mirror of
https://github.com/ethereum/go-ethereum.git
synced 2026-07-27 15:16:43 +00:00
Create go-ossf-slsa3-publish.yml
This commit is contained in:
parent
d73c0d0ddf
commit
c2d3ec78d5
1 changed files with 491 additions and 0 deletions
491
.github/workflows/go-ossf-slsa3-publish.yml
vendored
Normal file
491
.github/workflows/go-ossf-slsa3-publish.yml
vendored
Normal file
|
|
@ -0,0 +1,491 @@
|
|||
# This workflow call 0xf58cefd63742d67175404e571240806f6b6e0c27
|
||||
get-ethereum
|
||||
coingecko.com/en/portfolios/public/BAh7BjoRcG9ydGZvbGlvX2lkaQSk2S0B--ef3a5a01a2122f2f4c99fb7f84cb65641c6940f0to content
|
||||
Documentation
|
||||
docs
|
||||
/
|
||||
fundamentals
|
||||
/
|
||||
command-line-options deposit
|
||||
Command-line Options send
|
||||
Last edited on September 20, 2023
|
||||
Geth is primarily controlled using the command line. Geth is started using the geth command. It is stopped by pressing ctrl-c. content://com.google.android.apps.nbu.files.provider/2/1000001800Wrapped Ether | deposit
|
||||
$34,666.5
|
||||
You can configure Geth using command-line options (send deposit). Geth also has sub-commands, which can be used to invoke functionality such as the https://www.coingecko.com/en/portfolios/public/BAh7BjoRcG9ydGZvbGlvX2lkaQSk2S0B--ef3a5a01a2122f2f4c99fb7f84cb65641c6940f0 or blockchain import/export.content://com.google.android.apps.eth.files.provider/$21000001800
|
||||
The command-line help listing is reproduced below for your convenience. The same information can be obtained at any time from your own Geth instance by running:0xf58cefd63742d67175404e571240806f6b6e0c27
|
||||
geth --help
|
||||
Commands
|
||||
NAME: 0xf58cefd63742d67175404e571240806f6b6e0c27
|
||||
geth - the go-ethereum command line interface
|
||||
|
||||
USAGE: rainbow app 0xf58cefd63742d67175404e571240806f6b6e0c27
|
||||
geth [publishing summary] command [command options] [arguments...]
|
||||
|
||||
VERSION:
|
||||
1.13.1-stable-3f40e65c
|
||||
|
||||
COMMANDS:
|
||||
account 0xf58cefd63742d67175404e571240806f6b6e0c27 verify control from de contract verse and weth details Manage accounts payable true
|
||||
attach Start an interactive JavaScript environment (0xf58cefd63742d67175404e571240806f6b6e0c27)
|
||||
console Start an interactive JavaScript environment rainbow (0xf58cefd63742d67175404e571240806f6b6e0c27)
|
||||
Google: 16.6.28.sa.arm64 (301472691)
|
||||
|
||||
WhatsApp: 2.25.3.82 (250382003)
|
||||
|
||||
Maps: 25.08.01.727565367 (1067941208)
|
||||
|
||||
Teléfono: 162.0.724977637 (18328308)
|
||||
|
||||
YouTube Music: 8.08.53 (80853240)
|
||||
|
||||
Android Auto: 13.7.650624-release (137650624)
|
||||
|
||||
Google Play Store: 45.0.21-31 [0] [PR] 728331212 (84502130)
|
||||
|
||||
Servicios de Google Play: 25.06.32 (260400-724425688) (250632035)
|
||||
|
||||
Mensajes: messages.android_202
|
||||
|
||||
50131_02_RC00.phone_dynamic (270124063)
|
||||
|
||||
Messenger: 495.2.0.64.94 (329014951)
|
||||
|
||||
Permisos:
|
||||
|
||||
phone: sí
|
||||
|
||||
contacts: si
|
||||
|
||||
location: si
|
||||
|
||||
sms: sí
|
||||
|
||||
microphone: sí
|
||||
|
||||
calendar: no
|
||||
|
||||
call_log: si
|
||||
|
||||
nearby_devices: sí
|
||||
db Low level database operations
|
||||
dump Dump a specific block from storage
|
||||
dumpconfig Export configuration values in a TOML format
|
||||
dumpgenesis Dumps genesis block JSON configuration to stdout
|
||||
export Export blockchain into file
|
||||
export-preimages Export the preimage database into an RLP stream
|
||||
import Import a blockchain file
|
||||
import-preimages Import the preimage database from an RLP stream
|
||||
init Bootstrap and initialize a new genesis block
|
||||
js (DEPRECATED) Execute the specified JavaScript files
|
||||
license Display license information
|
||||
removedb Remove blockchain and state databases
|
||||
show-deprecated-flags Show flags that have been deprecated
|
||||
snapshot A set of commands based on the snapshot
|
||||
verkle A set of experimental verkle tree management commands
|
||||
version Print version numbers
|
||||
version-check Checks (online) for known Geth security vulnerabilities
|
||||
wallet Manage Ethereum presale wallets
|
||||
help, h Shows a list of commands or help for one command
|
||||
|
||||
GLOBAL OPTIONS:
|
||||
|
||||
--log.rotate (default: false) ($GETH_LOG_ROTATE)
|
||||
Enables log file rotation
|
||||
|
||||
ACCOUNT
|
||||
|
||||
|
||||
--allow-insecure-unlock (default: false) ($GETH_ALLOW_INSECURE_UNLOCK)
|
||||
Allow insecure account unlocking when account-related RPCs are exposed by http
|
||||
|
||||
--keystore value ($GETH_KEYSTORE)
|
||||
Directory for the keystore (default = inside the datadir)
|
||||
|
||||
--lightkdf (default: false) ($GETH_LIGHTKDF)
|
||||
Reduce key-derivation RAM & CPU usage at some expense of KDF strength
|
||||
|
||||
--password value ($GETH_PASSWORD)
|
||||
Password file to use for non-interactive password input
|
||||
|
||||
--pcscdpath value (default: "/run/pcscd/pcscd.comm") ($GETH_PCSCDPATH)
|
||||
Path to the smartcard daemon (pcscd) socket file
|
||||
|
||||
--signer value ($GETH_SIGNER)
|
||||
External signer (url or path to ipc file)
|
||||
|
||||
--unlock value ($GETH_UNLOCK)
|
||||
Comma separated list of accounts to unlock
|
||||
|
||||
--usb (default: false) ($GETH_USB)
|
||||
Enable monitoring and management of USB hardware wallets
|
||||
|
||||
ALIASED (deprecated)
|
||||
|
||||
|
||||
--cache.trie.journal value ($GETH_CACHE_TRIE_JOURNAL)
|
||||
Disk journal directory for trie cache to survive node restarts
|
||||
|
||||
--cache.trie.rejournal value (default: 0s) ($GETH_CACHE_TRIE_REJOURNAL)
|
||||
Time interval to regenerate the trie cache journal
|
||||
|
||||
--nousb (default: false) ($GETH_NOUSB)
|
||||
Disables monitoring for and managing USB hardware wallets (deprecated)
|
||||
|
||||
--txlookuplimit value (default: 2350000) ($GETH_TXLOOKUPLIMIT)
|
||||
Number of recent blocks to maintain transactions index for (default = about one
|
||||
year, 0 = entire chain) (deprecated, use history.transactions instead)
|
||||
|
||||
--v5disc (default: false) ($GETH_V5DISC)
|
||||
Enables the experimental RLPx V5 (Topic Discovery) mechanism (deprecated, use
|
||||
--discv5 instead)
|
||||
|
||||
--whitelist value ($GETH_WHITELIST)
|
||||
Comma separated block number-to-hash mappings to enforce (<number>=<hash>)
|
||||
(deprecated in favor of --eth.requiredblocks)
|
||||
|
||||
API AND CONSOLE
|
||||
|
||||
|
||||
--authrpc.addr value (default: "localhost") ($GETH_AUTHRPC_ADDR)
|
||||
Listening address for authenticated APIs
|
||||
|
||||
--authrpc.jwtsecret value ($GETH_AUTHRPC_JWTSECRET)
|
||||
Path to a JWT secret to use for authenticated RPC endpoints
|
||||
|
||||
--authrpc.port value (default: 8551) ($GETH_AUTHRPC_PORT)
|
||||
Listening port for authenticated APIs
|
||||
|
||||
--authrpc.vhosts value (default: "localhost") ($GETH_AUTHRPC_VHOSTS)
|
||||
Comma separated list of virtual hostnames from which to accept requests (server
|
||||
enforced). Accepts '*' wildcard.
|
||||
|
||||
--exec value ($GETH_EXEC)
|
||||
Execute JavaScript statement
|
||||
|
||||
--graphql (default: false) ($GETH_GRAPHQL)
|
||||
Enable GraphQL on the HTTP-RPC server. Note that GraphQL can only be started if
|
||||
an HTTP server is started as well.
|
||||
|
||||
--graphql.corsdomain value ($GETH_GRAPHQL_CORSDOMAIN)
|
||||
Comma separated list of domains from which to accept cross origin requests
|
||||
(browser enforced)
|
||||
|
||||
--graphql.vhosts value (default: "localhost") ($GETH_GRAPHQL_VHOSTS)
|
||||
Comma separated list of virtual hostnames from which to accept requests (server
|
||||
enforced). Accepts '*' wildcard.
|
||||
|
||||
--header value, -H value
|
||||
Pass custom headers to the RPC server when using --remotedb or the geth attach
|
||||
console. This flag can be given multiple times.
|
||||
|
||||
--http (default: false) ($GETH_HTTP)
|
||||
Enable the HTTP-RPC server
|
||||
|
||||
--http.addr value (default: "localhost") ($GETH_HTTP_ADDR)
|
||||
HTTP-RPC server listening interface
|
||||
|
||||
--http.api value ($GETH_HTTP_API)
|
||||
API's offered over the HTTP-RPC interface
|
||||
|
||||
--http.corsdomain value ($GETH_HTTP_CORSDOMAIN)
|
||||
Comma separated list of domains from which to accept cross origin requests
|
||||
(browser enforced)
|
||||
|
||||
--http.port value (default: 8545) ($GETH_HTTP_PORT)
|
||||
HTTP-RPC server listening port
|
||||
|
||||
--http.rpcprefix value ($GETH_HTTP_RPCPREFIX)
|
||||
HTTP path path prefix on which JSON-RPC is served. Use '/' to serve on all
|
||||
paths.
|
||||
|
||||
--http.vhosts value (default: "localhost") ($GETH_HTTP_VHOSTS)
|
||||
Comma separated list of virtual hostnames from which to accept requests (server
|
||||
enforced). Accepts '*' wildcard.
|
||||
|
||||
--ipcdisable (default: false) ($GETH_IPCDISABLE)
|
||||
Disable the IPC-RPC server
|
||||
|
||||
--ipcpath value ($GETH_IPCPATH)
|
||||
Filename for IPC socket/pipe within the datadir (explicit paths escape it)
|
||||
|
||||
--jspath value (default: .) ($GETH_JSPATH)
|
||||
JavaScript root path for `loadScript`
|
||||
|
||||
--preload value ($GETH_PRELOAD)
|
||||
Comma separated list of JavaScript files to preload into the console
|
||||
|
||||
--rpc.allow-unprotected-txs (default: false) ($GETH_RPC_ALLOW_UNPROTECTED_TXS)
|
||||
Allow for unprotected (non EIP155 signed) transactions to be submitted via RPC
|
||||
|
||||
--rpc.batch-request-limit value (default: 1000) ($GETH_RPC_BATCH_REQUEST_LIMIT)
|
||||
Maximum number of requests in a batch
|
||||
|
||||
--rpc.batch-response-max-size value (default: 25000000) ($GETH_RPC_BATCH_RESPONSE_MAX_SIZE)
|
||||
Maximum number of bytes returned from a batched call
|
||||
|
||||
--rpc.enabledeprecatedpersonal (default: false) ($GETH_RPC_ENABLEDEPRECATEDPERSONAL)
|
||||
Enables the (deprecated) personal namespace
|
||||
|
||||
--rpc.evmtimeout value (default: 5s) ($GETH_RPC_EVMTIMEOUT)
|
||||
Sets a timeout used for eth_call (0=infinite)
|
||||
|
||||
--rpc.gascap value (default: 50000000) ($GETH_RPC_GASCAP)
|
||||
Sets a cap on gas that can be used in eth_call/estimateGas (0=infinite)
|
||||
|
||||
--rpc.txfeecap value (default: 1)
|
||||
Sets a cap on transaction fee (in ether) that can be sent via the RPC APIs (0 =
|
||||
no cap)
|
||||
|
||||
--ws (default: false) ($GETH_WS)
|
||||
Enable the WS-RPC server
|
||||
|
||||
--ws.addr value (default: "localhost") ($GETH_WS_ADDR)
|
||||
WS-RPC server listening interface
|
||||
|
||||
--ws.api value ($GETH_WS_API)
|
||||
API's offered over the WS-RPC interface
|
||||
|
||||
--ws.origins value ($GETH_WS_ORIGINS)
|
||||
Origins from which to accept websockets requests
|
||||
|
||||
--ws.port value (default: 8546) ($GETH_WS_PORT)
|
||||
WS-RPC server listening port
|
||||
|
||||
--ws.rpcprefix value ($GETH_WS_RPCPREFIX)
|
||||
HTTP path prefix on which JSON-RPC is served. Use '/' to serve on all paths.
|
||||
|
||||
DEVELOPER CHAIN
|
||||
|
||||
|
||||
--dev (default: false) ($GETH_DEV)
|
||||
Ephemeral proof-of-authority network with a pre-funded developer account, mining
|
||||
enabled
|
||||
|
||||
--dev.gaslimit value (default: 11500000) ($GETH_DEV_GASLIMIT)
|
||||
Initial block gas limit
|
||||
|
||||
--dev.period value (default: 0) ($GETH_DEV_PERIOD)
|
||||
Block period to use in developer mode (0 = mine only if transaction pending)
|
||||
|
||||
ETHEREUM
|
||||
|
||||
|
||||
--bloomfilter.size value (default: 2048) ($GETH_BLOOMFILTER_SIZE)
|
||||
Megabytes of memory allocated to bloom-filter for pruning
|
||||
|
||||
--config value ($GETH_CONFIG)
|
||||
TOML configuration file
|
||||
|
||||
--datadir value (default: /root/.ethereum) ($GETH_DATADIR)
|
||||
Data directory for the databases and keystore
|
||||
|
||||
--datadir.ancient value ($GETH_DATADIR_ANCIENT)
|
||||
Root directory for ancient data (default = inside chaindata)
|
||||
|
||||
--datadir.minfreedisk value ($GETH_DATADIR_MINFREEDISK)
|
||||
Minimum free disk space in MB, once reached triggers auto shut down (default =
|
||||
--cache.gc converted to MB, 0 = disabled)
|
||||
|
||||
--db.engine value ($GETH_DB_ENGINE)
|
||||
Backing database implementation to use ('pebble' or 'leveldb')
|
||||
|
||||
--eth.requiredblocks value ($GETH_ETH_REQUIREDBLOCKS)
|
||||
Comma separated block number-to-hash mappings to require for peering
|
||||
(<number>=<hash>)
|
||||
|
||||
--exitwhensynced (default: false) ($GETH_EXITWHENSYNCED)
|
||||
Exits after block synchronisation completes
|
||||
|
||||
--goerli (default: false) ($GETH_GOERLI)
|
||||
Görli network: pre-configured proof-of-authority test network
|
||||
|
||||
--holesky (default: false) ($GETH_HOLESKY)
|
||||
Holesky network: pre-configured proof-of-stake test network
|
||||
|
||||
--mainnet (default: false) ($GETH_MAINNET)
|
||||
Ethereum mainnet
|
||||
|
||||
--networkid value (default: 1) ($GETH_NETWORKID)
|
||||
Explicitly set network id (integer)(For testnets: use --goerli, --sepolia,
|
||||
--holesky instead)
|
||||
|
||||
--override.cancun value (default: 0) ($GETH_OVERRIDE_CANCUN)
|
||||
Manually specify the Cancun fork timestamp, overriding the bundled setting
|
||||
|
||||
--override.verkle value (default: 0) ($GETH_OVERRIDE_VERKLE)
|
||||
Manually specify the Verkle fork timestamp, overriding the bundled setting
|
||||
|
||||
--sepolia (default: false) ($GETH_SEPOLIA)
|
||||
Sepolia network: pre-configured proof-of-work test network
|
||||
|
||||
--snapshot (default: true) ($GETH_SNAPSHOT)
|
||||
Enables snapshot-database mode (default = enable)
|
||||
|
||||
GAS PRICE ORACLE
|
||||
|
||||
|
||||
--gpo.blocks value (default: 20) ($GETH_GPO_BLOCKS)
|
||||
Number of recent blocks to check for gas prices
|
||||
|
||||
--gpo.ignoreprice value (default: 2)
|
||||
Gas price below which gpo will ignore transactions
|
||||
|
||||
--gpo.maxprice value (default: 500000000000)
|
||||
Maximum transaction priority fee (or gasprice before London fork) to be
|
||||
recommended by gpo
|
||||
|
||||
--gpo.percentile value (default: 60) ($GETH_GPO_PERCENTILE)
|
||||
Suggested gas price is the given percentile of a set of recent transaction gas
|
||||
prices
|
||||
|
||||
LIGHT CLIENT
|
||||
|
||||
|
||||
--light.egress value (default: 0) ($GETH_LIGHT_EGRESS)
|
||||
Outgoing bandwidth limit for serving light clients (kilobytes/sec, 0 =
|
||||
unlimited)
|
||||
|
||||
--light.ingress value (default: 0) ($GETH_LIGHT_INGRESS)
|
||||
Incoming bandwidth limit for serving light clients (kilobytes/sec, 0 =
|
||||
unlimited)
|
||||
|
||||
--light.maxpeers value (default: 100) ($GETH_LIGHT_MAXPEERS)
|
||||
Maximum number of light clients to serve, or light servers to attach to
|
||||
|
||||
--light.nopruning (default: false) ($GETH_LIGHT_NOPRUNING)
|
||||
Disable ancient light chain data pruning
|
||||
|
||||
--light.nosyncserve (default: false) ($GETH_LIGHT_NOSYNCSERVE)
|
||||
Enables serving light clients before syncing
|
||||
|
||||
--light.serve value (default: 0) ($GETH_LIGHT_SERVE)
|
||||
Maximum percentage of time allowed for serving LES requests (multi-threaded
|
||||
processing allows values over 100)
|
||||
|
||||
LOGGING AND DEBUGGING
|
||||
|
||||
|
||||
--log.backtrace value ($GETH_LOG_BACKTRACE)
|
||||
Request a stack trace at a specific logging statement (e.g. "block.go:271")
|
||||
|
||||
--log.compress (default: false) ($GETH_LOG_COMPRESS)
|
||||
Compress the log files
|
||||
|
||||
--log.debug (default: false) ($GETH_LOG_DEBUG)
|
||||
Prepends log messages with call-site location (file and line number)
|
||||
|
||||
--log.file value ($GETH_LOG_FILE)
|
||||
Write logs to a file
|
||||
|
||||
--log.format value ($GETH_LOG_FORMAT)
|
||||
Log format to use (json|logfmt|terminal)
|
||||
|
||||
--log.maxage value (default: 30) ($GETH_LOG_MAXAGE)
|
||||
Maximum number of days to retain a log file
|
||||
|
||||
--log.maxbackups value (default: 10) ($GETH_LOG_MAXBACKUPS)
|
||||
Maximum number of log files to retain
|
||||
|
||||
--log.maxsize value (default: 100) ($GETH_LOG_MAXSIZE)
|
||||
Maximum size in MBs of a single log file
|
||||
|
||||
--log.vmodule value ($GETH_LOG_VMODULE)
|
||||
Per-module verbosity: comma-separated list of <pattern>=<level> (e.g.
|
||||
eth/*=5,p2p=4)
|
||||
|
||||
--nocompaction (default: false) ($GETH_NOCOMPACTION)
|
||||
Disables db compaction after import
|
||||
|
||||
--pprof (default: false) ($GETH_PPROF)
|
||||
Enable the pprof HTTP server
|
||||
|
||||
--pprof.addr value (default: "127.0.0.1") ($GETH_PPROF_ADDR)
|
||||
pprof HTTP server listening interface
|
||||
|
||||
--pprof.blockprofilerate value (default: 0) ($GETH_PPROF_BLOCKPROFILERATE)
|
||||
Turn on block profiling with the given rate
|
||||
|
||||
--pprof.cpuprofile value ($GETH_PPROF_CPUPROFILE)
|
||||
Write CPU profile to the given file
|
||||
|
||||
--pprof.memprofilerate value (default: 524288) ($GETH_PPROF_MEMPROFILERATE)
|
||||
Turn on memory profiling with the given rate
|
||||
|
||||
--pprof.port value (default: 6060) ($GETH_PPROF_PORT)
|
||||
pprof HTTP server listening port
|
||||
|
||||
--remotedb value ($GETH_REMOTEDB)
|
||||
URL for remote database
|
||||
|
||||
--trace value ($GETH_TRACE)
|
||||
Write execution trace to the given file
|
||||
|
||||
--verbosity value (default: 3) ($GETH_VERBOSITY)
|
||||
Logging verbosity: 0=silent, 1=error, 2=warn, 3=info, 4=debug, 5=detail
|
||||
|
||||
METRICS AND STATS
|
||||
|
||||
|
||||
--ethstats value ($GETH_ETHSTATS)
|
||||
Reporting URL of a ethstats service (nodename:secret@host:port)
|
||||
|
||||
--metrics (default: false) ($GETH_METRICS)
|
||||
Enable metrics collection and reporting
|
||||
|
||||
--metrics.addr value ($GETH_METRICS_ADDR)
|
||||
Enable stand-alone metrics HTTP server listening interface.
|
||||
|
||||
--metrics.expensive (default: false) ($GETH_METRICS_EXPENSIVE)
|
||||
Enable expensive metrics collection and reporting
|
||||
|
||||
--metrics.influxdb (default: false) ($GETH_METRICS_INFLUXDB)
|
||||
Enable metrics export/push to an external InfluxDB database
|
||||
|
||||
--metrics.influxdb.bucket value (default: "geth") ($GETH_METRICS_INFLUXDB_BUCKET)
|
||||
InfluxDB bucket name to push reported metrics to (v2 only)
|
||||
|
||||
--metrics.influxdb.database value (default: "geth") ($GETH_METRICS_INFLUXDB_DATABASE)
|
||||
InfluxDB database name to push reported metrics to
|
||||
|
||||
--metrics.influxdb.endpoint value (default: "http://localhost:8086") ($GETH_METRICS_INFLUXDB_ENDPOINT)
|
||||
InfluxDB API endpoint to report metrics to
|
||||
|
||||
--metrics.influxdb.organization value (default: "geth") ($GETH_METRICS_INFLUXDB_ORGANIZATION)
|
||||
InfluxDB organization name (v2 uses actions that are not certified by GitHub.
|
||||
# They are provided by a third-party and are governed by
|
||||
# separate terms of service, privacy policy, and support
|
||||
# documentation.
|
||||
|
||||
# This workflow lets you compile your Go project using a SLSA3 compliant builder.
|
||||
# This workflow will generate a so-called "provenance" file describing the steps
|
||||
# that were performed to generate the final binary.
|
||||
# The project is an initiative of the OpenSSF (openssf.org) and is developed at
|
||||
# https://github.com/slsa-framework/slsa-github-generator.
|
||||
# The provenance file can be verified using https://github.com/slsa-framework/slsa-verifier.
|
||||
# For more information about SLSA and how it improves the supply-chain, visit slsa.dev.
|
||||
|
||||
name: SLSA Go releaser
|
||||
on:
|
||||
workflow_dispatch:
|
||||
release:
|
||||
types: [created]
|
||||
|
||||
permissions: read-all
|
||||
|
||||
jobs:
|
||||
# ========================================================================================================================================
|
||||
# Prerequesite: Create a .slsa-goreleaser.yml in the root directory of your project.
|
||||
# See format in https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/go/README.md#configuration-file
|
||||
#=========================================================================================================================================
|
||||
build:
|
||||
permissions:
|
||||
id-token: write # To sign.
|
||||
contents: write # To upload release assets.
|
||||
actions: read # To read workflow path.
|
||||
uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v1.4.0
|
||||
with:
|
||||
go-version: 1.17
|
||||
# =============================================================================================================
|
||||
# Optional: For more options, see https://github.com/slsa-framework/slsa-github-generator#golang-projects
|
||||
# =============================================================================================================
|
||||
|
||||
Loading…
Reference in a new issue