feat: Add new Safe Wallet reusable workflow

.github/workflows/safe-transaction.yml

@@ -0,0 +1,87 @@
+name: 'Safe Transaction Proposer'
+on:
+  workflow_call:
+    inputs:
+      rpc-url:
+        description: 'RPC URL for the blockchain network'
+        required: true
+        type: string
+      safe-address:
+        description: 'Address of the Safe contract'
+        required: true
+        type: string
+      transaction-target-address:
+        description: 'Target address for the transaction'
+        required: true
+        type: string
+      chain-id:
+        description: 'Chain ID of the blockchain network (default: 42161 for Arbitrum)'
+        required: false
+        default: '42161'
+        type: string
+      transaction-value:
+        description: 'Value to send in the transaction (in wei, default: 0)'
+        required: false
+        default: '0'
+        type: string
+      transaction-data:
+        description: 'Transaction data/calldata (default: 0x)'
+        required: false
+        default: '0x'
+        type: string
+    secrets:
+      proposer-private-key:
+        description: 'Private key of the proposer wallet'
+        required: true
+      safe-api-key:
+        description: 'Safe API key for transaction service'
+        required: true
+    outputs:
+      safe-tx-hash:
+        description: 'Hash of the Safe transaction'
+        value: ${{ jobs.propose-transaction.outputs.safe-tx-hash }}
+      transaction:
+        description: 'Created transaction details'
+        value: ${{ jobs.propose-transaction.outputs.transaction }}
+
+jobs:
+  propose-transaction:
+    runs-on: ubuntu-latest
+    outputs:
+      safe-tx-hash: ${{ steps.safe-transaction.outputs.safe-tx-hash }}
+      transaction: ${{ steps.safe-transaction.outputs.transaction }}
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          repository: iExecBlockchainComputing/github-actions-workflows
+          # TODO: Only for testing, remove before merging
+          ref: feature/add-safe-transaction-reusable-workflow
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install dependencies
+        run: npm ci
+        working-directory: ./safe-transaction
+
+      - name: Build action
+        run: npm run build
+        working-directory: ./safe-transaction
+
+      - name: Propose Safe Transaction
+        run: node dist/index.js
+        working-directory: ./safe-transaction
+        env:
+          INPUT_PROPOSER_PRIVATE_KEY: ${{ secrets.proposer-private-key }}
+          INPUT_SAFE_API_KEY: ${{ secrets.safe-api-key }}
+          INPUT_RPC_URL: ${{ inputs.rpc-url }}
+          INPUT_SAFE_ADDRESS: ${{ inputs.safe-address }}
+          INPUT_TARGET_ADDRESS: ${{ inputs.transaction-target-address }}
+          INPUT_CHAIN_ID: ${{ inputs.chain-id }}
+          INPUT_TRANSACTION_VALUE: ${{ inputs.transaction-value }}
+          INPUT_TRANSACTION_DATA: ${{ inputs.transaction-data }}
+        id: safe-transaction

safe-transaction/.gitignore

@@ -0,0 +1,22 @@
+# Dependencies
+node_modules/
+
+# Build outputs
+dist/
+
+# IDE
+.vscode/
+.idea/
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Environment variables
+.env
+.env.local
+.env.*.local
+
+# Logs
+logs/
+*.log

safe-transaction/CHANGELOG.md

@@ -0,0 +1,7 @@
+# Changelog
+
+## 1.0.0 (2025-09-29)
+
+### Features
+
+* **safe-transaction:** add workflow for safe transaction submission ([#85](https://github.com/iExecBlockchainComputing/github-actions-workflows/pull/85))

safe-transaction/README.md

@@ -0,0 +1,75 @@
+# Safe Transaction Proposer - Reusable Workflow
+
+## Overview 🌟
+
+This reusable GitHub Actions workflow automates the process of creating and proposing transactions to a Safe multi-signature wallet (Gnosis Safe). It handles the complete transaction lifecycle from creation to proposal submission, making it easy to integrate Safe transactions into your CI/CD pipeline.
+
+## Workflow Inputs 🛠️
+
+| **Input**                | **Description**                                               | **Required** | **Default**                         |
+| ------------------------ | ------------------------------------------------------------- | ------------ | ----------------------------------- |
+| **proposer-private-key** | Private key of the proposer wallet                           | Yes          | -                                   |
+| **rpc-url**              | RPC URL for the blockchain network                            | Yes          | -                                   |
+| **safe-address**         | Address of the Safe contract                                  | Yes          | -                                   |
+| **transaction-target-address** | Target address for the transaction                            | Yes          | -                                   |
+| **safe-api-key**         | Safe API key for transaction service                          | Yes          | -                                   |
+| **chain-id**             | Chain ID of the blockchain network                            | No           | `42161` (Arbitrum)                  |
+| **transaction-value**    | Value to send in the transaction (in wei)                     | No           | `0`                                 |
+| **transaction-data**     | Transaction data/calldata                                     | No           | `0x`                                |
+
+## Workflow Outputs 📤
+
+| **Output**        | **Description**                           |
+| ----------------- | ----------------------------------------- |
+| **safe-tx-hash**  | Hash of the Safe transaction created      |
+| **transaction**   | Complete transaction details (JSON)       |
+
+## Secrets 🔐
+
+| **Secret**                | **Description**                                    | **Required** |
+| ------------------------- | -------------------------------------------------- | ------------ |
+| **PROPOSER_PRIVATE_KEY**  | Private key of the proposer wallet                 | Yes          |
+| **SAFE_API_KEY**          | Safe API key for transaction service               | Yes          |
+
+## How to Use This Reusable Workflow 🔄
+
+1. **Call the Reusable Workflow**  
+   In another workflow file, invoke this reusable workflow like so:
+
+   ```yaml
+   name: Propose Safe Transaction
+   on:
+     workflow_dispatch:
+       inputs:
+         safe-address:
+           description: 'Safe contract address'
+           required: true
+         transaction-target-address:
+           description: 'Target contract address'
+           required: true
+         transaction-data:
+           description: 'Transaction data (0x prefixed)'
+           required: false
+           default: '0x'
+
+   jobs:
+     safe-transaction:
+       uses: ./.github/workflows/safe-transaction.yml
+       secrets:
+         proposer-private-key: ${{ secrets.PROPOSER_PRIVATE_KEY }}
+         rpc-url: ${{ vars.RPC_URL }}
+         safe-api-key: ${{ secrets.SAFE_API_KEY }}
+       with:
+         safe-address: ${{ inputs.safe-address }}
+         transaction-target-address: ${{ inputs.transaction-target-address }}
+         transaction-data: ${{ inputs.transaction-data }}
+   ```
+
+2. **Configure Secrets**  
+   Ensure that the required secrets are added to your repository's settings:
+   - `PROPOSER_PRIVATE_KEY`: The private key of the wallet that will propose the transaction
+   - `SAFE_API_KEY`: Your Safe API key for the transaction service
+
+## Security Considerations 🛡️
+
+⚠️ **Important**: Never expose private keys in logs or code files. Always use GitHub Secrets to store sensitive information securely.