Skip to content

fix: audit risk#113

Open
Sunny6889 wants to merge 18 commits intotronprotocol:developfrom
Sunny6889:fix_risk_scan
Open

fix: audit risk#113
Sunny6889 wants to merge 18 commits intotronprotocol:developfrom
Sunny6889:fix_risk_scan

Conversation

@Sunny6889
Copy link
Contributor

What does this PR do?

Why are these changes required?

This PR has been tested by:

  • Unit Tests
  • Manual Testing

Follow up

Extra details

# Uses GitHub OIDC provider to assume an IAM role with short-lived credentials.
# No static keys needed — credentials expire after the workflow run.
# Prerequisites:
# 1. Create an IAM OIDC identity provider for token.actions.githubusercontent.com
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this workflows actually not used yet, so just modify the file and configure later

# Address: TPL66VK2gCXNCD7EJg9pgJRfqcRazjhUZY
# WARNING: Replace with your own generated key for any real deployment
# NEVER use this key on mainnet with real funds
da146374a75310b9666e834ee4ad0866d6f4035967bfc76217c5a495fff9f0d0 # you must enable this value and the witness address are match.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Replace with YOUR_PRIVATE_KEY_HERE_64_CHARACTERS_HEXADECIMAL_STRING_EXAMPLE

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

better not, because it will cause user cannot start the demo easily. I already mention it in related readme.

# Address: TCjptjyjenNKB2Y6EwyVT43DQyUUorxKWi
# WARNING: Replace with your own generated key for any real deployment
# NEVER use this key on mainnet with real funds
0ab0b4893c83102ed7be35eee6d50f081625ac75a07da6cb58b1ad2e9c18ce43 # you must enable this value and the witness address are match.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Replace with YOUR_PRIVATE_KEY_HERE_64_CHARACTERS_HEXADECIMAL_STRING_EXAMPLE

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same as above, for user quick-start

@@ -3,11 +3,14 @@ services:
grafana:
image: grafana/grafana-oss
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Missing docker image version?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants