feat: add contract safeguards, fuzzing, ABI artifact, and refund resolution - #1419
Conversation
|
@Danlee76 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits. You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀 |
Closes Akanimoh12#1196 Closes Akanimoh12#1197 Closes Akanimoh12#1198
|
Please close your pr well and open pr against the right branch, not main |
Danlee76
changed the title
|
please resolve conflicts |
…ture/1191-contract-circuit-breaker # Conflicts: # backend/src/modules/refunds/refunds.routes.ts # backend/src/modules/refunds/refunds.service.ts # backend/src/modules/refunds/refunds.test.ts # contracts/tipz/src/lib.rs # contracts/tipz/src/profile.rs # contracts/tipz/src/test/mod.rs
|
| GitGuardian id | GitGuardian status | Secret | Commit | Filename | |
|---|---|---|---|---|---|
| 21431574 | Triggered | Generic Password | 5c310d1 | .github/workflows/pr-checks.yml | View secret |
🛠 Guidelines to remediate hardcoded secrets
- Understand the implications of revoking this secret by investigating where it is used in your code.
- Replace and store your secret safely. Learn here the best practices.
- Revoke and rotate this secret.
- If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.
To avoid such incidents in the future consider
- following these best practices for managing and storing secrets including API keys and other credentials
- install secret detection on pre-commit to catch secret before it leaves your machine and ease remediation.
🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.
3 participants
Summary
Testing
cargo test -p tipz-contract test_circuit_breaker, but local Rust 1.88.0 is partially installed and rustup stalls while repairing/downloading componentsnpm test -- refunds.test.ts, but backend dependencies were missing andnpm installtimed out before installing VitestCloses #1191
Closes #1196
Closes #1197
Closes #1198