Deploy dev (#121)

* feat: lock bvecvx every week at 23:50 UTC on Wednesday * pause eth tender * feat: earner keeper for ethereum network (#67) * add bbcvx strategy to blacklist for earn (#70) * add bbcvx strategy to blacklist for earn * chore: use strategy addr not vault' * chore: lock cvx before vote at 23:20 UTC (#71) * Add harvesting script for mstable strategies (#65) * bump web3.py version * add voter proxy abi; add harvestMta to keeperAcl * add mstable harvesting script * add test for mstable harvests * catch timeout while fetching fee history; use int for num_blocks * remove harvest_mstable script * move harvest_mta in conditional harvest * revert conditional harvest * run at 0:00 UTC Co-authored-by: brookstaylor <[email protected]> * pause arb harvester for swapr upgrade (#74) * pause eth harvests til mstable ready (#75) * Chore/pause arb earns (#76) * pause eth tender (#64) Co-authored-by: brookstaylor <[email protected]> * add swapr/weth strategy to earn blacklist arb Co-authored-by: Ayush Shukla <[email protected]> * Make sure there's a buffer period before running harvestMta again (#72) * reduce harvestMta frequency * feat: conditional harvest tested for harvestMta * feat: check is_time_to_harvest in tests for mstable strategies Co-authored-by: brookstaylor <[email protected]> * unpause eth harvester (#78) * Resume arbitrum harvests (#79) * enable arbitrum harvests * run arbitrum harvests at 14:30 * update eth earner to earn for all vaults (#86) * update eth earner to earn for all vaults * chore: exclude retired strategies from earns * take pending txs into consideration when assigning nonce (#73) * Harvest/tend migrated convex strategies (#87) * feat: add migrated convex strats * enable 1 off tender run to tend new convex strats Co-authored-by: brookstaylor <[email protected]> * debug vault error * take 2 * blacklist yearn vault from earn calls * bump gas limit to 1.5m for eth earns * add tricrypto vault to invalid earn vaults * tend obtc at 14:30 * add badger/weth swapr lp deployer (#68) * reduce harvest frequency to 3/5 days (#91) * pause eth tender (#64) Co-authored-by: brookstaylor <[email protected]> * reduce harvest frequency to 3/5 days * chore: suspend eth-tender bot * add chain to error logs * black formatting * add keeper address to error logging * update log string to match new frequency and gas limit * remove unused imports, log chain on error for earner * add keeper_address to earner Co-authored-by: Ayush Shukla <[email protected]> * chore: remove swapr/weth strat from earn blacklist * feat: send chain and keeper address with failed tx logging * chore: add ops_deployer6 in arb vault owners (#92) * chore: run arb harvests at 18:10 * chore: run arb harvests at 18:34 (#93) * chore: run arb harvests at 19:14 * chore: use default arb rpc * feat: manually add bvecvx lp vault to list to earn, switch to default rpc for arb earns (#96) * Comment out bvecvx LP strat until whitelist (#97) * chore: start earning bvecvx lp strat * chore: pause bvecvx lp vault earns * chore: earn bvecvx lp * chore: pause bvecvx lp earns * Bug: fix eth harvest cadence so only harvesting every 4/5 days (#107) * fix harvest cadence so harvesting every 5 days * set min harvest time to 4 days * fix comment accuracy * refactor block offset into utils function, only use max_time_between_harvests * remove unused import * chore: fix typo, remove imports * anotha typo * align comments with cadence variables * pause negative rebases and pause centralized oracle propose (#108) * pause negative rebases and pause centralized oracle propose * feat: real test implemented * feat: smarter earn threshold using want eth price (#109) * feat: smarter earn threshold using want eth price * chore: move price func to utils, pass in chain, vault contract param * chore: fix naming, arb test * feat: handle polygon and arbitrum price getting * fix comment * chore: update return type comment * Quick fix earn (#110) * chore: denominate override in base 10, not wei * chore: earn new convex vaults * chore: reset earn sched to 10 after hour, all vaults (#112) * chore: run test tends at 15:35 * chore: pause eth harvests for subgraph upgrade (#115) * chore: suspend manual tends (#114) * chore: pause eth earner until convex strats migrated (#117) * Refactor chain references into enum (#116) * chore: reset earn sched to 10 after hour, all vaults * chore: refactor chain references into enum * chore: import utils get_abi for arb earn script * chore: get_node_url utils func, rename harvest eth * chore: base_currencies constant, remove unused imports * debug: check node url rebase * chore: remove debugging log * chore: update convex strats to new addresses (#119) * chore: update convex strats to new addresses * chore: unpause keepers, use flashbots rpc * bug: fix arbitrum abi directory * chore: revert flashbots rpc, run chainlink forwarder * chore: run ibbtc * chore: add ibbtc lp vault to earn list * chore: run bvecvx earn * chore: run ibbtc harvest * chore: run without flashbots * chore: turn off convex and ibbtc sushi earns * chore: harvest ibbtc * chore: run ibbtc harvest * chore: pause flashbots harvester * chore: reset harvests to regular cadence, add ibbtc * chore: harvest ibbtc daily * chore: update cadence" * add logging to make sure ibbtc checking * chore: log strategy address not contract obj * more logging * chore: black formatting, harvest ibbtc * feat: only earn if base fee < 150 gwei * chore: pause ren harvest * chore: fix poly rpc * chore: earn threshold 100E, don't harvest poly curve * chore: pause all earns and harvests * chore: pause bvecvx earner * chore: unpause harvests and earns on eth, use flashbots * chore: re enable ren harvest * chore: manual harvest again * chore: reset harvester script * chore: enable arbitrum harvests * chore: enable arb earns * Update eth_bvecvx_earner.yaml * Update eth_bvecvx_earner.yaml * chore: pause p,o,sbtc harvests * chore: pause bcvx for cvxcrv swap slippage issue * chore: pause ren harvests * chore: reduce ibbtc frequency to 3 days * chore: resume ren cycles * chore: pause bvecvx locking * Update arb_earner.yaml * Update arb_harvester.yaml * chore: restart bvecvx earner, change threshold to 20 eth * chore: add mim and frax vaults to earner keeper * chore: resume arb harvests and earns * chore: harvest bcvx * chore: suspend arb earns * chore: add container scanning * chore: enable arb earns * chore: check secrets on pr * chore: disable bad performing vaults * chore: update dockerfile to remove container vuln * chore: add git back to container * chore: pause bad vaults from harvest * feat: add ftm support for earns and harvests (#125) * feat: add ftm support for earns and harvests * chore: pause ftm keepers for now * chore: fix typo in kustomization.yaml * chore: pass contract objects instead of addresses to earn/harvest * chore: add abi to fantom dir * chore: add fantom to abi_dirs * chore: add ftmscan explorer name * chore: add new vault to keeper * chore: remove usdc/dai strat from active list * chore: handle 0 case issue * chore: let error log * chore: log balances * chore: try chainstack node for ftm * chore: fix pricing for ftm want, use default rpc * chore: handle harvesting ftm * fix: ibbtc collector test passing and sending tx successfully * fix: upgrade libsasl to remediate container vuln * chore: run at 3:45 * fix: get correct keeper address * chore: run at 5:07 * fix: use correct value for private key * chore: add new vaults to ftm keepers * Modularize repo (#134) * chore: modularize scripts/ dir * chore: modularize src/ and config/ files * chore: modularize scripts run for cron jobs * Add first units and GHA for testing (#137) * chore: move all integration tests to integration_tests package * chore: add gha config for tests; add tx test * chore: add more tests * chore: add test for hex gas * chore: copypaste brownie config from rewards * chore: add coverage action (#139) * Addresses (#140) * Create CODEOWNERS * chore: move address refs into constants file * chore: remove all non constant address refs * chore: fix monkeypatch paths * chore: move all hardcoded addresses to vars in constants file Co-authored-by: mitche50 <[email protected]> * fix: update tricrypto address to tricrypto2; * chore: add dca ftm vaults and black formatting * fix: handle case when 0 strategy 0 vault * chore: pause bvecvx earner * chore: add flake8 run (#141) * chore: add flake8 run * chore: format earners * chore: removed redundant f strings * chore: reformat couple files; remove f strings * chore: reformat couple files; remove f strings vol2 * chore: more cleanups * chore: remove trailing whitespaces * chore: test cleanups * chore: disable F403 * chore: more import cleanups * chore: final flake cleanup * chore: final imports cleanup * Setup logging properly (#144) * chore: initialize all loggers properly * chore: cleanup remove unused imports * chore: deploy on push to main only (#143) * chore: deploy on push to main only * chore: update image tag to use sha for push event Co-authored-by: brookstaylor <[email protected]> Co-authored-by: Ayush Shukla <[email protected]> Co-authored-by: Andrew Mitchell <[email protected]> Co-authored-by: Andrii Kulikov <[email protected]>
Badger-Finance · Mar 7, 2022 · 2efcc07 · 2efcc07
1 parent d81fdb7
commit 2efcc07
Show file tree

Hide file tree

Showing 87 changed files with 3,962 additions and 2,170 deletions.
diff --git a/.coveragerc b/.coveragerc
@@ -0,0 +1,6 @@
+[run]
+omit =
+    abi/*
+    tests/*
+    integration_tests/*
+    scripts/*
diff --git a/.deploy/base/arb_earner.yaml b/.deploy/base/arb_earner.yaml
@@ -18,7 +18,7 @@ spec:
           - name: arb-earner-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/arbitrum_earn.py"]
+            command: ["python", "-m", "scripts.arbitrum_earn"]
             env:
               - name: LOG_LEVEL
                 value: 'info'

diff --git a/.deploy/base/arb_harvester.yaml b/.deploy/base/arb_harvester.yaml
@@ -5,7 +5,7 @@ metadata:
   labels:
     app: arb-harvester-keeper
 spec:
-  schedule: "5 1 * * *"
+  schedule: "35 20 * * *"
   startingDeadlineSeconds: 300
   suspend: false
   jobTemplate:
@@ -17,7 +17,7 @@ spec:
           - name: arb-harvester-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/arbitrum_harvest.py"]
+            command: ["python", "-m", "scripts.arbitrum_harvest"]
             env:
               - name: LOG_LEVEL
                 value: 'info'

diff --git a/.deploy/base/cake_harvester.yaml b/.deploy/base/cake_harvester.yaml
@@ -18,7 +18,7 @@ spec:
           - name: cake-harvester-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/harvest_cake.py"]
+            command: ["python", "-m", "scripts.harvest_cake"]
             env:
               - name: LOG_LEVEL
                 value: 'info'

diff --git a/.deploy/base/chainlink_forwarder.yaml b/.deploy/base/chainlink_forwarder.yaml
@@ -18,24 +18,8 @@ spec:
           - name: chainlink-forwarder-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/forward_chainlink.py"]
+            command: ["python", "-m", "scripts.forward_chainlink"]
             env:
               - name: LOG_LEVEL
                 value: 'info'
-              - name: ETH_USD_CHAINLINK
-                value: '0x5f4eC3Df9cbd43714FE2740f5E3616155c5b8419'
-              - name: SUSHI_SUBGRAPH
-                value: 'https://api.thegraph.com/subgraphs/name/sushiswap/exchange'
-              - name: UNI_SUBGRAPH
-                value: 'https://api.thegraph.com/subgraphs/name/uniswap/uniswap-v2'
-              - name: SUSHI_PAIR
-                value: '0x9a13867048e01c663ce8ce2fe0cdae69ff9f35e3'
-              - name: UNI_PAIR
-                value: '0xe86204c4eddd2f70ee00ead6805f917671f56c52'
-              - name: CENTRALIZED_ORACLE
-                value: '0x73083058e0f61D3fc7814eEEDc39F9608B4546d7'
-              - name: CHAINLINK_FORWARDER
-                value: '0xB572f69edbfC946af11a1b3ef8D5c2f41D38a642'
-              - name: DIGG_BTC_CHAINLINK
-                value: '0x418a6c98cd5b8275955f08f0b8c1c6838c8b1685'
           restartPolicy: OnFailure
diff --git a/.deploy/base/earner.yaml b/.deploy/base/earner.yaml
@@ -18,7 +18,7 @@ spec:
           - name: earner-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/earn.py"]
+            command: ["python", "-m", "scripts.earn"]
             env:
               - name: LOG_LEVEL
                 value: 'info'

diff --git a/.deploy/base/eth_bvecvx_earner.yaml b/.deploy/base/eth_bvecvx_earner.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   schedule: "47 23 * * 3"
   startingDeadlineSeconds: 300
-  suspend: false
+  suspend: true
   jobTemplate:
     spec:
       template:
@@ -17,7 +17,7 @@ spec:
           - name: eth-bvecvx-earner-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/earn_locked_cvx.py"]
+            command: ["python", "-m", "scripts.earn_locked_cvx"]
             env:
               - name: LOG_LEVEL
                 value: 'info'

diff --git a/.deploy/base/eth_earner.yaml b/.deploy/base/eth_earner.yaml
@@ -18,7 +18,7 @@ spec:
           - name: eth-earner-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/eth_earn.py"]
+            command: ["python", "-m", "scripts.eth_earn"]
             env:
               - name: LOG_LEVEL
                 value: 'info'

diff --git a/.deploy/base/eth_tender.yaml b/.deploy/base/eth_tender.yaml
@@ -18,7 +18,7 @@ spec:
           - name: eth-tender-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/eth_tend.py"]
+            command: ["python", "-m", "scripts.eth_tend"]
             env:
               - name: LOG_LEVEL
                 value: "info"

diff --git a/.deploy/base/flashbots_harvester.yaml b/.deploy/base/flashbots_harvester.yaml
@@ -18,7 +18,7 @@ spec:
           - name: flashbots-harvester-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/harvest_eth.py"]
+            command: ["python", "-m", "scripts.harvest_eth"]
             env:
               - name: LOG_LEVEL
                 value: "info"

diff --git a/.deploy/base/ftm_earner.yaml b/.deploy/base/ftm_earner.yaml
@@ -0,0 +1,24 @@
+apiVersion: batch/v1beta1
+kind: CronJob
+metadata:
+  name: ftm-earner-keeper
+  labels:
+    app: ftm-earner-keeper
+spec:
+  schedule: "*/10 * * * *"
+  startingDeadlineSeconds: 300
+  suspend: false
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          serviceAccountName: ftm-earner-keeper
+          containers:
+          - name: ftm-earner-keeper
+            image: IMAGE_NAME
+            imagePullPolicy: IfNotPresent
+            command: ["python", "-m", "scripts.ftm_earn"]
+            env:
+              - name: LOG_LEVEL
+                value: 'info'
+          restartPolicy: OnFailure
diff --git a/.deploy/base/ftm_harvester.yaml b/.deploy/base/ftm_harvester.yaml
@@ -0,0 +1,25 @@
+apiVersion: batch/v1beta1
+kind: CronJob
+metadata:
+  name: ftm-harvester-keeper
+  labels:
+    app: ftm-harvester-keeper
+spec:
+  schedule: "35 20 * * *"
+  startingDeadlineSeconds: 300
+  suspend: true
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          serviceAccountName: ftm-harvester-keeper
+          containers:
+          - name: ftm-harvester-keeper
+            image: IMAGE_NAME
+            imagePullPolicy: IfNotPresent
+            command: ["python", "-m", "scripts.ftm_harvest"]
+            env:
+              - name: LOG_LEVEL
+                value: 'info'
+          restartPolicy: OnFailure
+      backoffLimit: 3
diff --git a/.deploy/base/general_harvester.yaml b/.deploy/base/general_harvester.yaml
@@ -18,7 +18,7 @@ spec:
           - name: general-harvester-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/poly_harvest.py"]
+            command: ["python", "-m", "scripts.poly_harvest"]
             env:
               - name: LOG_LEVEL
                 value: 'info'

diff --git a/.deploy/base/ibbtc_fee_collector.yaml b/.deploy/base/ibbtc_fee_collector.yaml
@@ -5,8 +5,7 @@ metadata:
   labels:
     app: ibbtc-fee-collector-keeper
 spec:
-  # cron to run every 6 AM EST every day "0 10 * * *"
-  schedule: "47 20 * * *"
+  schedule: "20 17 * * *"
   startingDeadlineSeconds: 300
   suspend: false
   jobTemplate:
@@ -18,14 +17,8 @@ spec:
           - name: ibbtc-fee-collector-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/ibbtc_fees.py"]
+            command: ["python", "-m", "scripts.ibbtc_fees"]
             env:
               - name: LOG_LEVEL
                 value: 'info'
-              - name: IBBTC_CORE_ADDRESS
-                value: '0x2A8facc9D49fBc3ecFf569847833C380A13418a8'
-              - name: BTC_ETH_CHAINLINK
-                value: '0xdeb288F737066589598e9214E782fa5A8eD689e8'
-              - name: ETH_USD_CHAINLINK
-                value: '0x5f4eC3Df9cbd43714FE2740f5E3616155c5b8419'
           restartPolicy: OnFailure
diff --git a/.deploy/base/kustomization.yaml b/.deploy/base/kustomization.yaml
@@ -8,6 +8,8 @@ resources:
   - earner.yaml
   - eth_bvecvx_earner.yaml
   - eth_earner.yaml
+  - ftm_earner.yaml
+  - ftm_harvester.yaml
   - general_harvester.yaml
   - flashbots_harvester.yaml
   - ibbtc_fee_collector.yaml

diff --git a/.deploy/base/propose_centralized_oracle.yaml b/.deploy/base/propose_centralized_oracle.yaml
@@ -18,22 +18,8 @@ spec:
           - name: propose-centralized-oracle-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/propose_centralized_oracle.py"]
+            command: ["python", "-m", "scripts.propose_centralized_oracle"]
             env:
               - name: LOG_LEVEL
                 value: 'info'
-              - name: ETH_USD_CHAINLINK
-                value: '0x5f4eC3Df9cbd43714FE2740f5E3616155c5b8419'
-              - name: SUSHI_SUBGRAPH
-                value: 'https://api.thegraph.com/subgraphs/name/sushiswap/exchange'
-              - name: UNI_SUBGRAPH
-                value: 'https://api.thegraph.com/subgraphs/name/uniswap/uniswap-v2'
-              - name: SUSHI_PAIR
-                value: '0x9a13867048e01c663ce8ce2fe0cdae69ff9f35e3'
-              - name: UNI_PAIR
-                value: '0xe86204c4eddd2f70ee00ead6805f917671f56c52'
-              - name: CENTRALIZED_ORACLE
-                value: '0x73083058e0f61D3fc7814eEEDc39F9608B4546d7'
-              - name: CHAINLINK_FORWARDER
-                value: '0xB572f69edbfC946af11a1b3ef8D5c2f41D38a642'
           restartPolicy: OnFailure
diff --git a/.deploy/base/rebalancer.yaml b/.deploy/base/rebalancer.yaml
@@ -18,7 +18,7 @@ spec:
           - name: rebalancer-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/rebalance.py"]
+            command: ["python", "-m", "scripts.rebalance"]
             env:
               - name: LOG_LEVEL
                 value: 'info'

diff --git a/.deploy/base/rebase.yaml b/.deploy/base/rebase.yaml
@@ -18,22 +18,10 @@ spec:
           - name: rebase-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/rebase.py"]
+            command: ["python", "-m", "scripts.rebase"]
             env:
               - name: LOG_LEVEL
                 value: 'info'
-              - name: ETH_USD_CHAINLINK
-                value: '0x5f4eC3Df9cbd43714FE2740f5E3616155c5b8419'
-              - name: DIGG_TOKEN_ADDRESS
-                value: '0x798D1bE841a82a273720CE31c822C61a67a601C3'
-              - name: DIGG_ORCHESTRATOR_ADDRESS
-                value: '0xbd5d9451e004fc495f105ceab40d6c955e4192ba'
-              - name: DIGG_POLICY_ADDRESS
-                value: '0x327a78D13eA74145cc0C63E6133D516ad3E974c3'
-              - name: UNIV2_DIGG_WBTC_ADDRESS
-                value: '0xe86204c4eddd2f70ee00ead6805f917671f56c52'
-              - name: SUSHI_DIGG_WBTC_ADDRESS
-                value: '0x9a13867048e01c663ce8ce2fe0cdae69ff9f35e3'
               - name: GAS_LIMIT
                 value: '12000000'
           restartPolicy: OnFailure
diff --git a/.deploy/base/service_account.yaml b/.deploy/base/service_account.yaml
@@ -102,4 +102,18 @@ metadata:
   name: eth-earner-keeper
   annotations:
     eks.amazonaws.com/role-arn: arn:aws:iam::342684350154:role/eth-earner-keeper
----
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: ftm-harvester-keeper
+  annotations:
+    eks.amazonaws.com/role-arn: arn:aws:iam::342684350154:role/ftm-harvester-keeper
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: ftm-earner-keeper
+  annotations:
+    eks.amazonaws.com/role-arn: arn:aws:iam::342684350154:role/ftm-earner-keeper
+---
diff --git a/.deploy/base/stability_executor.yaml b/.deploy/base/stability_executor.yaml
@@ -18,7 +18,7 @@ spec:
           - name: stability-executor-keeper
             image: IMAGE_NAME
             imagePullPolicy: IfNotPresent
-            command: ["python", "scripts/stability_execute.py"]
+            command: ["python", "-m", "scripts.stability_execute"]
             env:
               - name: LOG_LEVEL
                 value: 'info'

diff --git a/.github/workflows/deploy_dev.yml b/.github/workflows/deploy_dev.yml
@@ -1,16 +1,14 @@
-name: Pull Request - Build and Deploy to Development Environment
-# Code probably works, but may not.
-# Pushing to development environment allows for validation.
+name: Build and deploy keepers
 
 on:
-  pull_request:
+  push:
     branches:
       - main
 
 env:
   TARGET_ENVIRONMENT: 'dev'
   MANIFEST_RESPOSITORY: 'badger-finance/badger-kube-manifests'
-  IMAGE_NAME: '/badger/${{ github.event.repository.name }}:${{ github.event.pull_request.head.sha }}'
+  IMAGE_NAME: '/badger/${{ github.event.repository.name }}:${{ github.event.after }}'
 
 jobs:
   build:
@@ -32,6 +30,15 @@ jobs:
         run: |
           docker build -t ${{ steps.login-ecr.outputs.registry }}${{ env.IMAGE_NAME }} .
           docker push ${{ steps.login-ecr.outputs.registry }}${{ env.IMAGE_NAME }}
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@master
+        with:
+          image-ref: '${{ steps.login-ecr.outputs.registry }}${{ env.IMAGE_NAME }}'
+          format: 'table'
+          exit-code: '1'
+          ignore-unfixed: true
+          vuln-type: 'os,library'
+          severity: 'CRITICAL,HIGH'
 
   validate_manifest:
     name: Run Manifest Validation

diff --git a/.github/workflows/flake8_run.yml b/.github/workflows/flake8_run.yml
@@ -0,0 +1,26 @@
+name: flake8 Lint
+
+on:
+    push:
+        branches:
+            - development
+            - main
+    pull_request:
+
+
+jobs:
+  flake8-lint:
+    runs-on: ubuntu-latest
+    name: Lint
+    steps:
+      - name: Check out source repository
+        uses: actions/checkout@v2
+      - name: Set up Python environment
+        uses: actions/setup-python@v1
+        with:
+          python-version: "3.9"
+      - name: flake8 Lint
+        uses: py-actions/flake8@v2
+        with:
+          ignore: "E402,W504,W503,F405,F403"
+          max-line-length: "100"
diff --git a/.github/workflows/secrets_check.yml b/.github/workflows/secrets_check.yml
@@ -0,0 +1,12 @@
+name: Secrets Check
+on: [pull_request]
+jobs:
+  detect-secrets:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2
+    - name: detect-secrets
+      uses: reviewdog/action-detect-secrets@master
+      with:
+        github_token: ${{ secrets.GH_TOKEN }}
+        reporter: github-pr-review