Merge latest develop branch into QA

.env.demo

@@ -145,4 +145,36 @@ APP=api
 #Schema-file-server
 APP_PORT=4000
 JWT_TOKEN_SECRET=
-ISSUER=Credebl
+ISSUER=Credebl
+
+#Signoz and OTel
+IS_ENABLE_OTEL=false
+OTEL_SERVICE_NAME='CREDEBL-PLATFORM-SERVICE'
+OTEL_SERVICE_VERSION='1.0.0'
+OTEL_TRACES_OTLP_ENDPOINT='http://localhost:4318/v1/traces'
+OTEL_LOGS_OTLP_ENDPOINT='http://localhost:4318/v1/logs'
+OTEL_HEADERS_KEY=88ca6b1XXXXXXXXXXXXXXXXXXXXXXXXXXX
+OTEL_LOGGER_NAME='credebl-platform-logger'
+HOSTNAME='localhost'
+
+# SSO
+# To add more clients, simply add comma separated values of client names
+SUPPORTED_SSO_CLIENTS=CREDEBL
+
+# To add more client add the following variables for each additional client.
+# Replace the `CLIENT-NAME` with the appropriate client name as added in `SUPPORTED_SSO_CLIENTS`
+# Default client will not need the following details
+
+# CLIENT-NAME_CLIENT_ALIAS=VERIFIER
+    # # Domain represents the redirection url once the client logs-in
+    # # TODO: Can be taken from keycloak instead
+# CLIENT-NAME_DOMAIN=https://VERIFIER-domain.com
+    # # Encrypted client credentials using the `CRYPTO_PRIVATE_KEY`
+# CLIENT-NAME_KEYCLOAK_MANAGEMENT_CLIENT_ID=
+# CLIENT-NAME_KEYCLOAK_MANAGEMENT_CLIENT_SECRET=
+
+# Sample values:
+# VERIFIER_CLIENT_ALIAS=VERIFIER
+# VERIFIER_DOMAIN=https://VERIFIER-domain.com
+# VERIFIER_KEYCLOAK_MANAGEMENT_CLIENT_ID=encryptedKeyCloakClientId
+# VERIFIER_KEYCLOAK_MANAGEMENT_CLIENT_SECRET=encryptedKeyCloakClientSecret

.env.sample

@@ -166,4 +166,35 @@ ELK_PASSWORD=xxxxxx // ELK user password
 
 ORGANIZATION=credebl
 CONTEXT=platform
-APP=api
+APP=api
+
+IS_ENABLE_OTEL=false                             # Flag to enable/disable OpenTelemetry (true = enabled, false = disabled)
+OTEL_SERVICE_NAME='CREDEBL-PLATFORM-SERVICE'     # Logical name of the service shown in observability tools (e.g., SigNoz)
+OTEL_SERVICE_VERSION='1.0.0'                     # Version of the service; helps in tracking changes over time
+OTEL_TRACES_OTLP_ENDPOINT='http://localhost:4318/v1/traces'  # Endpoint where traces are exported (OTLP over HTTP)
+OTEL_LOGS_OTLP_ENDPOINT='http://localhost:4318/v1/logs'      # Endpoint where logs are exported (OTLP over HTTP)
+OTEL_HEADERS_KEY=88ca6b1XXXXXXXXXXXXXXXXXXXXXXXXXXX          # API key or token used for authenticating with the OTel collector (e.g., SigNoz)
+OTEL_LOGGER_NAME='credebl-platform-logger'       # Name of the logger used for OpenTelemetry log records
+HOSTNAME='localhost'                             # Hostname or unique identifier for the service instance
+
+# SSO
+# To add more clients, simply add comma separated values of client names
+SUPPORTED_SSO_CLIENTS=CREDEBL
+
+# To add more client add the following variables for each additional client.
+# Replace the `CLIENT-NAME` with the appropriate client name as added in `SUPPORTED_SSO_CLIENTS`
+# Default client will not need the following details
+
+# CLIENT-NAME_CLIENT_ALIAS=MYAPP
+    # # Domain represents the redirection url once the client logs-in
+    # # TODO: Can be taken from keycloak instead
+# CLIENT-NAME_DOMAIN=https://myapp.com
+    # # Encrypted client credentials using the `CRYPTO_PRIVATE_KEY`
+# CLIENT-NAME_KEYCLOAK_MANAGEMENT_CLIENT_ID=
+# CLIENT-NAME_KEYCLOAK_MANAGEMENT_CLIENT_SECRET
+
+# Sample values:
+# VERIFIER_CLIENT_ALIAS=VERIFIER
+# VERIFIER_DOMAIN=https://VERIFIER-domain.com
+# VERIFIER_KEYCLOAK_MANAGEMENT_CLIENT_ID=encryptedKeyCloakClientId
+# VERIFIER_KEYCLOAK_MANAGEMENT_CLIENT_SECRET=encryptedKeyCloakClientSecret

.github/workflows/scorecard.yml

@@ -59,9 +59,9 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@97a0fba1372883ab732affbe8f94b823f91727db # v3.pre.node20
+        uses: actions/upload-artifact@v4
         with:
-          name: SARIF file
+          name: sarif-file
           path: results.sarif
           retention-days: 5