From 71506d393889d773643dc1e67862ffe988d8cc02 Mon Sep 17 00:00:00 2001 From: Sean Kwak Date: Mon, 1 Dec 2025 23:08:37 +0000 Subject: [PATCH 1/2] fix: add GHCR auth, environments, and update component versions Add preview/preprod/node-dev-01 environments with configs from midnight-node, update postgres to 17.2, cardano-db-sync to 13.6.0.5, and sync pc-chain-config files. --- .envrc | 2 +- .envrc.node-dev-01 | 7 + .envrc.preprod | 7 + .envrc.preview | 7 + .envrc.qanet | 2 +- .envrc.testnet-02 | 2 +- .github/scan.sh | 73 ++++++++- .github/workflows/scan.yaml | 7 +- compose-partner-chains.yml | 4 +- envs/node-dev-01/pc-chain-config.json | 96 ++++++++++++ envs/preprod/pc-chain-config.json | 101 ++++++++++++ envs/preview/pc-chain-config.json | 77 ++++++++++ envs/qanet/pc-chain-config.json | 211 ++++++++++++++------------ 13 files changed, 494 insertions(+), 102 deletions(-) create mode 100644 .envrc.node-dev-01 create mode 100644 .envrc.preprod create mode 100644 .envrc.preview create mode 100644 envs/node-dev-01/pc-chain-config.json create mode 100644 envs/preprod/pc-chain-config.json create mode 100644 envs/preview/pc-chain-config.json diff --git a/.envrc b/.envrc index 54889e9..2ca06b5 100644 --- a/.envrc +++ b/.envrc @@ -52,6 +52,6 @@ export NODE_KEY="$(cat ./midnight-node.privatekey)" # Partner chains config: # export CARDANO_NETWORK=preview -export CARDANO_IMAGE="ghcr.io/intersectmbo/cardano-node:10.2.1" +export CARDANO_IMAGE="ghcr.io/intersectmbo/cardano-node:10.5.3" export CARDANO_DATA_DIR=./cardano-data export CARDANO_CONFIG_DIR=./cardano-config/${CARDANO_NETWORK} diff --git a/.envrc.node-dev-01 b/.envrc.node-dev-01 new file mode 100644 index 0000000..c62b554 --- /dev/null +++ b/.envrc.node-dev-01 @@ -0,0 +1,7 @@ +# shellcheck shell=bash +# overrides for node-dev-01 +export MIDNIGHT_NODE_IMAGE="ghcr.io/midnight-ntwrk/midnight-node:0.18.0-rc.7" + +# Well known addresses of network that allow discovery of all other nodes. +# TODO: Update with actual node-dev-01 bootnode addresses +export BOOTNODES="/dns/boot-node.node-dev-01.dev.midnight.network/tcp/30333/ws/p2p/12D3KooWPLACEHOLDER" diff --git a/.envrc.preprod b/.envrc.preprod new file mode 100644 index 0000000..f02223a --- /dev/null +++ b/.envrc.preprod @@ -0,0 +1,7 @@ +# shellcheck shell=bash +# overrides for preprod +export MIDNIGHT_NODE_IMAGE="ghcr.io/midnight-ntwrk/midnight-node:0.18.0-rc.6" + +# Well known addresses of network that allow discovery of all other nodes. +# TODO: Update with actual preprod bootnode addresses +export BOOTNODES="/dns/boot-node-7.preprod.midnight.network/tcp/30333/ws/p2p/12D3KooWPLACEHOLDER" diff --git a/.envrc.preview b/.envrc.preview new file mode 100644 index 0000000..fbe59cf --- /dev/null +++ b/.envrc.preview @@ -0,0 +1,7 @@ +# shellcheck shell=bash +# overrides for preview +export MIDNIGHT_NODE_IMAGE="ghcr.io/midnight-ntwrk/midnight-node:0.18.0-rc.7" + +# Well known addresses of network that allow discovery of all other nodes. +# TODO: Update with actual preview bootnode addresses +export BOOTNODES="/dns/boot-node-7.previewcluster.preview.midnight.network/tcp/30333/ws/p2p/12D3KooWK66i7dtGVNSwDh9tTeqov1q6LSdWsRLJvTyzTCaywYgK" diff --git a/.envrc.qanet b/.envrc.qanet index 4e493aa..d8cc8bf 100644 --- a/.envrc.qanet +++ b/.envrc.qanet @@ -1,5 +1,5 @@ # overrides for qanet -export MIDNIGHT_NODE_IMAGE="ghcr.io/midnight-ntwrk/midnight-node:0.12.0-rc.3" +export MIDNIGHT_NODE_IMAGE="ghcr.io/midnight-ntwrk/midnight-node:0.18.0-rc.7" # Well known addresses of network that allow discovery of all other nodes. export BOOTNODES="/dns/boot-node-01.qanet.dev.midnight.network/tcp/30333/ws/p2p/12D3KooWEyoppNCUx8Yx66oV9fJnriXwCcXwDDUA2kj6vnc6iDEp \ diff --git a/.envrc.testnet-02 b/.envrc.testnet-02 index 2d5e64a..d44da9c 100644 --- a/.envrc.testnet-02 +++ b/.envrc.testnet-02 @@ -1,5 +1,5 @@ # overrides for testnet-02 -export MIDNIGHT_NODE_IMAGE="midnightnetwork/midnight-node:0.12.0" +export MIDNIGHT_NODE_IMAGE="ghcr.io/midnight-ntwrk/midnight-node:0.12.1" # These are well known addresses of a network that allow you to discover all the other nodes. export BOOTNODES="/dns/boot-node-01.testnet-02.midnight.network/tcp/30333/ws/p2p/12D3KooWMjUq13USCvQR9Y6yFzYNYgTQBLNAcmc8psAuPx2UUdnB \ diff --git a/.github/scan.sh b/.github/scan.sh index f0826c8..679e70d 100755 --- a/.github/scan.sh +++ b/.github/scan.sh @@ -1,16 +1,22 @@ #!/usr/bin/env bash +set -euo pipefail +IFS=$'\n\t' source "./.envrc" docker compose -f ./compose.yml -f ./compose-partner-chains.yml build scan_image() { - local image SAFE_NAME SARIF_FILE + local image SAFE_NAME SARIF_FILE scan_exit_code image="$1" + echo "==========================================" echo "Scanning $image..." + echo "==========================================" SAFE_NAME=$(echo "$image" | sed 's/[\/:]/-/g') SARIF_FILE="${SAFE_NAME}.sarif" + # Run Trivy scan and capture exit code + scan_exit_code=0 time docker run --rm \ -v /var/run/docker.sock:/var/run/docker.sock \ -v trivy-cache:/root/.cache \ @@ -20,17 +26,78 @@ scan_image() { --ignore-unfixed \ --no-progress \ --output "/output/$SARIF_FILE" \ - "$image" + "$image" || scan_exit_code=$? + + # Check if scan succeeded and SARIF file was created + if [[ $scan_exit_code -ne 0 ]]; then + echo "::warning::Trivy scan failed for $image (exit code: $scan_exit_code)" + # Create minimal valid SARIF to avoid breaking the upload + cat > "$SARIF_FILE" <> /tmp/failed_scans.txt + fi + + # Validate SARIF file exists and is valid JSON + if [[ ! -f "$SARIF_FILE" ]]; then + echo "::error::SARIF file not created for $image" + return 1 + fi + + if ! jq empty "$SARIF_FILE" 2>/dev/null; then + echo "::error::Invalid SARIF JSON for $image" + return 1 + fi + + # Add automation details and move to scan_reports jq --arg image "$image" \ '.runs[0].automationDetails = { id: "trivy/\($image)", description: {text: "Trivy scan for \($image)"} }' "$SARIF_FILE" > "./scan_reports/${SARIF_FILE}" + echo "Completed $SARIF_FILE" } export -f scan_image -mkdir scan_reports +mkdir -p scan_reports +# Clear any previous failed scans record +rm -f /tmp/failed_scans.txt + +# Scan all images from compose config docker compose -f ./compose.yml -f ./compose-partner-chains.yml config --images | \ xargs -I {} bash -c 'scan_image "$@"' _ {} + +# Report summary +echo "" +echo "==========================================" +echo "Scan Summary" +echo "==========================================" +if [[ -f /tmp/failed_scans.txt ]]; then + echo "::warning::The following images failed to scan:" + cat /tmp/failed_scans.txt + echo "" + echo "Placeholder SARIF files were created for failed scans." +else + echo "All images scanned successfully." +fi diff --git a/.github/workflows/scan.yaml b/.github/workflows/scan.yaml index 94cc7bb..c6f206c 100644 --- a/.github/workflows/scan.yaml +++ b/.github/workflows/scan.yaml @@ -45,11 +45,13 @@ jobs: name: Build and scan code runs-on: ubuntu-latest strategy: + fail-fast: false matrix: - cfg_preset: ['testnet-02', 'qanet'] + cfg_preset: ['testnet-02', 'qanet', 'node-dev-01', 'preview', 'preprod'] permissions: actions: read contents: read + packages: read security-events: write statuses: write steps: @@ -58,6 +60,9 @@ jobs: with: fetch-depth: 0 + - name: Login to GitHub Container Registry + run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u "${{ github.actor }}" --password-stdin + - name: Scan images env: CFG_PRESET: ${{ matrix.cfg_preset }} diff --git a/compose-partner-chains.yml b/compose-partner-chains.yml index 4b73f4b..30e52be 100644 --- a/compose-partner-chains.yml +++ b/compose-partner-chains.yml @@ -35,7 +35,7 @@ services: - ${CARDANO_DATA_DIR}:/data postgres: - image: postgres:15.3 + image: postgres:17.2 platform: linux/amd64 container_name: db-sync-postgres environment: @@ -53,7 +53,7 @@ services: retries: 5 cardano-db-sync: - image: ghcr.io/intersectmbo/cardano-db-sync:13.6.0.4 + image: ghcr.io/intersectmbo/cardano-db-sync:13.6.0.5 platform: linux/amd64 container_name: cardano-db-sync restart: unless-stopped diff --git a/envs/node-dev-01/pc-chain-config.json b/envs/node-dev-01/pc-chain-config.json new file mode 100644 index 0000000..c637ab0 --- /dev/null +++ b/envs/node-dev-01/pc-chain-config.json @@ -0,0 +1,96 @@ +{ + "bootnodes": [ + "/dns/midnight-node-boot-01/tcp/30333/p2p/12D3KooWEyoppNCUx8Yx66oV9fJnriXwCcXwDDUA2kj6vnc6iDEp" + ], + "chain_parameters": { + "genesis_utxo": "826fb99b43ab5bad1022f78774038d4c0f8f588d4c0a538f357a57fc2cb667ec#0" + }, + "initial_governance": { + "authorities": [ + "0x5eb21f015fbc7e6025a6518f953a221d79907e97712f31a469585216" + ], + "threshold": 1 + }, + "cardano": { + "security_parameter": 432, + "active_slots_coeff": 0.05, + "first_epoch_number": 0, + "first_slot_number": 0, + "epoch_duration_millis": 86400000, + "first_epoch_timestamp_millis": 1666656000000, + "slot_duration_millis": 1000 + }, + "cardano_addresses": { + "committee_candidates_address": "addr_test1wrahchgp7x6l8c3lamt4egk7dcwhjdvz3npdwq8mz4q9tecylsqww", + "d_parameter_policy_id": "0x907345b2b1e61424d83af0d0d3b32de8d67882fcb1a6d45f28a8714c", + "permissioned_candidates_policy_id": "0xf06e34dcab3daedbe041cd8586c3e8555e7350f9c5cef1980d3365c3", + "bridge": { + "illiquid_circulation_supply_validator_address": "addr_test1wzue5jtnfjqg6adr25d9vsjnqm3hhnpdgam5tfm0e3qqpdce0appd", + "asset": { + "policy_id": "0x00000000000000000000000000000000000000000000000000000000", + "asset_name": "0x" + } + }, + "governed_map": { + "validator_address": "addr_test1wr7faeyz8mqekzcppspsrs5y6rdlnfnllt8l0cpfs6m9gng78tg6z", + "policy_id": "0x9d3a19404df5a19fc1d58bd6d924c4bac3ad1fba48b85fc0a43ba789" + } + }, + "initial_permissioned_candidates": [ + { + "sidechain_pub_key": "0x020a617391de0e0291310bf7792bb41d9573e8a054b686205da5553e08fac6d0b8", + "aura_pub_key": "0x1254f7017f0b8347ce7ab14f96d818802e7e9e0c0d1b7c9acb3c726b080e7a03", + "grandpa_pub_key": "0x5079bcd20fd97d7d2f752c4607012600b401950260a91821f73e692071c82bf5", + "beefy_pub_key": "0x020a617391de0e0291310bf7792bb41d9573e8a054b686205da5553e08fac6d0b8" + }, + { + "sidechain_pub_key": "0x0287aa09f21089003413b37602a3f6909f8695901c70a28175cafd99d5976a202a", + "aura_pub_key": "0xb0521e374b0586d6829dad320753c62cdc6ef5edbd37ffdd36da0ae97c521819", + "grandpa_pub_key": "0x3f7f2fc8829c649501a0fb72a79abf885aa89e6c4ee2d00c6041dfa85e320980", + "beefy_pub_key": "0x0287aa09f21089003413b37602a3f6909f8695901c70a28175cafd99d5976a202a" + }, + { + "sidechain_pub_key": "0x0291f1217d5a04cb83312ee3d88a6e6b33284e053e6ccfc3a90339a0299d12967c", + "aura_pub_key": "0x1cbd2d43530a44705ad088af313e18f80b53ef16b36177cd4b77b846f2a5f07c", + "grandpa_pub_key": "0x568cb4a574c6d178feb39c27dfc8b3f789e5f5423e19c71633c748b9acf086b5", + "beefy_pub_key": "0x0291f1217d5a04cb83312ee3d88a6e6b33284e053e6ccfc3a90339a0299d12967c" + }, + { + "sidechain_pub_key": "0x02b8beaa492309f2332dd5445e20b8f74e26336c226daecf63cc4cd95a1ef3b140", + "aura_pub_key": "0x4017e17f10cc5a98731de9f020dbb37986f6e575789152d7fadae2b32eea6c13", + "grandpa_pub_key": "0x98bf054a827193b21d7127e4ee53ba9a4992aa09c0acced93cf5ca5da1ff7468", + "beefy_pub_key": "0x02b8beaa492309f2332dd5445e20b8f74e26336c226daecf63cc4cd95a1ef3b140" + }, + { + "sidechain_pub_key": "0x031d10105e323c4afce225208f71a6441ee327a65b9e646e772500c74d31f669aa", + "aura_pub_key": "0xe659a7a1628cdd93febc04a4e0646ea20e9f5f0ce097d9a05290d4a9e054df4e", + "grandpa_pub_key": "0x1dfe3e22cc0d45c70779c1095f7489a8ef3cf52d62fbd8c2fa38c9f1723502b5", + "beefy_pub_key": "0x031d10105e323c4afce225208f71a6441ee327a65b9e646e772500c74d31f669aa" + }, + { + "sidechain_pub_key": "0x035d35454a9671ccf959def176822d38e9e9aa5bbcfe50a7cbe69834dde9147ce5", + "aura_pub_key": "0x1880104772db7b947f3f8ccdcab3650d7179c44551d22dd0cca5dc852a140563", + "grandpa_pub_key": "0x11e6cb467a7528e861732c473b3a66c6701f38d35b894da8a1337f68708aa0eb", + "beefy_pub_key": "0x035d35454a9671ccf959def176822d38e9e9aa5bbcfe50a7cbe69834dde9147ce5" + }, + { + "sidechain_pub_key": "0x036c6ae73d36d0c02b54d7877a57b1734b8e096134bd2c1b829431aa38f18bcce1", + "aura_pub_key": "0xac859f8a216eeb1b320b4c76d118da3d7407fa523484d0a980126d3b4d0d220a", + "grandpa_pub_key": "0x16f97016bbea8f7b45ae6757b49efc1080accc175d8f018f9ba719b60b0815e4", + "beefy_pub_key": "0x036c6ae73d36d0c02b54d7877a57b1734b8e096134bd2c1b829431aa38f18bcce1" + }, + { + "sidechain_pub_key": "0x0389411795514af1627765eceffcbd002719f031604fadd7d188e2dc585b4e1afb", + "aura_pub_key": "0x90b5ab205c6974c9ea841be688864633dc9ca8a357843eeacf2314649965fe22", + "grandpa_pub_key": "0x439660b36c6c03afafca027b910b4fecf99801834c62a5e6006f27d978de234f", + "beefy_pub_key": "0x0389411795514af1627765eceffcbd002719f031604fadd7d188e2dc585b4e1afb" + }, + { + "sidechain_pub_key": "0x0390084fdbf27d2b79d26a4f13f0ccd982cb755a661969143c37cbc49ef5b91f27", + "aura_pub_key": "0x8eaf04151687736326c9fea17e25fc5287613693c912909cb226aa4794f26a48", + "grandpa_pub_key": "0xd17c2d7823ebf260fd138f2d7e27d114c0145d968b5ff5006125f2414fadae69", + "beefy_pub_key": "0x0390084fdbf27d2b79d26a4f13f0ccd982cb755a661969143c37cbc49ef5b91f27" + } + ] +} + diff --git a/envs/preprod/pc-chain-config.json b/envs/preprod/pc-chain-config.json new file mode 100644 index 0000000..eb32121 --- /dev/null +++ b/envs/preprod/pc-chain-config.json @@ -0,0 +1,101 @@ +{ + "bootnodes": [ + "/dns/preprod/tcp/30333/p2p/12D3KooWDU3ydya1JaGttYuorL2e6EnZrEBzmWH1fGef1NnsSmtF" + ], + "chain_parameters": { + "genesis_utxo": "7177988904dc53037187962ecdbcb5dd245ac5c3e220a2122df81fea7c604eea#1" + }, + "initial_governance": { + "authorities": [ + "0xf50d4250ef32d62516433c1db13b3e6f73b1570fe1747dd493c4ba28" + ], + "threshold": 1 + }, + "cardano": { + "security_parameter": 2160, + "active_slots_coeff": 0.05, + "first_epoch_number": 4, + "first_slot_number": 86400, + "epoch_duration_millis": 432000000, + "first_epoch_timestamp_millis": 1655769600000, + "slot_duration_millis": 1000 + }, + "cardano_addresses": { + "committee_candidates_address": "addr_test1wrq0lldlvfdgay9tsdvpe2m5qk29e9g4ktzky7wz3nrmygcty5y4c", + "d_parameter_policy_id": "0x3c0d30f4aace7d53243371bd30c0ca1f36b033d9d39734709770c172", + "permissioned_candidates_policy_id": "0xf98fd74a9f2a38517be40cd8e81098a82103cabe140fc19a3f18ed41", + "bridge": { + "illiquid_circulation_supply_validator_address": "addr_test1wq8vp65petn7n65gd8r8tvmxk4nstm9uxk8qxal5kytzgtgtzeaeq", + "asset": { + "policy_id": "0x00000000000000000000000000000000000000000000000000000000", + "asset_name": "0x" + } + }, + "governed_map": { + "validator_address": "addr_test1wz6ehdggmynhnwyq3c40763w0jwwquzmvx7yrupys3dmz7smprat8", + "policy_id": "0xdd818a9264a8cb86989fe04c3791058277e4004a1a7955e2f80a3e25" + } + }, + "initial_permissioned_candidates": [ + { + "aura_pub_key": "0xde2306334193be59122367e5a774769e59de84baacfd8e136fba8e18dbcd0833", + "grandpa_pub_key": "0x1bce1ca17ca250a2ccb4964573cc9a8650e390c38b0a6963b5307f9e5fc3f9fe", + "sidechain_pub_key": "0x027576a87c347dadcf62edd2f1a879daaffd8affebdd129a54ae01e4eaff269a6e", + "beefy_pub_key": "0x027576a87c347dadcf62edd2f1a879daaffd8affebdd129a54ae01e4eaff269a6e" + }, + { + "aura_pub_key": "0x8c457a4b2383443ff5b30420aea92bfca65971fd0b76d21715529e4e8192be1d", + "grandpa_pub_key": "0x0235a9e06d7eefef4c0bd23b57d6516fc99692e51c14f9d019f517aebe7150d0", + "sidechain_pub_key": "0x022514d4b4134138f4579409897f67ac22923bf3422784d4b54dc9d03bf22f2a45", + "beefy_pub_key": "0x022514d4b4134138f4579409897f67ac22923bf3422784d4b54dc9d03bf22f2a45" + }, + { + "aura_pub_key": "0xf6aa16d4c6892575af371fd14e1e40a7c4675876e8f331e2e2466a28e950765f", + "grandpa_pub_key": "0x5533a50ebb042a4137c2d1e5be6867cc860e3cf0ce8a83b8d862733c216c7e0d", + "sidechain_pub_key": "0x03b9c08e5e563b8480d505297e8113c87e3b5c5b676b03fa795d5a48de3b1ae3e3", + "beefy_pub_key": "0x03b9c08e5e563b8480d505297e8113c87e3b5c5b676b03fa795d5a48de3b1ae3e3" + }, + { + "aura_pub_key": "0xcccd6dbd01b95948f56bb84ad441f29608b12b3694a2a71ce4ba0fa8c07f7f4b", + "grandpa_pub_key": "0x0d1a7725715dada86797150e28caa848eb67ab4ddb938f2de14bad9f7f5de222", + "sidechain_pub_key": "0x02138dee2cb4966a3836331b79a80c84cb5dc1899af6f577711e2d514ff7279fd9", + "beefy_pub_key": "0x02138dee2cb4966a3836331b79a80c84cb5dc1899af6f577711e2d514ff7279fd9" + }, + { + "aura_pub_key": "0x12165fdd275029f4812daa0ba8bf416aea14c62db1e4223ff427b81f50ccac61", + "grandpa_pub_key": "0x9a8a4f0d16a1ca620765c65b176d5ac7cb4a53da5028263809ce3b9b782f243c", + "sidechain_pub_key": "0x03f07fcb3a460d7dc6aa9525c476effb49d95fce4a8a41cfb2fb6afc2573a32d6b", + "beefy_pub_key": "0x03f07fcb3a460d7dc6aa9525c476effb49d95fce4a8a41cfb2fb6afc2573a32d6b" + }, + { + "aura_pub_key": "0x0e2ef42425883ac46002962a5201ea7bbbe40dc8d8542ec148d3ff32d5bbd71b", + "grandpa_pub_key": "0xb22e3803270bc87d38c63f88c2fa16d546591d011d98db9d1ea58903eb3260ca", + "sidechain_pub_key": "0x02aeedbf328a26d872cb7ecbb8352b1ad7451a384379e602d17cf4114847c9b19d", + "beefy_pub_key": "0x02aeedbf328a26d872cb7ecbb8352b1ad7451a384379e602d17cf4114847c9b19d" + }, + { + "aura_pub_key": "0x168fbc39d9e1e697484918a400a4eef096353085e5f5057e75b1101af585a158", + "grandpa_pub_key": "0xb32b2b08a74099b170c5e9744912d98454011b1f8de0ee70f2c422c6861cdace", + "sidechain_pub_key": "0x03f983b91685b9ca36e2032041b8f97f7a8de717c0d610fe4f25dd226c640d4417", + "beefy_pub_key": "0x03f983b91685b9ca36e2032041b8f97f7a8de717c0d610fe4f25dd226c640d4417" + }, + { + "aura_pub_key": "0xfaea12ba4222b542abd9a9024aad8e42e55acf2045a386ba98abc3b86371dc14", + "grandpa_pub_key": "0x6ec6705be4d119a27a466e05680c5fead39a65fccbb283a13c32db462e12eb6c", + "sidechain_pub_key": "0x02e7e787caca0cf41f5e7a650569c5e5777e3d8257f82ccf826bec0507add2115d", + "beefy_pub_key": "0x02e7e787caca0cf41f5e7a650569c5e5777e3d8257f82ccf826bec0507add2115d" + }, + { + "aura_pub_key": "0xae6ee23c8eb9d5b38fe073f4b5520c4a036b86a1377723bda88165f2c5483338", + "grandpa_pub_key": "0x23715374d64eb47b25e7be527e64c04b21625429ea96c46eb1406c8172e4cb9b", + "sidechain_pub_key": "0x039949c752e7f8bd2e995b4cc1ce46b27cd054a09186ce3a7302e7673bbc27be24", + "beefy_pub_key": "0x039949c752e7f8bd2e995b4cc1ce46b27cd054a09186ce3a7302e7673bbc27be24" + }, + { + "aura_pub_key": "0x3612abc1c52d79b656f98cf16655bd689c012a4d98d656c696d7fd7bdf596458", + "grandpa_pub_key": "0xa89f442106845d5f98ab8e46d2c9c7f8478774eac2797f466432cb0c1b9dca12", + "sidechain_pub_key": "0x030bbc467c8a86ab626f8172130c5366ed3f1b220ff4fd1d75f085a38685896ed7", + "beefy_pub_key": "0x030bbc467c8a86ab626f8172130c5366ed3f1b220ff4fd1d75f085a38685896ed7" + } + ] +} diff --git a/envs/preview/pc-chain-config.json b/envs/preview/pc-chain-config.json new file mode 100644 index 0000000..31b9066 --- /dev/null +++ b/envs/preview/pc-chain-config.json @@ -0,0 +1,77 @@ +{ + "bootnodes": [ + "/dns/preview/tcp/30333/p2p/12D3KooWSrpKYvoBiAJvGwvfJAheJX8qksix8XaBKSyB96NwwmUc" + ], + "chain_parameters": { + "genesis_utxo": "623d4aa68a836a7572ff3886da4a273d35aa97fa78fce3b3ce63fd35ed4754b8#1" + }, + "initial_governance": { + "authorities": [ + "0x2fbddf6456c21871a4eba1b2e684f59e4a14a5413de5d0243ef8d0e7" + ], + "threshold": 1 + }, + "cardano": { + "security_parameter": 432, + "active_slots_coeff": 0.05, + "first_epoch_number": 0, + "first_slot_number": 0, + "epoch_duration_millis": 86400000, + "first_epoch_timestamp_millis": 1666656000000, + "slot_duration_millis": 1000 + }, + "cardano_addresses": { + "committee_candidates_address": "addr_test1wpjk64an8tdr07jzt0pu8nc3prh9fu4gwkgl05cs9xgeqtgclvru6", + "d_parameter_policy_id": "0x03417b48a605e8b3f5475c42b6c2643822607e6593d02cc5c8da9326", + "permissioned_candidates_policy_id": "0x5fb62dd789b4f311a3bef9be54f19170976041af6c3093187646cd02", + "bridge": { + "illiquid_circulation_supply_validator_address": "addr_test1wpuxep5ecfmrx46p9lhz7xqdhv3ymgk4jugwqjsnvk9dt9qxnjlr8", + "asset": { + "policy_id": "0x00000000000000000000000000000000000000000000000000000000", + "asset_name": "0x" + } + }, + "governed_map": { + "validator_address": "addr_test1wrhyyutqn7s4trm3njctlasmctlfh8zdupmepctxw34688qqw9ds4", + "policy_id": "0x4a2b38c5811e3a7f3bd403d3ddcc3b23c562c13967f61725e7eb2eee" + } + }, + "initial_permissioned_candidates": [ + { + "aura_pub_key": "0x8e2135d1086b6b26143e600986e64b5f5d38a67ebedccbe24c5471cd2755e35f", + "grandpa_pub_key": "0x778785d70f5f950c92ed80aad45cbe1bd941f814a76ba67e8d5a98e84f5a76cb", + "sidechain_pub_key": "0x0287d649e5818aae04026482d8060f6cbb4b71fa063cf29ee83a81dbd7de601d0b", + "beefy_pub_key": "0x0287d649e5818aae04026482d8060f6cbb4b71fa063cf29ee83a81dbd7de601d0b" + }, + { + "aura_pub_key": "0xc403a1c5671ea079a27daf8f4a92ff9c1d36b425232d6f82ef5788fd7fdaae05", + "grandpa_pub_key": "0x5e3576beb0cf4a47634497fecf2a5c8dff58d2ed442fc7a9824815533500a1c3", + "sidechain_pub_key": "0x02106624a579d3bfe20fc9e205effea540ec0550e9ce559c3c1e37305f8a37a9c5", + "beefy_pub_key": "0x02106624a579d3bfe20fc9e205effea540ec0550e9ce559c3c1e37305f8a37a9c5" + }, + { + "aura_pub_key": "0x3a8a798e373ddba8eba14982f90008768a4ecdc4b9ab1cfaae9d421129a9cd10", + "grandpa_pub_key": "0xc2ac5c22e8868fc86d6910d05be9f496e5bb73b95f991b7e6631bb1b65c94fb1", + "sidechain_pub_key": "0x03d9aaf4a61e90738205eb14e45ea35e79a7d57f9351b06908e9008dfff38f196d", + "beefy_pub_key": "0x03d9aaf4a61e90738205eb14e45ea35e79a7d57f9351b06908e9008dfff38f196d" + }, + { + "aura_pub_key": "0xd6bbb84dd94522a105270aaad3a01547cbadb8722041add1a62fc7e43a00262e", + "grandpa_pub_key": "0x003c84eea8aed006cd13c0fe9bcf2a697fee86b4130a62358a1d35908fc3b22a", + "sidechain_pub_key": "0x023d4ab3baa0b452cd6290a395540270d649609a6031eb6742913886e90f871646", + "beefy_pub_key": "0x023d4ab3baa0b452cd6290a395540270d649609a6031eb6742913886e90f871646" + }, + { + "aura_pub_key": "0x1ee8b39debb5ff5fa436bf6b9b63154777e21c70e58c139a222d476794af331f", + "grandpa_pub_key": "0x382a6071840bb68cfdf95b06e99ecb19b6ea6c03b16024935eff0e370e73be6f", + "sidechain_pub_key": "0x0208dc088a8a3cd73caf0d64bcc2d9148b79c496091f4640960bfb9aff5cc94f2e", + "beefy_pub_key": "0x0208dc088a8a3cd73caf0d64bcc2d9148b79c496091f4640960bfb9aff5cc94f2e" + }, + { + "aura_pub_key": "0x643db0035965b76ebb999f1e1d2634ede0679d92b6fdad9f2d1ba9acee47bc4c", + "grandpa_pub_key": "0x8c33977f732733a752143cf6b805afec19f644a8f6a954aa3d7c097a039c1168", + "sidechain_pub_key": "0x02e7d8abfd5b3b6b49cdc1a2bab81d3f7e2499ae92a4462796dfe34f9ca4488a9f", + "beefy_pub_key": "0x02e7d8abfd5b3b6b49cdc1a2bab81d3f7e2499ae92a4462796dfe34f9ca4488a9f" + } + ] +} diff --git a/envs/qanet/pc-chain-config.json b/envs/qanet/pc-chain-config.json index c76c3c9..6432d43 100644 --- a/envs/qanet/pc-chain-config.json +++ b/envs/qanet/pc-chain-config.json @@ -1,6 +1,15 @@ { -"chain_parameters": { - "genesis_utxo": "c79a414c8d8cf691caa654861cfb0555c6a7f2016d0b2ae79cc4fc4377372e74#1" + "bootnodes": [ + "/dns/midnight-node-boot-01/tcp/30333/p2p/12D3KooWEyoppNCUx8Yx66oV9fJnriXwCcXwDDUA2kj6vnc6iDEp" + ], + "chain_parameters": { + "genesis_utxo": "bf9075696b4d042bca82938fb1ef107b1dedc0a3971ccfe1ab3ac297aab59265#0" + }, + "initial_governance": { + "authorities": [ + "0xb27bebccd1276d445556edfac3b0527700622c2853d227f384a45d61" + ], + "threshold": 1 }, "cardano": { "security_parameter": 432, @@ -8,105 +17,121 @@ "first_epoch_number": 0, "first_slot_number": 0, "epoch_duration_millis": 86400000, - "first_epoch_timestamp_millis": 1666656000000 + "first_epoch_timestamp_millis": 1666656000000, + "slot_duration_millis": 1000 }, "cardano_addresses": { - "committee_candidates_address": "addr_test1wrhpp7gmzt5plx3dx7sz25gl0pjx322z4p3pjtkmfpnpfpcqgckjk", - "d_parameter_policy_id": "0499e919fc1040af975ea1dc7b8a414c99f0e1d070e547dc81999010", - "permissioned_candidates_policy_id": "ca3c98056e6bce7df274f0a9161ad53208bdb1cef072f0743307ad2f", - "native_token": { - "illiquid_supply_address": "addr_test1wz7yr698kyeuqtc5hkf6k3w72wjlm85juhnpck9795ll5rsr82luq", + "committee_candidates_address": "addr_test1wzp7wnerffnkkhlkvvy9wps0zgwke48ycjpnhv0wrramn5gs8ajnx", + "d_parameter_policy_id": "0xa2402f25a5dceef7b742b6a5ef11ff07f62c7d4ef2610830e5d81050", + "permissioned_candidates_policy_id": "0x5c1f2f7f9f3791f3eb1a6a29fddd3970d52231b90c3519919a91f090", + "bridge": { + "illiquid_circulation_supply_validator_address": "addr_test1wqsekv29dzwjytqr0ey8rk054jr66nltu57hdvh72x5g8aqf5dqxf", "asset": { "policy_id": "0x00000000000000000000000000000000000000000000000000000000", "asset_name": "0x" } + }, + "governed_map": { + "validator_address": "addr_test1wr5hwaejm87psuz8wc8lr6jka75mqug8kwtjyyrxy29njsq49ckl7", + "policy_id": "0x4c29efd09a3d7f57940a36f1883861632989fe90d5a3a1549849262c" } }, "initial_permissioned_candidates": [ - { - "name": "Alice", - "ss58": "5GrwvaEF5zXb26Fz9rcQpDWS57CtERHpNehXCPcNoHGKutQY", - "aura_pub_key": "0xd43593c715fdd31c61141abd04a99fd6822c8558854ccde39a5684e7a56da27d", - "grandpa_pub_key": "0x88dc3417d5058ec4b4503e0c12ea1a0a89be200fe98922423d4334014fa6b0ee", - "sidechain_pub_key": "0x020a1091341fe5664bfa1782d5e04779689068c916b04cb365ec3153755684d9a1" - }, - { - "name": "Bob", - "ss58": "5FHneW46xGXgs5mUiveU4sbTyGBzmstUspZC92UhjJM694ty", - "aura_pub_key": "0x8eaf04151687736326c9fea17e25fc5287613693c912909cb226aa4794f26a48", - "grandpa_pub_key": "0xd17c2d7823ebf260fd138f2d7e27d114c0145d968b5ff5006125f2414fadae69", - "sidechain_pub_key": "0x0390084fdbf27d2b79d26a4f13f0ccd982cb755a661969143c37cbc49ef5b91f27" - }, - { - "name": "Charlie", - "ss58": "5FLSigC9HGRKVhB9FiEo4Y3koPsNmBmLJbpXg2mp1hXcS59Y", - "aura_pub_key": "0x90b5ab205c6974c9ea841be688864633dc9ca8a357843eeacf2314649965fe22", - "grandpa_pub_key": "0x439660b36c6c03afafca027b910b4fecf99801834c62a5e6006f27d978de234f", - "sidechain_pub_key": "0x0389411795514af1627765eceffcbd002719f031604fadd7d188e2dc585b4e1afb" - }, - { - "name": "Dave", - "ss58": "5DAAnrj7VHTznn2AWBemMuyBwZWs6FNFjdyVXUeYum3PTXFy", - "aura_pub_key": "0x306721211d5404bd9da88e0204360a1a9ab8b87c66c1bc2fcdd37f3c2222cc20", - "grandpa_pub_key": "0x5e639b43e0052c47447dac87d6fd2b6ec50bdd4d0f614e4299c665249bbd09d9", - "sidechain_pub_key": "0x03bc9d0ca094bd5b8b3225d7651eac5d18c1c04bf8ae8f8b263eebca4e1410ed0c" - }, - { - "name": "Eve", - "ss58": "5HGjWAeFDfFCWPsjFQdVV2Msvz2XtMktvgocEZcCj68kUMaw", - "aura_pub_key": "0xe659a7a1628cdd93febc04a4e0646ea20e9f5f0ce097d9a05290d4a9e054df4e", - "grandpa_pub_key": "0x1dfe3e22cc0d45c70779c1095f7489a8ef3cf52d62fbd8c2fa38c9f1723502b5", - "sidechain_pub_key": "0x031d10105e323c4afce225208f71a6441ee327a65b9e646e772500c74d31f669aa" - }, - { - "name": "Ferdie", - "ss58": "5CiPPseXPECbkjWCa6MnjNokrgYjMqmKndv2rSnekmSK2DjL", - "aura_pub_key": "0x1cbd2d43530a44705ad088af313e18f80b53ef16b36177cd4b77b846f2a5f07c", - "grandpa_pub_key": "0x568cb4a574c6d178feb39c27dfc8b3f789e5f5423e19c71633c748b9acf086b5", - "sidechain_pub_key": "0x0291f1217d5a04cb83312ee3d88a6e6b33284e053e6ccfc3a90339a0299d12967c" - }, - { - "name": "One", - "ss58": "5Fxune7f71ZbpP2FoY3mhYcmM596Erhv1gRue4nsPwkxMR4n", - "aura_pub_key": "0xac859f8a216eeb1b320b4c76d118da3d7407fa523484d0a980126d3b4d0d220a", - "grandpa_pub_key": "0x16f97016bbea8f7b45ae6757b49efc1080accc175d8f018f9ba719b60b0815e4", - "sidechain_pub_key": "0x036c6ae73d36d0c02b54d7877a57b1734b8e096134bd2c1b829431aa38f18bcce1" - }, - { - "name": "Two", - "ss58": "5CUjxa4wVKMj3FqKdqAUf7zcEMr4MYAjXeWmUf44B41neLmJ", - "aura_pub_key": "0x1254f7017f0b8347ce7ab14f96d818802e7e9e0c0d1b7c9acb3c726b080e7a03", - "grandpa_pub_key": "0x5079bcd20fd97d7d2f752c4607012600b401950260a91821f73e692071c82bf5", - "sidechain_pub_key": "0x020a617391de0e0291310bf7792bb41d9573e8a054b686205da5553e08fac6d0b8" - }, - { - "name": "Three", - "ss58": "5FKiDJ3T1c59m3QwQVgXyk2QmibqBaYSzk2X5eiPjLR438pk", - "aura_pub_key": "0x9026941b7aa2328a8c5ea4e25bb747a2bf92a066fae0cc3722faf58cf44d3502", - "grandpa_pub_key": "0xecccf9cddf1b329b7c6554e78b0a34ba760de390e351b0ee450a42955fb18470", - "sidechain_pub_key": "0x03c766411432fae7483fe9f0c175985fbbc5ca108bffb5b94db7d52dafd6f98bea" - }, - { - "name": "Four", - "ss58": "5DWk1sevFhmXFFNDheDe5G5pjkig8JCPQe3aRsE9GEwsqZZx", - "aura_pub_key": "0x4017e17f10cc5a98731de9f020dbb37986f6e575789152d7fadae2b32eea6c13", - "grandpa_pub_key": "0x98bf054a827193b21d7127e4ee53ba9a4992aa09c0acced93cf5ca5da1ff7468", - "sidechain_pub_key": "0x02b8beaa492309f2332dd5445e20b8f74e26336c226daecf63cc4cd95a1ef3b140" - }, - { - "name": "Five", - "ss58": "5G3tgLURUTiPkyLAuuFLoEZzYQhhuSk5EcYCXJHhmLRXAC2a", - "aura_pub_key": "0xb0521e374b0586d6829dad320753c62cdc6ef5edbd37ffdd36da0ae97c521819", - "grandpa_pub_key": "0x3f7f2fc8829c649501a0fb72a79abf885aa89e6c4ee2d00c6041dfa85e320980", - "sidechain_pub_key": "0x0287aa09f21089003413b37602a3f6909f8695901c70a28175cafd99d5976a202a" - }, - { - "name": "Six", - "ss58": "5Ccq3orDeKH45yhdk8KxiRwbZEoUkZ23nRiwWuLGHteAptRS", - "aura_pub_key": "0x1880104772db7b947f3f8ccdcab3650d7179c44551d22dd0cca5dc852a140563", - "grandpa_pub_key": "0x11e6cb467a7528e861732c473b3a66c6701f38d35b894da8a1337f68708aa0eb", - "sidechain_pub_key": "0x035d35454a9671ccf959def176822d38e9e9aa5bbcfe50a7cbe69834dde9147ce5" - } + { + "name": "Alice", + "ss58": "5GrwvaEF5zXb26Fz9rcQpDWS57CtERHpNehXCPcNoHGKutQY", + "aura_pub_key": "0xd43593c715fdd31c61141abd04a99fd6822c8558854ccde39a5684e7a56da27d", + "grandpa_pub_key": "0x88dc3417d5058ec4b4503e0c12ea1a0a89be200fe98922423d4334014fa6b0ee", + "sidechain_pub_key": "0x020a1091341fe5664bfa1782d5e04779689068c916b04cb365ec3153755684d9a1", + "beefy_pub_key": "0x020a1091341fe5664bfa1782d5e04779689068c916b04cb365ec3153755684d9a1" + }, + { + "name": "Bob", + "ss58": "5FHneW46xGXgs5mUiveU4sbTyGBzmstUspZC92UhjJM694ty", + "aura_pub_key": "0x8eaf04151687736326c9fea17e25fc5287613693c912909cb226aa4794f26a48", + "grandpa_pub_key": "0xd17c2d7823ebf260fd138f2d7e27d114c0145d968b5ff5006125f2414fadae69", + "sidechain_pub_key": "0x0390084fdbf27d2b79d26a4f13f0ccd982cb755a661969143c37cbc49ef5b91f27", + "beefy_pub_key": "0x0390084fdbf27d2b79d26a4f13f0ccd982cb755a661969143c37cbc49ef5b91f27" + }, + { + "name": "Charlie", + "ss58": "5FLSigC9HGRKVhB9FiEo4Y3koPsNmBmLJbpXg2mp1hXcS59Y", + "aura_pub_key": "0x90b5ab205c6974c9ea841be688864633dc9ca8a357843eeacf2314649965fe22", + "grandpa_pub_key": "0x439660b36c6c03afafca027b910b4fecf99801834c62a5e6006f27d978de234f", + "sidechain_pub_key": "0x0389411795514af1627765eceffcbd002719f031604fadd7d188e2dc585b4e1afb", + "beefy_pub_key": "0x0389411795514af1627765eceffcbd002719f031604fadd7d188e2dc585b4e1afb" + }, + { + "name": "Dave", + "ss58": "5DAAnrj7VHTznn2AWBemMuyBwZWs6FNFjdyVXUeYum3PTXFy", + "aura_pub_key": "0x306721211d5404bd9da88e0204360a1a9ab8b87c66c1bc2fcdd37f3c2222cc20", + "grandpa_pub_key": "0x5e639b43e0052c47447dac87d6fd2b6ec50bdd4d0f614e4299c665249bbd09d9", + "sidechain_pub_key": "0x03bc9d0ca094bd5b8b3225d7651eac5d18c1c04bf8ae8f8b263eebca4e1410ed0c", + "beefy_pub_key": "0x03bc9d0ca094bd5b8b3225d7651eac5d18c1c04bf8ae8f8b263eebca4e1410ed0c" + }, + { + "name": "Eve", + "ss58": "5HGjWAeFDfFCWPsjFQdVV2Msvz2XtMktvgocEZcCj68kUMaw", + "aura_pub_key": "0xe659a7a1628cdd93febc04a4e0646ea20e9f5f0ce097d9a05290d4a9e054df4e", + "grandpa_pub_key": "0x1dfe3e22cc0d45c70779c1095f7489a8ef3cf52d62fbd8c2fa38c9f1723502b5", + "sidechain_pub_key": "0x031d10105e323c4afce225208f71a6441ee327a65b9e646e772500c74d31f669aa", + "beefy_pub_key": "0x031d10105e323c4afce225208f71a6441ee327a65b9e646e772500c74d31f669aa" + }, + { + "name": "Ferdie", + "ss58": "5CiPPseXPECbkjWCa6MnjNokrgYjMqmKndv2rSnekmSK2DjL", + "aura_pub_key": "0x1cbd2d43530a44705ad088af313e18f80b53ef16b36177cd4b77b846f2a5f07c", + "grandpa_pub_key": "0x568cb4a574c6d178feb39c27dfc8b3f789e5f5423e19c71633c748b9acf086b5", + "sidechain_pub_key": "0x0291f1217d5a04cb83312ee3d88a6e6b33284e053e6ccfc3a90339a0299d12967c", + "beefy_pub_key": "0x0291f1217d5a04cb83312ee3d88a6e6b33284e053e6ccfc3a90339a0299d12967c" + }, + { + "name": "One", + "ss58": "5Fxune7f71ZbpP2FoY3mhYcmM596Erhv1gRue4nsPwkxMR4n", + "aura_pub_key": "0xac859f8a216eeb1b320b4c76d118da3d7407fa523484d0a980126d3b4d0d220a", + "grandpa_pub_key": "0x16f97016bbea8f7b45ae6757b49efc1080accc175d8f018f9ba719b60b0815e4", + "sidechain_pub_key": "0x036c6ae73d36d0c02b54d7877a57b1734b8e096134bd2c1b829431aa38f18bcce1", + "beefy_pub_key": "0x036c6ae73d36d0c02b54d7877a57b1734b8e096134bd2c1b829431aa38f18bcce1" + }, + { + "name": "Two", + "ss58": "5CUjxa4wVKMj3FqKdqAUf7zcEMr4MYAjXeWmUf44B41neLmJ", + "aura_pub_key": "0x1254f7017f0b8347ce7ab14f96d818802e7e9e0c0d1b7c9acb3c726b080e7a03", + "grandpa_pub_key": "0x5079bcd20fd97d7d2f752c4607012600b401950260a91821f73e692071c82bf5", + "sidechain_pub_key": "0x020a617391de0e0291310bf7792bb41d9573e8a054b686205da5553e08fac6d0b8", + "beefy_pub_key": "0x020a617391de0e0291310bf7792bb41d9573e8a054b686205da5553e08fac6d0b8" + }, + { + "name": "Three", + "ss58": "5FKiDJ3T1c59m3QwQVgXyk2QmibqBaYSzk2X5eiPjLR438pk", + "aura_pub_key": "0x9026941b7aa2328a8c5ea4e25bb747a2bf92a066fae0cc3722faf58cf44d3502", + "grandpa_pub_key": "0xecccf9cddf1b329b7c6554e78b0a34ba760de390e351b0ee450a42955fb18470", + "sidechain_pub_key": "0x03c766411432fae7483fe9f0c175985fbbc5ca108bffb5b94db7d52dafd6f98bea", + "beefy_pub_key": "0x03c766411432fae7483fe9f0c175985fbbc5ca108bffb5b94db7d52dafd6f98bea" + }, + { + "name": "Four", + "ss58": "5DWk1sevFhmXFFNDheDe5G5pjkig8JCPQe3aRsE9GEwsqZZx", + "aura_pub_key": "0x4017e17f10cc5a98731de9f020dbb37986f6e575789152d7fadae2b32eea6c13", + "grandpa_pub_key": "0x98bf054a827193b21d7127e4ee53ba9a4992aa09c0acced93cf5ca5da1ff7468", + "sidechain_pub_key": "0x02b8beaa492309f2332dd5445e20b8f74e26336c226daecf63cc4cd95a1ef3b140", + "beefy_pub_key": "0x02b8beaa492309f2332dd5445e20b8f74e26336c226daecf63cc4cd95a1ef3b140" + }, + { + "name": "Five", + "ss58": "5G3tgLURUTiPkyLAuuFLoEZzYQhhuSk5EcYCXJHhmLRXAC2a", + "aura_pub_key": "0xb0521e374b0586d6829dad320753c62cdc6ef5edbd37ffdd36da0ae97c521819", + "grandpa_pub_key": "0x3f7f2fc8829c649501a0fb72a79abf885aa89e6c4ee2d00c6041dfa85e320980", + "sidechain_pub_key": "0x0287aa09f21089003413b37602a3f6909f8695901c70a28175cafd99d5976a202a", + "beefy_pub_key": "0x0287aa09f21089003413b37602a3f6909f8695901c70a28175cafd99d5976a202a" + }, + { + "name": "Six", + "ss58": "5Ccq3orDeKH45yhdk8KxiRwbZEoUkZ23nRiwWuLGHteAptRS", + "aura_pub_key": "0x1880104772db7b947f3f8ccdcab3650d7179c44551d22dd0cca5dc852a140563", + "grandpa_pub_key": "0x11e6cb467a7528e861732c473b3a66c6701f38d35b894da8a1337f68708aa0eb", + "sidechain_pub_key": "0x035d35454a9671ccf959def176822d38e9e9aa5bbcfe50a7cbe69834dde9147ce5", + "beefy_pub_key": "0x035d35454a9671ccf959def176822d38e9e9aa5bbcfe50a7cbe69834dde9147ce5" + } ] } - From dfd5d0cd50989f9eda77da3557e6114a8d3fcd1b Mon Sep 17 00:00:00 2001 From: Sean Kwak Date: Tue, 2 Dec 2025 21:58:13 +0000 Subject: [PATCH 2/2] fix: remove GHCR login for fork-friendly workflow Images in compose files (midnight-node, cardano) are publicly accessible. --- .github/workflows/scan.yaml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/.github/workflows/scan.yaml b/.github/workflows/scan.yaml index c6f206c..cfe1375 100644 --- a/.github/workflows/scan.yaml +++ b/.github/workflows/scan.yaml @@ -51,7 +51,6 @@ jobs: permissions: actions: read contents: read - packages: read security-events: write statuses: write steps: @@ -60,9 +59,6 @@ jobs: with: fetch-depth: 0 - - name: Login to GitHub Container Registry - run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u "${{ github.actor }}" --password-stdin - - name: Scan images env: CFG_PRESET: ${{ matrix.cfg_preset }}