Skip to content
This repository has been archived by the owner on Jul 16, 2021. It is now read-only.

v0.0.2

Pre-release
Pre-release
Compare
Choose a tag to compare
@zambien zambien released this 31 Oct 17:39
· 262 commits to master since this release
8c67909

0.0.2 (October 26, 2019)

NEW FEATURES:

  • Demonstrate Smart Contract integration model
    • Compile to ABI
    • Generate bindings
  • Added support for ERC20
    • Deployed ERC20 implementation - FixedSupplyToken
    • Implemented all methods in ERC20Interface

IMPROVEMENTS:

  • Verified CIS Docker Hardening 1.20 for images where applicable to Dockerfile
    • 4.1 Ensure that a user for the container has been created
    • 4.2 Ensure that containers use only trusted base images
      (HashiCorp Vault/Alpine)
    • 4.3 Ensure that unnecessary packages are not installed in the container
    • 4.4 Ensure images are scanned and rebuilt to include security patches
      (apk update && apk upgrade added to Dockerfile)
    • 4.5 - N/A - Ensure Content trust for Docker is Enabled
    • 4.6 Ensure that HEALTHCHECK instructions have been added to
      container images
    • 4.7 Ensure update instructions are not use alone in the Dockerfile
      - used epoch date for this in dockerfile/makefile
    • 4.8 Ensure setuid and setgid permissions are removed
      (vault user prevents this)
    • 4.9 Ensure that COPY is used instead of ADD in Dockerfiles
    • 4.10 Ensure secrets are not stored in Dockerfiles
    • 4.11 Ensure only verified packages are are installed
      (using Alpine package manager)
  • Smoke Test for transaction signing
  • Smoke Test for ERC20
    • Deploy Contract
    • Read Token Supply
    • Read Token Balance
    • Transfer Token
    • Approve Transfer

BUG FIXES:

  • N/A