Merge branch 'main' into typo-fix

Author: vineshtk

.github/workflows/codeql.yml

@@ -0,0 +1,40 @@
+name: "CodeQL"
+
+on:
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    strategy:
+      fail-fast: false
+      matrix:
+        language:
+          - go
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3

.github/workflows/docker_main.yml

@@ -8,11 +8,13 @@ on:
       - '.github/**' # exclude .github directory
       - '**.md' # exclude all markdown files
 
+permissions:
+  contents: read
+
 jobs:
   docker:
     runs-on: ubuntu-latest
     permissions:
-      contents: read
       packages: write
     steps:
       - uses: actions/checkout@v3

.github/workflows/docker_release.yml

@@ -4,12 +4,14 @@ on:
   release:
     types: [released, prereleased]
 
+permissions:
+  contents: read
+
 jobs:
 
   docker:
     runs-on: ubuntu-latest
     permissions:
-      contents: read
       packages: write
     steps:
       - uses: actions/checkout@v4

.github/workflows/docs.yml

@@ -7,6 +7,10 @@ on:
   pull_request:
   release:
     types: [released]
+
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/go.yml

@@ -2,7 +2,7 @@ name: Go
 
 on:
   push:
-    branches: [main]
+    branches: [main] 
     paths:
       - '**'  # include all files
       - '!.github/**' # exclude .github directory
@@ -18,6 +18,9 @@ on:
 
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   build:
     env:

.github/workflows/integration.yml

@@ -7,6 +7,9 @@ on:
     - cron: "0 0 * * *"
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   e2e-test:
     runs-on: firefly-ubuntu-latest

.github/workflows/solidity.yml

@@ -4,6 +4,10 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  contents: read
+  packages: read
+
 jobs:
   solidity-test:
     runs-on: ubuntu-latest

Dockerfile

@@ -15,16 +15,16 @@ FROM $FIREFLY_BUILDER_TAG AS firefly-builder
 ARG BUILD_VERSION
 ARG GIT_REF
 RUN apk add make=4.4.1-r2 \
-    gcc=13.2.1_git20231014-r0 \
-    build-base=0.5-r3 \
-    curl=8.11.1-r0 \
-    git=2.43.6-r0
+  gcc=13.2.1_git20231014-r0 \
+  build-base=0.5-r3 \
+  curl=8.12.1-r0 \
+  git=2.43.6-r0
 WORKDIR /firefly
 RUN chgrp -R 0 /firefly \
-    && chmod -R g+rwX /firefly \
-    && mkdir /.cache \
-    && chgrp -R 0 /.cache \
-    && chmod -R g+rwX /.cache
+  && chmod -R g+rwX /firefly \
+  && mkdir /.cache \
+  && chgrp -R 0 /.cache \
+  && chmod -R g+rwX /.cache
 USER 1001
 ADD --chown=1001:0 go.mod go.sum ./
 RUN go mod download
@@ -35,10 +35,10 @@ RUN make build
 FROM --platform=$FABRIC_BUILDER_PLATFORM $FABRIC_BUILDER_TAG AS fabric-builder
 WORKDIR /firefly/smart_contracts/fabric/firefly-go
 RUN chgrp -R 0 /firefly \
-    && chmod -R g+rwX /firefly \
-    && mkdir /.cache \
-    && chgrp -R 0 /.cache \
-    && chmod -R g+rwX /.cache
+  && chmod -R g+rwX /firefly \
+  && mkdir /.cache \
+  && chgrp -R 0 /.cache \
+  && chmod -R g+rwX /.cache
 USER 1001
 ADD --chown=1001:0 smart_contracts/fabric/firefly-go .
 RUN GO111MODULE=on go mod vendor
@@ -55,10 +55,10 @@ RUN chgrp -R 0 /firefly && chmod -R g+rwX /firefly
 ADD --chown=1001:0 smart_contracts/ethereum/solidity_firefly/ .
 USER 1001
 RUN mkdir -p build/contracts \
-    && cd contracts \
-    && solc --combined-json abi,bin,devdoc -o ../build/contracts Firefly.sol \
-    && cd ../build/contracts \
-    && mv combined.json Firefly.json
+  && cd contracts \
+  && solc --combined-json abi,bin,devdoc -o ../build/contracts Firefly.sol \
+  && cd ../build/contracts \
+  && mv combined.json Firefly.json
 
 # SBOM
 FROM alpine:3.19 AS sbom
@@ -74,26 +74,26 @@ FROM $BASE_TAG
 ARG UI_TAG
 ARG UI_RELEASE
 RUN apk add --update --no-cache \
-    sqlite=3.44.2-r0 \
-    postgresql16-client=16.6-r0 \
-    curl=8.11.1-r0 \
-    jq=1.7.1-r0
+  sqlite=3.44.2-r0 \
+  postgresql16-client=16.8-r0 \
+  curl=8.12.1-r0 \
+  jq=1.7.1-r0
 WORKDIR /firefly
 RUN chgrp -R 0 /firefly \
-    && chmod -R g+rwX /firefly \
-    && mkdir /etc/firefly \
-    && chgrp -R 0 /etc/firefly \
-    && chmod -R g+rwX /etc/firefly
+  && chmod -R g+rwX /firefly \
+  && mkdir /etc/firefly \
+  && chgrp -R 0 /etc/firefly \
+  && chmod -R g+rwX /etc/firefly
 RUN curl -sL "https://github.com/golang-migrate/migrate/releases/download/$(curl -sL https://api.github.com/repos/golang-migrate/migrate/releases/latest | jq -r '.name')/migrate.linux-amd64.tar.gz" | tar xz \
-    && chmod +x ./migrate \
-    && mv ./migrate /usr/bin/migrate
+  && chmod +x ./migrate \
+  && mv ./migrate /usr/bin/migrate
 COPY --from=firefly-builder --chown=1001:0 /firefly/firefly ./firefly
 COPY --from=firefly-builder --chown=1001:0 /firefly/db ./db
 COPY --from=solidity-builder --chown=1001:0 /firefly/solidity_firefly/build/contracts ./contracts
 COPY --from=fabric-builder --chown=1001:0 /firefly/smart_contracts/fabric/firefly-go/firefly_fabric.tar.gz ./contracts/firefly_fabric.tar.gz
 ENV UI_RELEASE=https://github.com/hyperledger/firefly-ui/releases/download/$UI_TAG/$UI_RELEASE.tgz
 RUN mkdir /firefly/frontend \
-    && curl -sLo - $UI_RELEASE | tar -C /firefly/frontend -zxvf -
+  && curl -sLo - $UI_RELEASE | tar -C /firefly/frontend -zxvf -
 COPY --from=sbom /sbom.spdx.json /sbom.spdx.json
 RUN ln -s /firefly/firefly /usr/bin/firefly
 USER 1001

README.md

@@ -5,14 +5,14 @@
 [![FireFy Documentation](https://img.shields.io/static/v1?label=FireFly&message=documentation&color=informational)](https://hyperledger.github.io/firefly//)
 ![build](https://github.com/hyperledger/firefly/actions/workflows/docker_main.yml/badge.svg?branch=main)
 [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/7826/badge)](https://www.bestpractices.dev/projects/7826)
+[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/hyperledger/firefly/badge)](https://scorecard.dev/viewer/?uri=github.com/hyperledger/firefly)
 
 ![Hyperledger FireFly](./images/hyperledger_firefly_logo.png)
 
 Hyperledger FireFly is the first open source Supernode: a complete stack for enterprises to build and scale secure Web3 applications.
 
 The FireFly API for digital assets, data flows, and blockchain transactions makes it radically faster to build production-ready apps on popular chains and protocols.
 
-
 [ENGLISH](./README.md) | [简体中文](./README_zh_CN.md)
 
 ## Start using Hyperledger FireFly
@@ -61,35 +61,35 @@ Other repositories you might be interested in containing those microservice comp
 
 ### Blockchain connectivity
 
-- Transaction Manager - https://github.com/hyperledger/firefly-transaction-manager
-- RLP & ABI encoding, KeystoreV3 utilities and secp256k1 signer runtime -  https://github.com/hyperledger/firefly-signer
-- FFCAPI reference connector for EVM Chains - https://github.com/hyperledger/firefly-evmconnect
+- Transaction Manager - <https://github.com/hyperledger/firefly-transaction-manager>
+- RLP & ABI encoding, KeystoreV3 utilities and secp256k1 signer runtime -  <https://github.com/hyperledger/firefly-signer>
+- FFCAPI reference connector for EVM Chains - <https://github.com/hyperledger/firefly-evmconnect>
   - Public EVM compatible chains: Learn more in the [documentation](https://hyperledger.github.io/firefly)
-- Permissioned Ethereum connector - https://github.com/hyperledger/firefly-ethconnect
+- Permissioned Ethereum connector - <https://github.com/hyperledger/firefly-ethconnect>
   - Private/permissioned: Hyperledger Besu / Quorum
-- Hyperledger Fabric connector - https://github.com/hyperledger/firefly-fabconnect
-- Tezos connector - https://github.com/hyperledger/firefly-tezosconnect
-- Corda connector starter: https://github.com/hyperledger/firefly-cordaconnect
+- Hyperledger Fabric connector - <https://github.com/hyperledger/firefly-fabconnect>
+- Tezos connector - <https://github.com/hyperledger/firefly-tezosconnect>
+- Corda connector starter: <https://github.com/hyperledger/firefly-cordaconnect>
   - CorDapp specific customization is required
 
 ### Token standards
 
-- Tokens ERC20/ERC721 - https://github.com/hyperledger/firefly-tokens-erc20-erc721
-- Tokens ERC1155 - https://github.com/hyperledger/firefly-tokens-erc1155
+- Tokens ERC20/ERC721 - <https://github.com/hyperledger/firefly-tokens-erc20-erc721>
+- Tokens ERC1155 - <https://github.com/hyperledger/firefly-tokens-erc1155>
 
 ### Private data bus connectivity
 
-- HTTPS Data Exchange - https://github.com/hyperledger/firefly-dataexchange-https
+- HTTPS Data Exchange - <https://github.com/hyperledger/firefly-dataexchange-https>
 
 ### Developer ecosystem
 
-- Command Line Interface (CLI) - https://github.com/hyperledger/firefly-cli
-- Explorer UI - https://github.com/hyperledger/firefly-ui
-- Node.js SDK - https://github.com/hyperledger/firefly-sdk-nodejs
-- Sandbox / Exerciser - https://github.com/hyperledger/firefly-sandbox
-- Samples - https://github.com/hyperledger/firefly-samples
-- FireFly Performance CLI: https://github.com/hyperledger/firefly-perf-cli
-- Helm Charts for Deploying to Kubernetes: https://github.com/hyperledger/firefly-helm-charts
+- Command Line Interface (CLI) - <https://github.com/hyperledger/firefly-cli>
+- Explorer UI - <https://github.com/hyperledger/firefly-ui>
+- Node.js SDK - <https://github.com/hyperledger/firefly-sdk-nodejs>
+- Sandbox / Exerciser - <https://github.com/hyperledger/firefly-sandbox>
+- Samples - <https://github.com/hyperledger/firefly-samples>
+- FireFly Performance CLI: <https://github.com/hyperledger/firefly-perf-cli>
+- Helm Charts for Deploying to Kubernetes: <https://github.com/hyperledger/firefly-helm-charts>
 
 ## FireFly Core code hierarchy
 

README_zh_CN.md

@@ -5,6 +5,7 @@
 [![FireFy Documentation](https://img.shields.io/static/v1?label=FireFly&message=documentation&color=informational)](https://hyperledger.github.io/firefly//)
 ![build](https://github.com/hyperledger/firefly/actions/workflows/docker_main.yml/badge.svg?branch=main)
 [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/7826/badge)](https://www.bestpractices.dev/projects/7826)
+[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/hyperledger/firefly/badge)](https://scorecard.dev/viewer/?uri=github.com/hyperledger/firefly)
 
 ![Hyperledger FireFly](./images/hyperledger_firefly_logo.png)