add socket tier 1 reachability analysis - #829
Conversation
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 79d1ed18af
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
There was a problem hiding this comment.
Pull request overview
Adds a scheduled GitHub Actions workflow to run Socket “Tier 1” reachability analysis for the stellar-rpc repo, surfacing Tier-2 fallback conditions as a workflow warning without failing the job.
Changes:
- Introduces a new
socket-scanworkflow triggered weekly and via manual dispatch. - Installs Go/Rust/Node toolchains and runs
socket scan create --reach, capturing output and emitting a::warning::when Tier 2 fallback markers are detected.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Drop the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24 env block: every action here already declares `using: node24`, and runners have defaulted to Node 24 since 2026-06-16 (Node 20 is removed 2026-09-16) - Remove the unused Corepack step; corepack only shims yarn/pnpm, and this repo uses neither - Replace dtolnay/rust-toolchain with `rustup update`, matching this repo's other workflows and dropping a third-party action from a security workflow - Read the Go version from go.mod (go 1.25) instead of hardcoding 1.26.4, so the scan matches what this repo targets and cannot drift Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
More info: https://stellarorg.atlassian.net/wiki/spaces/SCRT/pages/5689311233/Socket+Tier+1+Reachability+Analysis