Skip to content

add socket tier 1 reachability analysis - #829

Open
kanwalpreetd wants to merge 3 commits into
stellar:mainfrom
kanwalpreetd:main
Open

add socket tier 1 reachability analysis#829
kanwalpreetd wants to merge 3 commits into
stellar:mainfrom
kanwalpreetd:main

Conversation

@kanwalpreetd

Copy link
Copy Markdown
Contributor

Copilot AI review requested due to automatic review settings June 30, 2026 06:45

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 79d1ed18af

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread .github/workflows/socket-scan.yml Outdated
Comment thread .github/workflows/socket-scan.yml

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a scheduled GitHub Actions workflow to run Socket “Tier 1” reachability analysis for the stellar-rpc repo, surfacing Tier-2 fallback conditions as a workflow warning without failing the job.

Changes:

  • Introduces a new socket-scan workflow triggered weekly and via manual dispatch.
  • Installs Go/Rust/Node toolchains and runs socket scan create --reach, capturing output and emitting a ::warning:: when Tier 2 fallback markers are detected.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/socket-scan.yml Outdated
Comment thread .github/workflows/socket-scan.yml
Comment thread .github/workflows/socket-scan.yml
Comment thread .github/workflows/socket-scan.yml Outdated
kanwalpreetd and others added 2 commits August 26, 2026 02:26
- Drop the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24 env block: every action here
  already declares `using: node24`, and runners have defaulted to Node 24
  since 2026-06-16 (Node 20 is removed 2026-09-16)
- Remove the unused Corepack step; corepack only shims yarn/pnpm, and this
  repo uses neither
- Replace dtolnay/rust-toolchain with `rustup update`, matching this repo's
  other workflows and dropping a third-party action from a security workflow
- Read the Go version from go.mod (go 1.25) instead of hardcoding
  1.26.4, so the scan matches what this repo targets and cannot drift

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants