Reusable Workflow**  
+   In another workflow file, invoke this reusable workflow like so:
+
+   ```yaml
+    name: Upgrade contract
+
+    on:
+      workflow_dispatch:
+
+    jobs:
+      upgrade:
+        uses: ./.github/workflows/propose-safe-multisig-tx.yml
+        secrets:
+          safe-proposer-private-key: ${{ secrets.SAFE_PROPOSER_PRIVATE_KEY }}
+          safe-api-key: ${{ secrets.SAFE_API_KEY }}
+        with:
+          rpc-url: 'https://...'
+          safe-address: '0xab...'
+          transaction-to: '0xcd...'
+          transaction-value: '0'
+          transaction-data: '0xef' # Upgrade transaction calldata
+   ```
+
+2. **Configure Secrets**  
+   Ensure that the required secrets are added to your repository's settings:
+   - `SAFE_PROPOSER_PRIVATE_KEY`: The private key of the wallet that will propose the transaction
+   - `SAFE_API_KEY`: Your Safe API key for the transaction service
+
+## Security Considerations 🛡️
+
+⚠️ **Important**: Never expose private keys in logs or code files. Always use GitHub Secrets to store sensitive information securely.