Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migration frax subgraph #81

Open
wants to merge 4 commits into
base: main
Choose a base branch
from

Conversation

web3cdnservices
Copy link
Contributor

♨ Migrated FraxSwap subgraph from Thegraph to Subquery.

https://github.com/FraxFinance/fraxswap-subgraph

✔️ Chain id: 1

Copy link

gitguardian bot commented Mar 2, 2024

⚠️ GitGuardian has uncovered 11 secrets following the scan of your pull request.

Please consider investigating the findings and remediating the incidents. Failure to do so may lead to compromising the associated services or software components.

🔎 Detected hardcoded secrets in your pull request
GitGuardian id GitGuardian status Secret Commit Filename
- Generic Password dbba04b Zksync/zksync-starter/docker-compose.yml View secret
- Generic Password 0e59212 Altlayer/altlayer-op-demo-starter/docker-compose.yml View secret
- Generic Password 0e59212 Artela/artela-testnet-starter/docker-compose.yml View secret
- Generic Password 0e59212 Aurora/aurora-starter/docker-compose.yml View secret
- Generic Password dbba04b Immutable/immutable-testnet-starter/docker-compose.yml View secret
- Generic Password 0e59212 Arbitrum/arbitrum-one-winr/docker-compose.yml View secret
- Generic Password 9e984ed Ethereum/ethereum-frax/docker-compose.yml View secret
- Generic Password dbba04b Meter/meter-starter/docker-compose.yml View secret
- Generic Password dbba04b Scroll/scroll-sepolia-starter/docker-compose.yml View secret
- Generic Password 0e59212 Astar/astar-zkevm-testnet-starter/docker-compose.yml View secret
- Generic Password 47126cd Meteor/meteor-starter/docker-compose.yml View secret
🛠 Guidelines to remediate hardcoded secrets
  1. Understand the implications of revoking this secret by investigating where it is used in your code.
  2. Replace and store your secrets safely. Learn here the best practices.
  3. Revoke and rotate these secrets.
  4. If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.

To avoid such incidents in the future consider


🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.

Our GitHub checks need improvements? Share your feedbacks!

@web3cdnservices
Copy link
Contributor Author

gitguardian & Git builder - set wrong status.
commit is OK!

@jamesbayly
Copy link
Contributor

@bgodlin can you please review this?

Copy link
Contributor

@bgodlin bgodlin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Apart from the comments scattered within the specified files:

  1. Is the tests folder actually utilised? If not, kindly remove it along with its contents.
  2. It appears that another starter named Meteor has been added as part of this pull request, which is unrelated to the context of this PR.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This file isn't necessary in the public repository

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This file isn't necessary in the public repository

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please consider relocating this to the designated section in README.md (refer to other examples for guidance)

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a specific guide available on how to utilise this file? If it's intended to remain, then a guide detailing the configuration of those parameters should be provided. Alternatively, you can directly copy the values provided here and manually fill in the placeholders - once completed, the file becomes unnecessary.

# - --debug=*
# - --log-level=debug
- --db-schema=app
- --workers=1
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
- --workers=1
- --workers=4

// TODO: hexString -> utf8 string
// throw new Error('Not implemented')
} else {
throw new Error(`Unknown symbol. Token#108`)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In these and subsequent cases, will the project halt with an error? Is there a potential for handling this differently?

Comment on lines +1 to +5
import {
BIG_INT_ZERO,
MINIMUM_USD_THRESHOLD_NEW_PAIRS,
WHITELIST
} from "../packages/constants/index.template";
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

WHITELIST is a constant requiring placeholders to be filled with values from template files. Please consult the comment in file Ethereum/ethereum-frax/config/mainnet.json to resolve this matter.

Comment on lines +49 to +50


Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A dynamic source creation is absent. Please refer to the comment in Ethereum/ethereum-frax/project.ts.

Line in the source:
PairTemplate.create(event.params.pair)

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please relate to the comment in Ethereum/ethereum-frax/config/mainnet.json

Comment on lines +1 to +7
import {
MINIMUM_LIQUIDITY_THRESHOLD_ETH,
FRAX_FXS_PAIR,
FRAXSWAP_FRAX_WETH_PAIR,
FRAX,
NATIVE
} from "./packages/constants/index.template";
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some constants are requiring placeholders to be filled with values from template files. Please consult the comment in file Ethereum/ethereum-frax/config/mainnet.json to resolve this matter.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants