feat(ci): Add github workflow actions

.github/workflows/actions.yml

@@ -0,0 +1,55 @@
+# Go test workflow
+name: actions
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+
+    - name: Set up Go
+      uses: actions/setup-go@v3
+      with:
+        go-version: 1.21
+
+    - name: Build App
+      run: make da-server
+
+  go-test:
+    outputs:
+      COVERAGE: ${{ steps.unit.outputs.coverage }}
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+
+    - name: Set up Go
+      uses: actions/setup-go@v3
+      with:
+        go-version: 1.21
+
+    - name: Install project dependencies
+      run: | 
+        go mod download
+
+    - name: Run Unit Tests
+      id: unit
+      run: | 
+        make test 
+
+  gosec:
+    runs-on: ubuntu-latest
+    env:
+      GO111MODULE: on
+    steps:
+      - name: Checkout Source
+        uses: actions/checkout@v3
+      - name: Run Gosec Security Scanner
+        uses: securego/gosec@master
+        with:
+          args: ./...

Makefile

@@ -38,6 +38,10 @@ lint:
 
 	@golangci-lint run
 
+gosec:
+	@echo "$(GREEN) Running security scan with gosec...$(COLOR_END)"
+	gosec ./...
+
 .PHONY: \
 	op-batcher \
 	clean \

daserver.go

@@ -25,12 +25,6 @@ type PlasmaStore interface {
 	PutWithoutComm(ctx context.Context, value []byte) (key []byte, err error)
 }
 
-/*
-TODO - enable application server throughput constraints to prevent abuse
-
-	a) read/write timeouts
-	b) concurrency limits for request processing
-*/
 type DAServer struct {
 	log        log.Logger
 	endpoint   string
@@ -47,7 +41,10 @@ func NewDAServer(host string, port int, store PlasmaStore, log log.Logger) *DASe
 		endpoint: endpoint,
 		store:    store,
 		httpServer: &http.Server{
-			Addr: endpoint,
+			Addr:              endpoint,
+			ReadHeaderTimeout: 10 * time.Second,
+			// aligned with existing blob finalization times
+			WriteTimeout: 40 * time.Minute,
 		},
 	}
 }

eigenda/client.go

@@ -42,7 +42,7 @@ func NewEigenDAClient(log log.Logger, config Config) *EigenDAClient {
 
 func (m *EigenDAClient) getConnection() (*grpc.ClientConn, error) {
 	if m.UseTLS {
-		config := &tls.Config{}
+		config := &tls.Config{} // #nosec G402
 		credential := credentials.NewTLS(config)
 		dialOptions := []grpc.DialOption{grpc.WithTransportCredentials(credential)}
 		return grpc.Dial(m.RPC, dialOptions...)