Open sourcing requirements

.github/workflows/gitleaks.yml

@@ -0,0 +1,22 @@
+name: Gitleaks
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+jobs:
+  scan:
+    name: gitleaks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-go@v3
+        with:
+          go-version: "1.17.7"
+      - run: |
+          wget https://github.com/zricethezav/gitleaks/releases/download/v8.10.1/gitleaks_8.10.1_linux_x64.tar.gz && \
+          tar -xzf gitleaks_8.10.1_linux_x64.tar.gz && \
+          sudo install gitleaks /usr/bin && \
+          gitleaks detect --report-format json --report-path leak_report -v

.github/workflows/release.yml

@@ -1,16 +1,27 @@
-name: Build, Notarize, Release
+name: Release
 
 # This workflow is triggered on pushing a tag BE CAREFUL this application AUTO UPDATES !!! 
 # git tag vX.Y.Z
 # git push origin tag vX.Y.Z
-on: 
+
+on:
     push:
         tags:
             - 'v*.*.*'
+
 jobs:
+    verify-main-branch: # ensures we only release from main
+      runs-on: ubuntu-latest
+      steps:
+      - name: Exit if not on main branch
+        if: github.ref != 'refs/heads/main'
+        run: echo "Not on main branch, exiting" && exit -1
+
     release-middleware:
+        needs: 
+          - "verify-main-branch"
         runs-on: "ubuntu-latest"
-        steps:           
+        steps:
             - uses: actions/checkout@v2
             - uses: actions/setup-python@v4
               with:
@@ -36,10 +47,12 @@ jobs:
                 password: ${{ secrets.PYPI_TOKEN }}
                 skip-existing: true
                 packages-dir: dist/
+
     release-operate:
         runs-on: macos-latest
         needs:
           - "release-middleware"
+          - "verify-main-branch"
         steps:           
             - uses: actions/checkout@v2
             - uses: actions/setup-python@v4
@@ -68,12 +81,10 @@ jobs:
                 APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLEIDPASS }}
                 APPLE_ID: ${{ secrets.APPLEID }}
                 APPLETEAMID: ${{ secrets.APPLETEAMID }}
-                #CSC_FOR_PULL_REQUEST: true #required during testing
                 CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
                 CSC_LINK: ${{ secrets.CSC_LINK }}
                 GH_TOKEN: ${{ secrets.github_token}}
                 NODE_ENV: production
                 DEV_RPC: https://rpc-gate.autonolas.tech/gnosis-rpc/
                 FORK_URL: https://rpc-gate.autonolas.tech/gnosis-rpc/
-                #PUBLISH_FOR_PULL_REQUEST: true #required during testing
-              run: node build.js
+              run: node build.js

.gitignore

@@ -35,4 +35,5 @@ temp/
 dist/
 electron/.next
 
-cache
+cache
+leak_report

.gitleaksignore

@@ -0,0 +1,19 @@
+ada5590acaa13a35afb62c368b13c3601e658c0c:operate/services/manage.py:generic-api-key:400
+ada5590acaa13a35afb62c368b13c3601e658c0c:operate/services/manage.py:generic-api-key:401
+ada5590acaa13a35afb62c368b13c3601e658c0c:operate/services/manage.py:generic-api-key:448
+ada5590acaa13a35afb62c368b13c3601e658c0c:operate/services/manage.py:generic-api-key:449
+ef9ec7a111816282b6185e8268a460d02329fbe4:api.md:generic-api-key:13
+ef9ec7a111816282b6185e8268a460d02329fbe4:api.md:generic-api-key:37
+44388a82d29ce4d96e554c828c3c2c12d6ee3b8a:operate/data/contracts/service_staking_token/contract.yaml:generic-api-key:10
+43bb67ace89a4a6e0eee84d3ee6495088288c528:backend/operate/data/contracts/service_staking_token/contract.yaml:generic-api-key:10
+19ecb1e59813c632971658183a9f2d9d88e0614b:backend/operate/data/contracts/service_staking_token/contract.yaml:generic-api-key:10
+37847b0c322a0dbc8987df526a49df70301e44d4:backend/operate/ledger/profiles.py:generic-api-key:29
+6834023917760bf7875cc7c107e0c59ad7925ef4:backend/operate/ledger/profiles.py:generic-api-key:32
+4e8c1c21dffd9283195052117ad4c371f770e0b2:backend/operate/ledger/profiles.py:generic-api-key:28
+88115a38d3843d0f233f234816229de495bc6ece:templates/trader.yaml:generic-api-key:13
+0a426251fedb8b55111455e35bffd661f4489541:backend/test.py:generic-api-key:13
+daf41a143aa8c483db584ba1e7222e8eafec1d3b:backend/operate.yaml:generic-api-key:13
+daf41a143aa8c483db584ba1e7222e8eafec1d3b:backend/controller.py:generic-api-key:201
+af77e930289cbc87987567bff0efc25936484df2:backend/controller.py:generic-api-key:354b04972639d66053109596d3b73a1d91688964ebb:electron/constants/publishOptions.js:github-fine-grained-pat:3
+b04972639d66053109596d3b73a1d91688964ebb:electron/constants/publishOptions.js:github-fine-grained-pat:3
+af77e930289cbc87987567bff0efc25936484df2:backend/controller.py:generic-api-key:354