From 871f7b53ba869a68cbef44d15e9a328470e46c19 Mon Sep 17 00:00:00 2001 From: mertcano <35747700+mertcano@users.noreply.github.com> Date: Fri, 14 Aug 2026 17:02:45 +0300 Subject: [PATCH 1/7] Refactor publish.yml for improved clarity and structure --- .github/workflows/publish.yml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 4a778290f3..327c0c603c 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -1,14 +1,13 @@ -name: Publish on: workflow_dispatch: inputs: - projects: + projects: description: "Publish Workspaces (to DockerHub)" required: true - chain_type: + chain_type: description: "Select Chain Type" required: false - confirm: + confirm: description: "enter \"CONFIRM\" to process" required: true concurrency: @@ -74,13 +73,13 @@ jobs: - name: Set up Docker Buildx if: ${{ steps.assign-chain-type.outputs.chain_type != '' }} uses: docker/setup-buildx-action@v2 - - name: Login to DockerHub 👤 + - name: Login to DockerHub if: ${{ steps.assign-chain-type.outputs.chain_type != '' }} uses: docker/login-action@v2 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - - name: Login to Quay 👤 + - name: Login to Quay if: ${{ steps.assign-chain-type.outputs.chain_type != '' }} uses: docker/login-action@v2 with: @@ -99,7 +98,8 @@ jobs: NEXT_PUBLIC_BANNERS_JSON=${{ secrets.BANNERS_JSON }} NEXT_PUBLIC_COINZILLA_ZONE=${{ secrets.COINZILLA_ZONE }} NEXT_PUBLIC_SENTRY_DSN=${{ secrets.SENTRY_DSN }} - SENTRY_AUTH_TOKEN=${{ secrets.SENTRY_AUTH_TOKEN }} + secrets: | + sentry_auth_token=${{ secrets.SENTRY_AUTH_TOKEN }} target: runner tags: | forbole/big-dipper-2.0-cosmos:monorepo-${{ matrix.project }}-${{ steps.assign-chain-type.outputs.chain_type }}-${{ steps.assign-chain-type.outputs.sha_short }} From c0f2ab79d7e731e4c1f0003dc0746a5c93f31dbe Mon Sep 17 00:00:00 2001 From: mertcano <35747700+mertcano@users.noreply.github.com> Date: Fri, 14 Aug 2026 17:11:38 +0300 Subject: [PATCH 2/7] Refactor Dockerfile for Sentry token handling Updated Dockerfile to use secret for SENTRY_AUTH_TOKEN and modified the RUN commands for better handling of SENTRY_DSN. --- Dockerfile | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/Dockerfile b/Dockerfile index 77a1a7788b..c5be96a994 100644 --- a/Dockerfile +++ b/Dockerfile @@ -53,8 +53,7 @@ ARG NEXT_PUBLIC_WC_BRIDGE_URL ENV NEXT_PUBLIC_WC_BRIDGE_URL=${NEXT_PUBLIC_WC_BRIDGE_URL} ARG NEXT_PUBLIC_SENTRY_DSN ENV NEXT_PUBLIC_SENTRY_DSN=${NEXT_PUBLIC_SENTRY_DSN} -ARG SENTRY_AUTH_TOKEN -ENV SENTRY_AUTH_TOKEN=${SENTRY_AUTH_TOKEN} + ENV SENTRY_URL=https://sentry.io/ ENV SENTRY_ORG=forbole ENV SENTRY_PROJECT=big-dipper @@ -68,12 +67,16 @@ ENV TURBO_TEAM=${TURBO_TEAM} ARG TURBO_TOKEN ENV TURBO_TOKEN=${TURBO_TOKEN} -RUN export SENTRYCLI_SKIP_DOWNLOAD=$([ -z "${NEXT_PUBLIC_SENTRY_DSN}" ] && echo 1) \ +RUN --mount=type=secret,id=sentry_auth_token,required=false \ + if [ -f /run/secrets/sentry_auth_token ]; then export SENTRY_AUTH_TOKEN="$(cat /run/secrets/sentry_auth_token)"; fi \ + && export SENTRYCLI_SKIP_DOWNLOAD=$([ -z "${NEXT_PUBLIC_SENTRY_DSN}" ] && echo 1) \ && corepack enable && yarn -v \ && yarn install --inline-builds ## Build the project -RUN ([ -z "${NEXT_PUBLIC_SENTRY_DSN}" ] || yarn node packages/shared-utils/configs/sentry/install.js) \ +RUN --mount=type=secret,id=sentry_auth_token,required=false \ + if [ -f /run/secrets/sentry_auth_token ]; then export SENTRY_AUTH_TOKEN="$(cat /run/secrets/sentry_auth_token)"; fi \ + && ([ -z "${NEXT_PUBLIC_SENTRY_DSN}" ] || yarn node packages/shared-utils/configs/sentry/install.js) \ && yarn workspace ${PROJECT_NAME} add sharp \ && yarn workspace ${PROJECT_NAME} run build From 843a172eb8b9047b507805f1aace3131f33787a9 Mon Sep 17 00:00:00 2001 From: mertcano <35747700+mertcano@users.noreply.github.com> Date: Fri, 14 Aug 2026 23:40:34 +0300 Subject: [PATCH 3/7] Refactor SENTRY_AUTH_TOKEN export in Dockerfile --- Dockerfile | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index c5be96a994..77d0f2b7bf 100644 --- a/Dockerfile +++ b/Dockerfile @@ -53,7 +53,6 @@ ARG NEXT_PUBLIC_WC_BRIDGE_URL ENV NEXT_PUBLIC_WC_BRIDGE_URL=${NEXT_PUBLIC_WC_BRIDGE_URL} ARG NEXT_PUBLIC_SENTRY_DSN ENV NEXT_PUBLIC_SENTRY_DSN=${NEXT_PUBLIC_SENTRY_DSN} - ENV SENTRY_URL=https://sentry.io/ ENV SENTRY_ORG=forbole ENV SENTRY_PROJECT=big-dipper @@ -68,14 +67,14 @@ ARG TURBO_TOKEN ENV TURBO_TOKEN=${TURBO_TOKEN} RUN --mount=type=secret,id=sentry_auth_token,required=false \ - if [ -f /run/secrets/sentry_auth_token ]; then export SENTRY_AUTH_TOKEN="$(cat /run/secrets/sentry_auth_token)"; fi \ + if [ -f /run/secrets/sentry_auth_token ]; then SENTRY_AUTH_TOKEN=$(cat /run/secrets/sentry_auth_token) && export SENTRY_AUTH_TOKEN; fi \ && export SENTRYCLI_SKIP_DOWNLOAD=$([ -z "${NEXT_PUBLIC_SENTRY_DSN}" ] && echo 1) \ && corepack enable && yarn -v \ && yarn install --inline-builds ## Build the project RUN --mount=type=secret,id=sentry_auth_token,required=false \ - if [ -f /run/secrets/sentry_auth_token ]; then export SENTRY_AUTH_TOKEN="$(cat /run/secrets/sentry_auth_token)"; fi \ + if [ -f /run/secrets/sentry_auth_token ]; then SENTRY_AUTH_TOKEN=$(cat /run/secrets/sentry_auth_token) && export SENTRY_AUTH_TOKEN; fi \ && ([ -z "${NEXT_PUBLIC_SENTRY_DSN}" ] || yarn node packages/shared-utils/configs/sentry/install.js) \ && yarn workspace ${PROJECT_NAME} add sharp \ && yarn workspace ${PROJECT_NAME} run build From 5e04ee36f3123e0e1adb16570a4fe7f46f372f02 Mon Sep 17 00:00:00 2001 From: mertcano <35747700+mertcano@users.noreply.github.com> Date: Fri, 14 Aug 2026 23:41:28 +0300 Subject: [PATCH 4/7] Change actions to specific commit versions in publish.yml Updated GitHub Actions workflow to use specific commit versions for actions. --- .github/workflows/publish.yml | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 327c0c603c..2dd76deb56 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -20,7 +20,7 @@ jobs: validate-projects: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - name: Extract projects run: | export ALL_PROJECTS=$(yarn workspaces list --json | jq -csr '[ .[].name | select(. | startswith("web-") ) ]') @@ -45,7 +45,7 @@ jobs: project: ${{ fromJSON(needs.validate-projects.outputs.projects) }} name: Publish ${{ matrix.project }} steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - name: Assign chain type run: | node < Date: Sat, 15 Aug 2026 00:07:38 +0300 Subject: [PATCH 5/7] Fix indentation and formatting in publish.yml --- .github/workflows/publish.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 2dd76deb56..13b7876968 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -21,6 +21,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 + with: + persist-credentials: false - name: Extract projects run: | export ALL_PROJECTS=$(yarn workspaces list --json | jq -csr '[ .[].name | select(. | startswith("web-") ) ]') @@ -46,6 +48,8 @@ jobs: name: Publish ${{ matrix.project }} steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 + with: + persist-credentials: false - name: Assign chain type run: | node < Date: Sat, 15 Aug 2026 00:08:03 +0300 Subject: [PATCH 6/7] Fix export syntax for SENTRYCLI_SKIP_DOWNLOAD --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 77d0f2b7bf..3c909239c6 100644 --- a/Dockerfile +++ b/Dockerfile @@ -68,7 +68,7 @@ ENV TURBO_TOKEN=${TURBO_TOKEN} RUN --mount=type=secret,id=sentry_auth_token,required=false \ if [ -f /run/secrets/sentry_auth_token ]; then SENTRY_AUTH_TOKEN=$(cat /run/secrets/sentry_auth_token) && export SENTRY_AUTH_TOKEN; fi \ - && export SENTRYCLI_SKIP_DOWNLOAD=$([ -z "${NEXT_PUBLIC_SENTRY_DSN}" ] && echo 1) \ + && export SENTRYCLI_SKIP_DOWNLOAD="$([ -z "${NEXT_PUBLIC_SENTRY_DSN}" ] && echo 1)" \ && corepack enable && yarn -v \ && yarn install --inline-builds From b0b9dc9308cc34451f8b2fd2c444a6766d6ee256 Mon Sep 17 00:00:00 2001 From: mertcano <35747700+mertcano@users.noreply.github.com> Date: Sat, 15 Aug 2026 00:08:34 +0300 Subject: [PATCH 7/7] Add Sentry auth token as a secret in docker-compose Added secrets configuration for Sentry authentication token. --- docker-compose.yml | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/docker-compose.yml b/docker-compose.yml index c992ca33c9..7967a09c2a 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -3,14 +3,15 @@ version: "3.8" x-args: &args PROJECT_NAME: ${PROJECT_NAME:-web} NEXT_PUBLIC_CHAIN_TYPE: ${NEXT_PUBLIC_CHAIN_TYPE:-} - TURBO_TEAM: ${TURBO_TEAM:-} # for Turborepo remote cache - TURBO_TOKEN: ${TURBO_TOKEN:-} # for Turborepo remote cache + TURBO_TEAM: ${TURBO_TEAM:-} # for Turborepo remote cache + TURBO_TOKEN: ${TURBO_TOKEN:-} # for Turborepo remote cache NEXT_PUBLIC_SENTRY_DSN: ${NEXT_PUBLIC_SENTRY_DSN:-} # for Sentry.io - SENTRY_AUTH_TOKEN: ${SENTRY_AUTH_TOKEN:-} # for Sentry.io x-build: &build context: . args: *args + secrets: + - sentry_auth_token target: runner x-web: &web @@ -34,6 +35,11 @@ services: args: <<: *args BASE_IMAGE: arm64v8/node:18 + +secrets: + sentry_auth_token: + environment: "SENTRY_AUTH_TOKEN" + # Define a network, which allows containers to communicate # with each other, by using their container name as a hostname networks: