Skip to content
This repository has been archived by the owner on Apr 4, 2024. It is now read-only.

ENG 256 fix gosec issues #779

Merged
merged 10 commits into from
Nov 25, 2021
Merged

ENG 256 fix gosec issues #779

merged 10 commits into from
Nov 25, 2021

Conversation

danburck
Copy link
Contributor

@danburck danburck commented Nov 24, 2021

Part of https://linear.app/tharsis/issue/ENG-256/fix-gosec-issues-on-ethermint-and-evmos

Description

This PR fixes the last vulerabilities pointed out by gosec in order to make gosec required for github workflows.

Note

On merge, an admin of this repo needs to set the gosec github action to required

@linear
Copy link

linear bot commented Nov 24, 2021

ENG-256 Fix gosec issues on Ethermint and Evmos

Follow up from ENG-255

  • fix issues on Ethermint
  • fix issues on Evmos
  • set GoSec CI check as Required for PRs to be merged

cc: @prajjwol

@github-actions github-actions bot added the C:CLI label Nov 24, 2021
rpc/ethereum/namespaces/debug/api.go Outdated Show resolved Hide resolved
rpc/ethereum/namespaces/debug/api.go Outdated Show resolved Hide resolved
rpc/ethereum/namespaces/debug/trace.go Outdated Show resolved Hide resolved
rpc/ethereum/namespaces/debug/trace.go Outdated Show resolved Hide resolved
server/start.go Show resolved Hide resolved
server/start.go Show resolved Hide resolved
rpc/ethereum/namespaces/debug/api.go Outdated Show resolved Hide resolved
rpc/ethereum/namespaces/debug/api.go Outdated Show resolved Hide resolved
rpc/ethereum/namespaces/debug/api.go Outdated Show resolved Hide resolved
server/start.go Show resolved Hide resolved
server/start.go Outdated Show resolved Hide resolved
@codecov
Copy link

codecov bot commented Nov 24, 2021

Codecov Report

Merging #779 (a5d3fcf) into main (32eaec8) will decrease coverage by 0.03%.
The diff coverage is 0.00%.

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #779      +/-   ##
==========================================
- Coverage   57.45%   57.42%   -0.04%     
==========================================
  Files          71       71              
  Lines        6107     6111       +4     
==========================================
  Hits         3509     3509              
- Misses       2396     2400       +4     
  Partials      202      202              
Impacted Files Coverage Δ
app/export.go 13.38% <0.00%> (-0.10%) ⬇️
client/testnet.go 0.00% <0.00%> (ø)

@danburck danburck marked this pull request as ready for review November 24, 2021 22:02
rpc/ethereum/namespaces/debug/trace.go Outdated Show resolved Hide resolved
rpc/ethereum/namespaces/debug/trace.go Outdated Show resolved Hide resolved
rpc/ethereum/namespaces/debug/trace.go Outdated Show resolved Hide resolved
server/flags/flags.go Outdated Show resolved Hide resolved
@fedekunze fedekunze added backport/0.16.x PR scheduled for inclusion in the v0.16's next stable release and removed backport/0.16.x PR scheduled for inclusion in the v0.16's next stable release labels Nov 25, 2021
Copy link
Contributor

@fedekunze fedekunze left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ACK

@fedekunze fedekunze enabled auto-merge (squash) November 25, 2021 14:43
@fedekunze fedekunze merged commit 2d8be4e into main Nov 25, 2021
@fedekunze fedekunze deleted the ENG-256-fix-gosec-issues branch November 25, 2021 15:12
leejw51crypto pushed a commit to leejw51crypto/ethermint that referenced this pull request Nov 30, 2021
* remove gosec warnigs with medium severity

* Improvement(Ethermint): Fix gosec vulnerabilities

* Improvement(Evmos): address pr comments

* Improvement(Ethermint): Fix flags test by using PersistentFlags() instead of Flags()

* Improvement(Ethermint): Fix return of defer function

* Improvement(Ethermint): Replace PersistentFlags with Flags

* Apply suggestions from code review

* Improvement(Ethermint): Use persisentFlags again and remove required attribute for chain id

Co-authored-by: Federico Kunze Küllmer <31522760+fedekunze@users.noreply.github.com>
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants