✨ feat(indexer): Execute sql migrations file on startup

[roninjin10]

• Execute the migrations file on startup

[roninjin10]

Current dependencies on/for this PR:

• develop
  • PR ♻️ chore: Make port configurable #7089
    • PR 🔧 chore: update schema.prisma #7090
      • PR 🐛 fix(indexer): add retries to db connection #7091
        • PR 🐛 fix: Copy indexer.toml in dockerfile #7088
          • PR ✨ feat(indexer): Execute sql migrations file on startup #7092 👈
            • PR feat(indexer): Add grafana and alert service to local development #7257
            • PR chore(indexer): remove indexer all command #7247

This comment was auto-generated by Graphite.

[semgrep-app]

Semgrep found 1 gorm-hardcoded-secret finding:

• indexer/database/db.go: L42-45

A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive data, can be leaked and used by internal or external malicious actors. Use environment variables to securely provide credentials and other secrets or retrieve them from a secure vault or Hardware Security Module (HSM).

View Dataflow Graph

flowchart LR
    classDef invis fill:white, stroke: none
    classDef default fill:#e7f5ff, color:#1c7fd6, stroke: none

    subgraph File0["<b>indexer/database/db.go</b>"]
        direction LR
        %% Source

        subgraph Source
            direction LR

            v0("<b>[Line: 40]</b> #quot; password=%s#quot;")
        end
        %% Intermediate

        subgraph Traces0[Traces]
            direction TB

            v2("<b>[Line: 40]</b> dsn")
        end
        %% Sink

        subgraph Sink
            direction LR

            v1("<b>[Line: 42]</b> gorm.Open(postgres.Open(dsn), &gorm.Config{<br>			SkipDefaultTransaction: true,<br>			Logger:                 logger.Default.LogMode(logger.Silent),<br>		})")
        end
    end
    %% Class Assignment
    Source:::invis
    Sink:::invis

    Traces0:::invis
    File0:::invis

    %% Connections

    Source --> Traces0
    Traces0 --> Sink

    %% Clickable

    click v0 href "https://github.com/ethereum-optimism/optimism/blob/b9e6a7a38f3d0e2e7ab87285105f559930114904/indexer/database/db.go#L40" "View in source" _blank
    click v1 href "https://github.com/ethereum-optimism/optimism/blob/b9e6a7a38f3d0e2e7ab87285105f559930114904/indexer/database/db.go#L42" "View in source" _blank
    click v2 href "https://github.com/ethereum-optimism/optimism/blob/b9e6a7a38f3d0e2e7ab87285105f559930114904/indexer/database/db.go#L40" "View in source" _blank

Loading

_{Ignore this finding from gorm-hardcoded-secret.}

Semgrep found 1 gorm-empty-password finding:

• indexer/database/db.go: L42-45

The application uses an empty credential. This can lead to unauthorized access by either an internal or external malicious actor. Use environment variables to securely provide credentials and other secrets or retrieve them from a secure vault or Hardware Security Module (HSM).

View Dataflow Graph

flowchart LR
    classDef invis fill:white, stroke: none
    classDef default fill:#e7f5ff, color:#1c7fd6, stroke: none

    subgraph File0["<b>indexer/database/db.go</b>"]
        direction LR
        %% Source

        subgraph Source
            direction LR

            v0("<b>[Line: 40]</b> #quot; password=%s#quot;")
        end
        %% Intermediate

        subgraph Traces0[Traces]
            direction TB

            v2("<b>[Line: 40]</b> dsn")
        end
        %% Sink

        subgraph Sink
            direction LR

            v1("<b>[Line: 42]</b> gorm.Open(postgres.Open(dsn), &gorm.Config{<br>			SkipDefaultTransaction: true,<br>			Logger:                 logger.Default.LogMode(logger.Silent),<br>		})")
        end
    end
    %% Class Assignment
    Source:::invis
    Sink:::invis

    Traces0:::invis
    File0:::invis

    %% Connections

    Source --> Traces0
    Traces0 --> Sink

    %% Clickable

    click v0 href "https://github.com/ethereum-optimism/optimism/blob/b9e6a7a38f3d0e2e7ab87285105f559930114904/indexer/database/db.go#L40" "View in source" _blank
    click v1 href "https://github.com/ethereum-optimism/optimism/blob/b9e6a7a38f3d0e2e7ab87285105f559930114904/indexer/database/db.go#L42" "View in source" _blank
    click v2 href "https://github.com/ethereum-optimism/optimism/blob/b9e6a7a38f3d0e2e7ab87285105f559930114904/indexer/database/db.go#L40" "View in source" _blank

Loading

_{Ignore this finding from gorm-empty-password.}

[roninjin10]

closes #71

[roninjin10]

Moving to draft because this looks like it breaks tests

[mergify]

Hey @roninjin10! This PR has merge conflicts. Please fix them before continuing review.

[roninjin10]

Closing