Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@gelatonetwork/automate-sdk
Advanced tools
Automate your smart contracts using Automate SDK
yarn add @gelatonetwork/automate-sdk
or
npm install @gelatonetwork/automate-sdk
import { AutomateSDK } from "@gelatonetwork/automate-sdk";
import { isAutomateSupported } from "@gelatonetwork/automate-sdk";
if (!isAutomateSupported(chainId)) {
console.log(`Automate network not supported (${chainId})`);
return;
}
const automate = new AutomateSDK(chainId, signer);
interface CreateTaskOptions {
name: string; // your task name
// Function to execute
execAddress: string; // address of your target smart contract
execSelector: string; // function selector to execute on your target smart contract
execAbi?: string; // ABI of your target smart contract
// Proxy caller
dedicatedMsgSender: boolean; // task will be called via a dedicated msg.sender which you can whitelist (recommended: true)
// Optional: Pre-defined / static target smart contract inputs
execData?: string; // exec call data
// Optional: Dynamic target smart contract inputs (using a resolver)
resolverAddress?: string; // resolver contract address
resolverData?: string; // resolver call data (encoded data with function selector)
resolverAbi?: string; // your resolver smart contract ABI
// Optional: Single execution task
singleExec?: boolean; // task cancels itself after 1 execution if true.
// Web3 function params
web3FunctionHash?: string; // ipfs hash of your web3 function
web3FunctionArgs?: { [key: string]: unknown }; // web3 function arguments object
// Optional: Payment params
useTreasury?: boolean; // use false if your task is self-paying (default: true)
// Optional: Trigger params, 60s time interval trigger as default if undefined
trigger?:
| {
type: TriggerType.TIME; // time interval trigger
interval: number; // task interval in ms
start?: number; // task start timestamp, task will start immediately if undefined or 0
}
| {
type: TriggerType.CRON; // cron trigger
cron: string; // cron expression
};
| {
type: TriggerType.EVENT; // event trigger
filter: {
address: string; // address to listen events for
topics: Array<Array<string | null>>; // topics to listen for check Ethers.js doc (https://docs.ethers.org/v5/concepts/events/#events--filters)
};
blockConfirmations: number; // number of blocks to confirm event before triggering
};
|
{
type: TriggerType.BLOCK; // block trigger
};
}
const params: CreateTaskOptions = {
name,
execAddress,
execSelector,
interval,
dedicatedMsgSender,
};
const { taskId, tx }: TaskTransaction = await automate.createTask(params);
await tx.wait(); // Optionally wait for tx confirmation
console.log(`Task created, taskId: ${taskId} (tx hash: ${tx.hash})`);
const activeTasks = await automate.getActiveTasks();
activeTasks.forEach((task: Task) => {
console.log(`- ${task.name} (${task.taskId})`);
});
await automate.renameTask(taskId, "Another Gelato name");
const { taskId, tx }: TaskTransaction = await automate.cancelTask(taskId);
await tx.wait(); // Optionally wait for tx confirmation
console.log(`Task canceled, taskId: ${taskId} (tx hash: ${tx.hash})`);
If you need to override gas settings, you can pass an additional Overrides
object to createTask
& cancelTask
methods:
const params: CreateTaskOptions = {
name,
execAddress,
execSelector,
interval,
dedicatedMsgSender,
};
const overrides: Overrides = { gasLimit: 2000000 };
const tx: TaskTransaction = await automate.createTask(params, overrides);
If you enabled dedicatedMsgSender
, your task will be called via a dedicated msg.sender
which you can whitelist on your smart contract for extra security.
If dedicatedMsgSender
is set to false, msg.sender
of the task will be the Automate contract.
To fetch your dedicated msg.sender
:
const { address } = await automate.getDedicatedMsgSender();
console.log("Dedicated msg.sender: ", address);
Check out our tutorial repository automate-sdk-hello-world for more in-depth examples.
FAQs
SDK to create Automate tasks
The npm package @gelatonetwork/automate-sdk receives a total of 85 weekly downloads. As such, @gelatonetwork/automate-sdk popularity was classified as not popular.
We found that @gelatonetwork/automate-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.