SSV Oracle & Cluster Updater

.dockerignore

@@ -1,74 +1,45 @@
-# -------------------------------------------------------
-# 1. Git metadata and version-control artifacts
-# -------------------------------------------------------
-.git
+# Binaries
+ssv-oracle
+*.exe
+*.dll
+*.so
+*.dylib
+
+# Test files
+*_test.go
+testdata/
+coverage.*
+
+# Documentation
+*.md
+!README.md
+
+# Git
+.git/
 .gitignore
-.gitattributes
-.github
 
-# -------------------------------------------------------
-# 2. Local development files & folders
-# -------------------------------------------------------
-node_modules
-npm-debug.log*
-yarn-error.log*
-pnpm-debug.log*
-
-__pycache__/
-*.py[cod]
-*.pyo
-*.pyd
-*.egg-info/
-
-vendor/
-dist/
-target/
-
-# -------------------------------------------------------
-# 3. Environment & credential files
-# -------------------------------------------------------
-.env
-.env.local
-.env.*.local
-
-# -------------------------------------------------------
-# 4. Editor and OS-specific files
-# -------------------------------------------------------
+# IDE
 .vscode/
 .idea/
 *.swp
 *.swo
-.DS_Store
-Thumbs.db
 
-# -------------------------------------------------------
-# 5. Dockerfiles and Docker-related artifacts (optional)
-# -------------------------------------------------------
+# CI/CD
+.github/
+
+# Docker
+Dockerfile
 .dockerignore
-Dockerfile*
+docker-compose*.yaml
 
-# -------------------------------------------------------
-# 6. Logs, caches, and coverage outputs
-# -------------------------------------------------------
-logs/
-*.log
-coverage/
-*.lcov
-.cache/
+# Config (may contain secrets)
+.env*
+config.yaml
 
-# -------------------------------------------------------
-# 7. Testing artifacts (optional)
-# -------------------------------------------------------
-test-results/
-pytest-report.html
-*.spec.ts
-*.test.js
-*.test.ts
+# AI assistant
+.claude/
+CLAUDE.md
 
-# -------------------------------------------------------
-# 8. Miscellaneous (customize as needed)
-# -------------------------------------------------------
-*.local
-*.bak
-*.tmp
-*.swp
+# Misc
+.DS_Store
+*.log

.env.example

@@ -0,0 +1,14 @@
+# SSV Oracle Environment Variables
+# Copy this to .env and fill in your values:
+#   cp .env.example .env
+
+# Private key for signing transactions (with or without 0x prefix)
+# WARNING: For development/testing only. For production, use keystore in config.yaml.
+# Generate a test key with: cast wallet new
+# PRIVATE_KEY=your_private_key_here
+
+# Keystore password (for wallet type: keystore)
+# KEYSTORE_PASSWORD=your_keystore_password
+
+# DEV: Set to "true" for development mode (colored console output, debug level by default)
+# DEV=true

.github/workflows/ci.yml

@@ -0,0 +1,68 @@
+name: CI
+
+on:
+  push:
+    branches: [main, stage]
+  pull_request:
+
+env:
+  GO_VERSION: "1.25.5"
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-go@v6
+        with:
+          go-version: ${{ env.GO_VERSION }}
+
+      - name: Build
+        run: go build ./...
+
+      - name: Test
+        run: go test ./...
+
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-go@v6
+        with:
+          go-version: ${{ env.GO_VERSION }}
+
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@v7
+        with:
+          version: v2.7.2
+
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0  # Full history for git describe
+
+      - name: Build Docker image
+        run: |
+          docker build \
+            --build-arg VERSION=$(git describe --tags --always --dirty) \
+            --build-arg GIT_COMMIT=$(git rev-parse --short HEAD) \
+            -t ssv-oracle:test .
+
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-go@v6
+        with:
+          go-version: ${{ env.GO_VERSION }}
+
+      - name: Install govulncheck
+        run: go install golang.org/x/vuln/cmd/govulncheck@latest
+
+      - name: Run govulncheck
+        run: govulncheck ./...

.gitignore

@@ -1,186 +1,19 @@
-# ─────────────────────────────────────────────────────────────────────────
-# 1. Operating System Files
-# ─────────────────────────────────────────────────────────────────────────
-# macOS
-.DS_Store
-.AppleDouble
-.LSOverride
-
-# Linux
-*~
-
-# ─────────────────────────────────────────────────────────────────────────
-# 2. Version Control and Git Metadata
-# ─────────────────────────────────────────────────────────────────────────
-# If someone accidentally commits a sensitive file, it's still in history-
-# but ignoring it helps stop new copies from getting added.
-.gitattributes
-/.git/          # Don't include your .git directory as part of a submodule/context
-
-# ─────────────────────────────────────────────────────────────────────────
-# 3. Editor, IDE, and Workspace Settings
-# ─────────────────────────────────────────────────────────────────────────
-# VSCode
-.vscode/
-.vscode/*
-
-# IntelliJ IDEA / WebStorm / PhpStorm / etc.
-.idea/
-*.iml
-
-# Eclipse
-.project
-.classpath
-.settings/
-
-# Sublime Text
-*.sublime-workspace
-*.sublime-project
+# Binaries
+ssv-oracle
 
-# Vim / Emacs / Nano swap files
-*.swp
-*.swo
-*~
+# Database
+data/
 
-# JetBrains Rider
+# IDE
 .idea/
-*.sln.iml
-
-# Miscellaneous editors
-*.kate-swp
-*.kate-swp.*
-*.komodoproject
-*.komodotoolbar
-*.kdev4
-*.kdev4.*
-# ...
-
-# ─────────────────────────────────────────────────────────────────────────
-# 4. Language-Agnostic Build Artifacts
-# ─────────────────────────────────────────────────────────────────────────
-# Logs
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
-pnpm-debug.log*
-lerna-debug.log*
-
-/logs
-*.log
-*.log.*
-
-# Dependency directories (if you want to rebuild inside the container or CI)
-node_modules/
-jspm_packages/
-
-# Coverage reports
-coverage/
-*.lcov
-*.lcov.*
-*.clover
-
-# Temporary files
-tmp/
-temp/
-*.tmp
-*.swp
-*.pid
-*.seed
-*.pid.lock
-
-# Compiled Python artifacts
-__pycache__/
-*.py[cod]
-*$py.class
-
-# Compiled JavaScript (bundles, minified, maps)
-*.min.js
-*.map
-
-
-
-
-# ─────────────────────────────────────────────────────────────────────────
-# 5. Language-Specific Temporary Files
-# ─────────────────────────────────────────────────────────────────────────
-# Python
-*.egg-info/
-*.egg
-*.whl
-pip-log.txt
-pip-delete-this-directory.txt
-dist/
-build/
-.eggs/
-
-/.env
-.venv/
-venv/
-ENV/
-env.bak/
-venv.bak/
-
-# Node.js / JavaScript
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
-pnpm-debug.log*
-/node_modules/
-# If you are using Yarn Plug'n'Play
-.pnp.cjs
-.pnp.loader.mjs
-
-# TypeScript
-*.tsbuildinfo
-
-# Go
-/bin/
-/vendor/
-/*.exe
-
+.vscode/
 
-# ─────────────────────────────────────────────────────────────────────────
-# 6. Configuration and Secret Files
-# ─────────────────────────────────────────────────────────────────────────
-# Environment variables
+# Environment files
 .env
-.env.*.local
-.env.local
+config.yaml
 
-# ─────────────────────────────────────────────────────────────────────────
-# 10. Miscellaneous
-# ─────────────────────────────────────────────────────────────────────────
-# Backup files
-*.bak
-*.old
-*.orig
-
-# Coverage
-coverage/
-*.lcov
-
-# Database files
-*.sqlite
-*.sqlite3
-
-
-# Archives
-*.zip
-*.tar.gz
-*.rar
-
-
-# Fonts
-*.eot
-*.otf
-*.ttf
-*.woff
-*.woff2
-
-# Executable packages
-*.AppImage
-*.deb
-*.rpm
+# OS
+.DS_Store
 
-# Editor temp files
-~$*
+# Claude Code
+.claude/