audit: revert to fork commit (#369)

* revert to audit fork commit

* revert #340

Author: almk-dev

.github/CODEOWNERS

@@ -1,5 +1,4 @@
 # CODEOWNERS: https://help.github.com/articles/about-codeowners/
 
 # Primary repo maintainers
-*       @cosmos/interchain_inc_evm_write @cosmos/interchain_inc_evm_admin
-
+*       @cosmos/interchain_inc_gaia_write

.github/workflows/lint.yml

@@ -4,8 +4,6 @@ name: Lint
 # running if no *.{go, mod, sum} files have been changed.
 on:
   pull_request:
-  merge_group:
-
 
 permissions: read-all
 
@@ -15,9 +13,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
+      # Required: setup-go, for all versions v3.0.0+ of golangci-lint
       - uses: actions/setup-go@v5
         with:
-          go-version: '1.24'
+          go-version: '1.22'
           check-latest: true
       - uses: actions/checkout@v4
       - uses: technote-space/[email protected]
@@ -27,11 +26,14 @@ jobs:
             go.mod
             go.sum
             *.toml
-      - name: run linting
+      - uses: golangci/[email protected]
+        with:
+          # Required: the version of golangci-lint is required and must be specified without patch version: we always use the latest patch version.
+          version: latest
+          args: --timeout 10m
+          github-token: ${{ secrets.github_token }}
+        # Check only if there are differences in the source code
         if: env.GIT_DIFF
-        id: lint_long
-        run: |
-          make lint-go
   markdown-lint:
     name: Run markdown-lint
     runs-on: ubuntu-latest

.github/workflows/security.yml

@@ -0,0 +1,36 @@
+name: Run Gosec
+on:
+  pull_request:
+permissions: read-all
+
+jobs:
+  Gosec:
+    permissions:
+      security-events: write
+
+    runs-on: ubuntu-latest
+    env:
+      GO111MODULE: on
+    steps:
+      - name: Checkout Source
+        uses: actions/checkout@v4
+      - name: Get Diff
+        uses: technote-space/[email protected]
+        with:
+          PATTERNS: |
+            **/*.go
+            go.mod
+            go.sum
+            *.toml
+      - name: Run Gosec Security Scanner
+        uses: cosmos/gosec@master
+        with:
+          # we let the report trigger content trigger a failure using the GitHub Security features.
+          args: "-no-fail -fmt sarif -out results.sarif ./..."
+        if: "env.GIT_DIFF_FILTERED != ''"
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          # Path to SARIF file relative to the root of the repository
+          sarif_file: results.sarif
+        if: "env.GIT_DIFF_FILTERED != ''"

.github/workflows/solidity-test.yml

@@ -1,6 +1,5 @@
 name: Solidity Test
 on:
-  merge_group:
   pull_request:
     branches:
       - main

.github/workflows/super-linter.yml

@@ -0,0 +1,40 @@
+# This workflow executes several linters on changed files based on languages used in your code base whenever
+# you push a code or open a pull request.
+#
+# You can adjust the behavior by modifying this file.
+# For more information, see:
+# https://github.com/github/super-linter
+---
+name: Lint Code Base
+
+on:
+  pull_request:
+permissions: read-all
+jobs:
+  run-lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          # Full git history is needed to get a proper list of changed files within `super-linter`
+          fetch-depth: 0
+
+      - name: Lint Code Base
+        uses: github/super-linter@v6
+        env:
+          LINTER_RULES_PATH: /
+          YAML_CONFIG_FILE: .yamllint
+          VALIDATE_ALL_CODEBASE: false
+          MARKDOWN_CONFIG_FILE: .markdownlint.yml
+          PROTOBUF_CONFIG_FILE: .protolint.yml
+          VALIDATE_NATURAL_LANGUAGE: false
+          VALIDATE_OPENAPI: false
+          VALIDATE_JAVASCRIPT_STANDARD: false
+          VALIDATE_JSCPD: false
+          VALIDATE_GO: false
+          VALIDATE_GO_MODULES: false
+          PYTHON_PYLINT_CONFIG_FILE: .pylintrc
+          DEFAULT_BRANCH: "main"
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          FILTER_REGEX_EXCLUDE: .*.jsonnet

.github/workflows/system-test.yml

@@ -1,7 +1,6 @@
 name: Tests
 on:
   pull_request:
-  merge_group:
   push:
     branches:
       - main
@@ -18,7 +17,7 @@ jobs:
     if: "!startsWith(github.ref, 'refs/tags/') && github.ref != 'refs/heads/main'"
 
   test-unit-cover:
-    runs-on: depot-ubuntu-22.04-4
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/setup-go@v5
         with:
@@ -33,9 +32,6 @@ jobs:
             **/**.go
             go.mod
             go.sum
-            evmd/go.mod
-            evmd/go.sum
-            evmd/**/**.go
             *.toml
       - name: Test and Create Coverage Report
         run: |
@@ -52,7 +48,7 @@ jobs:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
   test-scripts:
-    runs-on: depot-ubuntu-22.04-4
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - uses: technote-space/[email protected]
@@ -76,7 +72,7 @@ jobs:
         if: env.GIT_DIFF
 
   test-fuzz:
-    runs-on: depot-ubuntu-22.04-4
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/setup-go@v5
         with:

.github/workflows/test.yml

@@ -33,7 +33,3 @@ contracts/@openzeppelin/*
 evmd/build/
 
 build/
-
-tests/systemtests/binaries
-tests/systemtests/testnet
-.testnets