Skip to content

Conversation

@jribbink
Copy link
Contributor

@jribbink jribbink commented Nov 4, 2025

Closes #2183

Description

Updates to latest test framework API & adds fork test to DeFi Actions scaffold.


For contributor use:

  • Targeted PR against master branch
  • Linked to Github issue with discussion and accepted design OR link to spec that describes this work
  • Code follows the standards mentioned here
  • Updated relevant documentation
  • Re-reviewed Files changed in the Github PR explorer
  • Added appropriate labels

@github-actions
Copy link

github-actions bot commented Nov 4, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
gomod/github.com/onflow/cadence-tools/languageserver 1.7.0 🟢 5.8
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 077 existing vulnerabilities detected
gomod/github.com/onflow/cadence-tools/test 1.8.1-0.20251105181034-5660b54035c8 🟢 5.8
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 077 existing vulnerabilities detected
gomod/github.com/onflow/flow-emulator 1.12.1 🟢 6.7
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities🟢 91 existing vulnerabilities detected
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
gomod/github.com/onflow/flow-go 0.44.0-experimental-cadence-v1.8.3.0.20251117075053-a0753cafb3a0 🟢 6.9
Details
CheckScoreReason
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during GetBranch(v0.41): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration
Vulnerabilities⚠️ 014 existing vulnerabilities detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST🟢 10SAST tool is run on all commits

Scanned Files

  • go.mod

@jribbink jribbink force-pushed the jribbink/update-test-framework branch from aecb40b to f787d29 Compare November 4, 2025 20:41
@jribbink jribbink force-pushed the jribbink/update-test-framework branch from f787d29 to 25b35cf Compare November 4, 2025 20:43
@jribbink jribbink added the Feature A new user feature or a new package API label Nov 17, 2025
@jribbink jribbink changed the title Update to latest test framework Update to latest Fork Testing Changes Nov 18, 2025
@jribbink jribbink changed the base branch from master to auto-update-onflow-cadence-v1.8.3 November 19, 2025 03:50
@jribbink jribbink marked this pull request as ready for review November 19, 2025 03:50
@jribbink jribbink merged commit b19b3f9 into auto-update-onflow-cadence-v1.8.3 Nov 19, 2025
2 checks passed
@jribbink jribbink deleted the jribbink/update-test-framework branch November 19, 2025 03:52
jribbink added a commit that referenced this pull request Nov 19, 2025
* Update to Cadence v1.8.3

* Update to latest Fork Testing Changes (#2171)

* Update to latest test framework

* Update test framework

* Update dependencies

* Update to latest dependencies & new pragma API

* Add metrics for fork testing (#2186)

* upgrade emulator (#2184)

Co-authored-by: Jordan Ribbink <[email protected]>

* Fix CI Test Failure

* Update docs

* Update dependency addresses

* Cleanup TX for simplicity

* Fix dependencies

---------

Co-authored-by: Janez Podhostnik <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Feature A new user feature or a new package API

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add fork test to DeFi Actions Scaffold

2 participants