[WIP] fix: Security audit #1702

ppupha · 2024-05-21T10:28:07Z

Description

Story link: https://github.com/bitmark-inc/autonomy/issues/

Describe your changes

Added a function A to process data B
Created new column C to store D state
Refactor workflow E to improve performance because of F

Signed-off-by: phuoc <[email protected]>

* feat: set secure_flag for recovery page Signed-off-by: phuoc <[email protected]> * fix: apply for android only Signed-off-by: phuoc <[email protected]> --------- Signed-off-by: phuoc <[email protected]>

* update encyprtion key & restore flow * fix lint * update dependencies

Signed-off-by: phuoc <[email protected]>

fix: masking seeds, showing time out

Signed-off-by: phuoc <[email protected]>

feat: enable minify and shrink resource

* fix: clear log when forget i exist * fix: remove image cache * fix: clear keychain * fix: remove keychains item * Update * Remove unused getAllKeychainItems * use logger

Signed-off-by: phuoc <[email protected]>

fix: update license for liauk.swift and tezart

Signed-off-by: phuoc <[email protected]>

fix: change log type to avoid adding to breadcumb

* fix: android delete keys when forget i exist * Update

* fix: ios hide sensitive dât when background * Update

Signed-off-by: phuoc <[email protected]>

add import

Signed-off-by: phuoc <[email protected]>

…-wallet-connect Add walletconnect validation by verifyAPI

Signed-off-by: phuoc <[email protected]>

fix: frida default tcp port

Signed-off-by: phuoc <[email protected]>

feat: use different github secret for env vars

Signed-off-by: phuoc <[email protected]>

fix cat env.secret

Signed-off-by: phuoc <[email protected]>

.env.secret.example

github-actions · 2024-07-10T02:17:40Z

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

pubspec.lock

pubspec.yaml

cryptography@>= 2.7.0, < 3.0.0
cryptography_flutter@>= 2.3.2, < 3.0.0
local_auth@>= 2.1.0, < 3.0.0
local_auth@>= 2.2.0, < 3.0.0

Signed-off-by: phuoc <[email protected]>

* fix: migrate * fix: add passpharse when generate seedPublicData

This reverts commit 60beb42.

This reverts commit 1d9ee57.

This reverts commit 2076a30.

This reverts commit bbd4eee.

This reverts commit 9e2f82d.

phuocbitmark and others added 30 commits March 18, 2024 09:57

fix: masking seeds, showing time out

f780430

Signed-off-by: phuoc <[email protected]>

fix: fix page name

5cca695

Signed-off-by: phuoc <[email protected]>

checkout mount

2b4cd6d

Signed-off-by: phuoc <[email protected]>

feat: hide, unhide icon

18dd8f7

Signed-off-by: phuoc <[email protected]>

feat: set secure_flag for recovery page (#1586)

81549f7

* feat: set secure_flag for recovery page Signed-off-by: phuoc <[email protected]> * fix: apply for android only Signed-off-by: phuoc <[email protected]> --------- Signed-off-by: phuoc <[email protected]>

update encyprtion key & restore flow (#1584)

e2e4a75

* update encyprtion key & restore flow * fix lint * update dependencies

fix: update import address ui

c2f57e9

Signed-off-by: phuoc <[email protected]>

Merge pull request #1585 from bitmark-inc/masking_seeds

58cb9fa

fix: masking seeds, showing time out

feat: enable minify and shrink resource

0689a1b

Signed-off-by: phuoc <[email protected]>

Merge pull request #1590 from bitmark-inc/minify_shrink

3196eaa

feat: enable minify and shrink resource

fix(security_audit): clear data when forget i exist (#1589)

8edfa63

* fix: clear log when forget i exist * fix: remove image cache * fix: clear keychain * fix: remove keychains item * Update * Remove unused getAllKeychainItems * use logger

fix: textfield cache, disable suggestion

329778a

Signed-off-by: phuoc <[email protected]>

fix: prevent 3rd party keyboard keyboard ios (#1591)

4e43376

Signed-off-by: phuoc <[email protected]>

fix: imporve breadcrumb (#1593)

afcc768

Signed-off-by: phuoc <[email protected]>

fix: update license for liauk.swift and tezart

3f6b991

Signed-off-by: phuoc <[email protected]>

Merge pull request #1596 from bitmark-inc/update_license

ba6e4c6

fix: update license for liauk.swift and tezart

fix: change log type to avoid adding to breadcumb

aedc88c

Signed-off-by: phuoc <[email protected]>

Merge pull request #1598 from bitmark-inc/reduce_breadcumb

42f92b4

fix: change log type to avoid adding to breadcumb

fix: fallback hex encoded string for malform utf8 (#1597)

3869507

fix: android delete keys when forget i exist (#1595)

fe30d66

* fix: android delete keys when forget i exist * Update

fix: ios hide sensitive dât when background (#1599)

1bc8543

* fix: ios hide sensitive dât when background * Update

fix: encript env, decrypt when app run

44447da

Signed-off-by: phuoc <[email protected]>

add import

0f594df

Signed-off-by: phuoc <[email protected]>

Merge pull request #1601 from bitmark-inc/add_import

ce1a40f

add import

Merge branch 'security_audit' into encrypt_env_secret

ab28543

fix: fix migrate env key

4c8b7ec

Signed-off-by: phuoc <[email protected]>

update android build ci

27cfbd6

Signed-off-by: phuoc <[email protected]>

add encrypt script for deploy files

018246d

Signed-off-by: phuoc <[email protected]>

add missing ios files

5578496

add SecureChannelHandler to xcodeproj

b5f9431

hoangbtmrk and others added 7 commits May 23, 2024 10:22

Merge pull request #1706 from bitmark-inc/11/avoid-untrusted-dApps-in…

7c0f3a1

…-wallet-connect Add walletconnect validation by verifyAPI

fix: frida default tcp port

3abcab2

Signed-off-by: phuoc <[email protected]>

Merge pull request #1709 from bitmark-inc/fix_frida_port

1586b00

fix: frida default tcp port

feat: use different github secret for env vars

a3abdb2

Signed-off-by: phuoc <[email protected]>

Merge pull request #1764 from bitmark-inc/env_vars

a4cc1f5

feat: use different github secret for env vars

fix cat env.secret

6df107e

Signed-off-by: phuoc <[email protected]>

Merge pull request #1768 from bitmark-inc/fix_cat_env

48c37a6

fix cat env.secret

phuocbitmark force-pushed the security_audit branch from 9fcdb17 to 48c37a6 Compare July 10, 2024 02:03

phuocbitmark added 2 commits July 10, 2024 09:12

Merge branch 'develop' into security_audit

0da9584

fix resolve conflict

e5b58ad

Signed-off-by: phuoc <[email protected]>

github-actions bot reviewed Jul 10, 2024

View reviewed changes

.env.secret.example Show resolved Hide resolved

.env.secret.example Show resolved Hide resolved

.env.secret.example Show resolved Hide resolved

.env.secret.example Show resolved Hide resolved

phuocbitmark added 4 commits July 10, 2024 09:37

add comment

17494de

Signed-off-by: phuoc <[email protected]>

lint

c30a9c1

Signed-off-by: phuoc <[email protected]>

lint

74689d0

Signed-off-by: phuoc <[email protected]>

Merge branch 'develop' into security_audit

810e133

phuocbitmark requested a review from longbmk July 12, 2024 02:44

phuocbitmark and others added 12 commits July 15, 2024 09:31

Merge branch 'develop' into security_audit

1a63cb2

Update libauk swift

bbd4eee

fix: migrate

2076a30

Sang/fix/security audit (#1836)

1d9ee57

* fix: migrate * fix: add passpharse when generate seedPublicData

fix: android restore: blockstore default key

60beb42

Merge branch 'develop' into security_audit

be3208c

Revert "fix: android restore: blockstore default key"

62f5a72

This reverts commit 60beb42.

Revert "Sang/fix/security audit (#1836)"

0104c22

This reverts commit 1d9ee57.

Revert "fix: migrate"

5d7919e

This reverts commit 2076a30.

Revert "Update libauk swift"

43f498f

This reverts commit bbd4eee.

Revert "fix(security_audit): 1_ Biometric is not event-bound (#1613)"

9615ded

This reverts commit 9e2f82d.

Merge branch 'Sang/revert_bio_metric' into security_audit

937ea21

ppupha closed this Aug 8, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[WIP] fix: Security audit #1702

[WIP] fix: Security audit #1702

ppupha commented May 21, 2024

github-actions bot commented Jul 10, 2024 •

edited

Loading

[WIP] fix: Security audit #1702

[WIP] fix: Security audit #1702

Conversation

ppupha commented May 21, 2024

github-actions bot commented Jul 10, 2024 • edited Loading

Dependency Review

Scanned Manifest Files

github-actions bot commented Jul 10, 2024 •

edited

Loading