Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: Migration to ESM #420

Open
wants to merge 69 commits into
base: main
Choose a base branch
from
Open

chore: Migration to ESM #420

wants to merge 69 commits into from

Conversation

fguitton
Copy link
Member

@fguitton fguitton commented Oct 4, 2024

No description provided.

fguitton and others added 30 commits November 29, 2023 12:20
# Conflicts:
#	.github/workflows/build.yml
#	libs/connector/project.json
#	libs/connector/src/secretarium.key.ts
#	libs/crypto/project.json
#	package.json
Bumps [nrwl/nx-set-shas](https://github.com/nrwl/nx-set-shas) from 3 to 4.
- [Release notes](https://github.com/nrwl/nx-set-shas/releases)
- [Commits](nrwl/nx-set-shas@v3...v4)

---
updated-dependencies:
- dependency-name: nrwl/nx-set-shas
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads) from 4.0.1 to 5.0.1.
- [Release notes](https://github.com/dessant/lock-threads/releases)
- [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md)
- [Commits](dessant/lock-threads@be8aa5b...1bf7ec2)

---
updated-dependencies:
- dependency-name: dessant/lock-threads
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
fguitton and others added 26 commits August 5, 2024 16:30
feat: Adding PDA base implementation
# Conflicts:
#	.eslintrc.cjs
#	.github/dependabot.yml
#	.github/workflows/build.yml
#	.github/workflows/lint.yml
#	.github/workflows/lock.yml
#	.github/workflows/release.yml
#	.github/workflows/test.yml
#	.husky/commit-msg
#	.husky/pre-commit
#	.vscode/extensions.json
#	.vscode/settings.json
#	apps/endoscope-e2e/project.json
#	apps/endoscope-e2e/src/support/commands.ts
#	apps/endoscope-e2e/tsconfig.json
#	apps/endoscope/jest.config.ts
#	apps/endoscope/project.json
#	apps/endoscope/src/app/DevtoolMainPanel.tsx
#	apps/endoscope/src/assets/icons/128-disabled.png
#	apps/endoscope/src/assets/icons/128-production.png
#	apps/endoscope/src/assets/icons/16-disabled.png
#	apps/endoscope/src/assets/icons/16-production.png
#	apps/endoscope/src/assets/icons/32-disabled.png
#	apps/endoscope/src/assets/icons/32-production.png
#	apps/endoscope/src/assets/icons/48-disabled.png
#	apps/endoscope/src/assets/icons/48-production.png
#	apps/endoscope/src/assets/manifest.json
#	apps/endoscope/src/panel.tsx
#	apps/endoscope/src/styles.css
#	apps/endoscope/tsconfig.json
#	apps/pocket-e2e/_detoxJestEnv.cjs
#	apps/pocket-e2e/project.json
#	apps/pocket-e2e/tsconfig.e2e.json
#	apps/pocket/.env
#	apps/pocket/app.config.ts
#	apps/pocket/babel.config.cjs
#	apps/pocket/eas.json
#	apps/pocket/metro.config.cjs
#	apps/pocket/package.json
#	apps/pocket/project.json
#	apps/pocket/tsconfig.json
#	apps/pocket/tsconfig.spec.json
#	apps/ui/.eslintrc.json
#	apps/ui/.swcrc
#	apps/ui/assets/icons/128-tabicon.png
#	apps/ui/eslint.config.js
#	apps/ui/jest/setupFile.cjs
#	apps/ui/webpack.config.cjs
#	jest.preset.cjs
#	libs/connector/.eslintrc.json
#	libs/connector/jest.config.ts
#	libs/connector/package.json
#	libs/connector/project.json
#	libs/connector/src/index.spec.ts
#	libs/connector/src/index.ts
#	libs/connector/src/links/httpsLink.ts
#	libs/connector/src/links/index.ts
#	libs/connector/src/links/websocketLink.ts
#	libs/connector/src/secretarium.connector.ts
#	libs/connector/src/secretariumConnector.ts
#	libs/connector/tsconfig.json
#	libs/crypto/.eslintrc.json
#	libs/crypto/jest.config.ts
#	libs/crypto/package.json
#	libs/crypto/project.json
#	libs/crypto/tsconfig.json
#	libs/crypto/tsconfig.lib.json
#	libs/crypto/vendor/.gitignore
#	libs/instrumentation/.eslintrc.json
#	libs/instrumentation/jest.config.ts
#	libs/instrumentation/package.json
#	libs/instrumentation/project.json
#	libs/instrumentation/src/sentry/connectorTracing.ts
#	nx.json
#	package.json
#	project.json
#	reset.d.ts
#	tools/scripts/buildMsRCrypto.mjs
#	tools/scripts/listRootDependencies.js
#	tools/tsconfig.tools.json
#	tsconfig.base.json
#	tsconfig.eslint.json
#	tsconfig.json
#	yarn.lock
Copy link

gitguardian bot commented Oct 4, 2024

⚠️ GitGuardian has uncovered 7 secrets following the scan of your pull request.

Please consider investigating the findings and remediating the incidents. Failure to do so may lead to compromising the associated services or software components.

🔎 Detected hardcoded secrets in your pull request
GitGuardian id GitGuardian status Secret Commit Filename
11011263 Triggered Nx Cloud Token 31fc746 nx.json View secret
11011263 Triggered Nx Cloud Token 50b4454 nx.json View secret
13080170 Triggered Nx Cloud Token 31fc746 nx.json View secret
13080170 Triggered Nx Cloud Token 5b7127d nx.json View secret
13080378 Triggered Nx Cloud Token 50b4454 nx.json View secret
13080378 Triggered Nx Cloud Token 5b7127d nx.json View secret
13080378 Triggered Nx Cloud Token 8cf86d1 nx.json View secret
🛠 Guidelines to remediate hardcoded secrets
  1. Understand the implications of revoking this secret by investigating where it is used in your code.
  2. Replace and store your secrets safely. Learn here the best practices.
  3. Revoke and rotate these secrets.
  4. If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.

To avoid such incidents in the future consider


🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant