@mojaloop/bulk-api-adapter 17.1.6

package/.circleci/config.yml

@@ -0,0 +1,11 @@
+version: 2.1
+setup: true
+orbs:
+  build: mojaloop/build@1.0.55
+workflows:
+  setup:
+    jobs:
+      - build/workflow:
+          filters:
+            tags:
+              only: /v\d+(\.\d+){2}(-[a-zA-Z-][0-9a-zA-Z-]*\.\d+)?/

package/.dockerignore

@@ -0,0 +1,17 @@
+deploy/
+coverage/
+node_modules/
+.dockerignore
+.editorconfig
+.git/
+.gitignore
+.istanbul.yml
+circle.yml
+docker-compose.circle.yml
+docker-compose.dev.yml
+docker-compose.functional.yml
+docker-compose.yml
+Dockerfile
+LICENSE
+README.md
+sonar-project.properties

package/.editorconfig

@@ -0,0 +1,10 @@
+root = true
+
+[*]
+indent_style = space
+indent_size = 2
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[*.md]
+trim_trailing_whitespace = false

package/.gitattributes

@@ -0,0 +1,2 @@
+# Auto detect text files and perform LF normalization
+* text=auto

package/.ncurc.yaml

@@ -0,0 +1,5 @@
+## Add a TODO comment indicating the reason for each rejected dependency upgrade added to this list, and what should be done to resolve it (i.e. handle it through a story, etc).
+reject: [
+  # Issues created to resolve this: https://github.com/mojaloop/project/issues/3260
+  "@mojaloop/central-services-shared"
+]

package/.nvmrc

@@ -0,0 +1 @@
+18.20.4

package/.nycrc.yml

@@ -0,0 +1,20 @@
+temp-directory: "./.nyc_output"
+check-coverage: true
+per-file: true
+lines: 0
+statements: 0
+functions: 0
+branches: 0
+all: true
+include: [
+  "src/**/*.js"
+]
+reporter: [
+  "lcov",
+  "text-summary"
+]
+exclude: [
+  "**/node_modules/**",
+  '**/migrations/**',
+  '**/docs/**'
+]

package/.versionrc

@@ -0,0 +1,15 @@
+{
+  "types": [
+    {"type": "feat", "section": "Features"},
+    {"type": "fix", "section": "Bug Fixes"},
+    {"type": "docs", "section": "Documentation"},
+    {"type": "style", "section": "Styling"},
+    {"type": "refactor", "section": "Refactors"},
+    {"type": "perf", "section": "Performance"},
+    {"type": "test", "section": "Tests"},
+    {"type": "build", "section": "Build System"},
+    {"type": "ci", "section": "CI"},
+    {"type": "chore", "section": "Chore"},
+    {"type": "revert", "section": "Reverts"}
+  ]
+}

package/API.md

@@ -0,0 +1,2 @@
+# BULK API ADAPTER API
+***

package/CHANGELOG.md

@@ -0,0 +1,257 @@
+# Changelog
+
+All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
+
+### [17.1.6](https://github.com/mojaloop/bulk-api-adapter/compare/v17.1.5...v17.1.6) (2025-02-20)
+
+
+### Chore
+
+* update orb version ([#121](https://github.com/mojaloop/bulk-api-adapter/issues/121)) ([8003ec3](https://github.com/mojaloop/bulk-api-adapter/commit/8003ec3968fc7281531a888d058adea7f332267a))
+
+### [17.1.5](https://github.com/mojaloop/bulk-api-adapter/compare/v17.1.4...v17.1.5) (2025-02-20)
+
+
+### Bug Fixes
+
+* added xxx and xts test currency ([#120](https://github.com/mojaloop/bulk-api-adapter/issues/120)) ([da71844](https://github.com/mojaloop/bulk-api-adapter/commit/da718442c7c2b6d3325ccdfc0833c8df7a242d31))
+
+### [17.1.4](https://github.com/mojaloop/bulk-api-adapter/compare/v17.1.3...v17.1.4) (2025-01-28)
+
+
+### Chore
+
+* maintenance updates ([#119](https://github.com/mojaloop/bulk-api-adapter/issues/119)) ([6c15a70](https://github.com/mojaloop/bulk-api-adapter/commit/6c15a7039a7156647374fb51e55ccac8b0fac269))
+
+### [17.1.3](https://github.com/mojaloop/bulk-api-adapter/compare/v17.1.2...v17.1.3) (2025-01-17)
+
+
+### Chore
+
+* replace request with axios ([#112](https://github.com/mojaloop/bulk-api-adapter/issues/112)) ([bb2b689](https://github.com/mojaloop/bulk-api-adapter/commit/bb2b689ee90849008ab1ea1de445d5f4c555a2d6))
+
+### [17.1.2](https://github.com/mojaloop/bulk-api-adapter/compare/v17.1.1...v17.1.2) (2025-01-15)
+
+
+### Chore
+
+* **deps:** bump axios and @mojaloop/central-services-shared ([#113](https://github.com/mojaloop/bulk-api-adapter/issues/113)) ([d7456ad](https://github.com/mojaloop/bulk-api-adapter/commit/d7456ad9b360a710d3539bcad71cd3529d4a2446))
+* **deps:** bump cookie and express ([#114](https://github.com/mojaloop/bulk-api-adapter/issues/114)) ([252b6a6](https://github.com/mojaloop/bulk-api-adapter/commit/252b6a60bbfa6d4337c1d69bf30abd49418c3cb6))
+* fix vulnerabilities, update deps ([#117](https://github.com/mojaloop/bulk-api-adapter/issues/117)) ([f6ebe09](https://github.com/mojaloop/bulk-api-adapter/commit/f6ebe0972bbe6fde1f83a12e9d0446d8fc7efef5))
+
+### [17.1.1](https://github.com/mojaloop/bulk-api-adapter/compare/v17.1.0...v17.1.1) (2024-09-18)
+
+
+### Bug Fixes
+
+* fix catbox integration ([#110](https://github.com/mojaloop/bulk-api-adapter/issues/110)) ([3896a03](https://github.com/mojaloop/bulk-api-adapter/commit/3896a038aecd96988741f519683a71fee747a7f0))
+
+## [17.1.0](https://github.com/mojaloop/bulk-api-adapter/compare/v17.0.2...v17.1.0) (2024-06-26)
+
+
+### Features
+
+* **csi-164:** parameterize switch id ([#109](https://github.com/mojaloop/bulk-api-adapter/issues/109)) ([17a63f6](https://github.com/mojaloop/bulk-api-adapter/commit/17a63f6f98aef48bec72925ff48ed96d7c426a38))
+
+### [17.0.2](https://github.com/mojaloop/bulk-api-adapter/compare/v17.0.1...v17.0.2) (2024-06-14)
+
+
+### Chore
+
+* updates to tough cookie dependency ([#108](https://github.com/mojaloop/bulk-api-adapter/issues/108)) ([2a5de21](https://github.com/mojaloop/bulk-api-adapter/commit/2a5de2179f41ad5703a7e9d94a31974189b472ee))
+
+### [17.0.1](https://github.com/mojaloop/bulk-api-adapter/compare/v17.0.0...v17.0.1) (2024-06-12)
+
+
+### Chore
+
+* dependency updates and minor maintenance ([#107](https://github.com/mojaloop/bulk-api-adapter/issues/107)) ([b9ed50a](https://github.com/mojaloop/bulk-api-adapter/commit/b9ed50a38b8ee344803c638457063512c528361c))
+* **deps:** bump express from 4.18.2 to 4.19.2 ([#104](https://github.com/mojaloop/bulk-api-adapter/issues/104)) ([115e80d](https://github.com/mojaloop/bulk-api-adapter/commit/115e80d95c7325683906a35c87ed65b07bb295be))
+* **deps:** bump follow-redirects from 1.15.2 to 1.15.6 ([#105](https://github.com/mojaloop/bulk-api-adapter/issues/105)) ([8b7a834](https://github.com/mojaloop/bulk-api-adapter/commit/8b7a834c8a9385d6b544a033ac022a27f815ff84))
+
+## [17.0.0](https://github.com/mojaloop/bulk-api-adapter/compare/v16.0.1...v17.0.0) (2023-11-06)
+
+
+### Bug Fixes
+
+* **mojaloop/#3615:** update dependencies ([#103](https://github.com/mojaloop/bulk-api-adapter/issues/103)) ([326dbd0](https://github.com/mojaloop/bulk-api-adapter/commit/326dbd07744e555d7fe1d06d3d899cd1e9c10abe)), closes [mojaloop/#3615](https://github.com/mojaloop/project/issues/3615)
+
+### [16.0.1](https://github.com/mojaloop/bulk-api-adapter/compare/v16.0.0...v16.0.1) (2023-10-20)
+
+
+### Bug Fixes
+
+* **mojaloop/#3589:** fix mongoose 'promiseLibrary' option bug ([#102](https://github.com/mojaloop/bulk-api-adapter/issues/102)) ([b770c0a](https://github.com/mojaloop/bulk-api-adapter/commit/b770c0ab9a92effbb5017d56bce9ee76b4d1fd29)), closes [#3589](https://github.com/mojaloop/bulk-api-adapter/issues/3589)
+
+## [16.0.0](https://github.com/mojaloop/bulk-api-adapter/compare/v15.0.4...v16.0.0) (2023-09-14)
+
+
+### CI
+
+* fix nodejs version for image and license scans ([#100](https://github.com/mojaloop/bulk-api-adapter/issues/100)) ([0389050](https://github.com/mojaloop/bulk-api-adapter/commit/038905006163807f99525f6ca2d7c3e68b10eec5))
+
+### [15.0.4](https://github.com/mojaloop/bulk-api-adapter/compare/v15.0.3...v15.0.4) (2023-09-12)
+
+
+### Chore
+
+* **mojaloop/#3447:** nodejs upgrade ([#99](https://github.com/mojaloop/bulk-api-adapter/issues/99)) ([b8de756](https://github.com/mojaloop/bulk-api-adapter/commit/b8de756651eb9975f965e817481c29b3aac32915)), closes [mojaloop/#3447](https://github.com/mojaloop/project/issues/3447)
+
+### [15.0.3](https://github.com/mojaloop/bulk-api-adapter/compare/v15.0.2...v15.0.3) (2023-03-30)
+
+
+### Bug Fixes
+
+* **mojaloop/#3260:** incoming requests are failing with argument stream failure ([#98](https://github.com/mojaloop/bulk-api-adapter/issues/98) ([64960c5](https://github.com/mojaloop/bulk-api-adapter/commit/64960c52e1477b08becd01209048fccd491a9437)), closes [mojaloop/#3260](https://github.com/mojaloop/project/issues/3260)
+
+### [15.0.2](https://github.com/mojaloop/bulk-api-adapter/compare/v15.0.1...v15.0.2) (2023-03-29)
+
+
+### Bug Fixes
+
+* removed connection string for mongodb being logged to log ([#97](https://github.com/mojaloop/bulk-api-adapter/issues/97)) ([839f515](https://github.com/mojaloop/bulk-api-adapter/commit/839f515648081d9e8cb99c94cc89300d3e6f8284))
+
+### [15.0.1](https://github.com/mojaloop/bulk-api-adapter/compare/v15.0.0...v15.0.1) (2023-03-29)
+
+
+### Bug Fixes
+
+* **mojaloop/#3255:** mongoDB connection uRI failing when auth details contain special chars ([#96](https://github.com/mojaloop/bulk-api-adapter/issues/96)) ([5ceb464](https://github.com/mojaloop/bulk-api-adapter/commit/5ceb464ce7f1f8e8625087097955d9ae3a3a2b1d)), closes [mojaloop/#3255](https://github.com/mojaloop/project/issues/3255)
+
+## [15.0.0](https://github.com/mojaloop/bulk-api-adapter/compare/v14.2.0...v15.0.0) (2023-02-22)
+
+
+### ⚠ BREAKING CHANGES
+
+* **mojaloop/#3131:** seperate mongo uri config (#95)
+
+### Features
+
+* **mojaloop/#3131:** seperate mongo uri config ([#95](https://github.com/mojaloop/bulk-api-adapter/issues/95)) ([5ae3f18](https://github.com/mojaloop/bulk-api-adapter/commit/5ae3f18a362950ac514613f08dfac6ec84e29a17)), closes [mojaloop/#3131](https://github.com/mojaloop/project/issues/3131)
+
+## [14.2.0](https://github.com/mojaloop/bulk-api-adapter/compare/v14.1.1...v14.2.0) (2022-11-11)
+
+
+### Features
+
+* **mojaloop/2867:** switch as fspiop source ([#90](https://github.com/mojaloop/bulk-api-adapter/issues/90)) ([af5680d](https://github.com/mojaloop/bulk-api-adapter/commit/af5680d9db79ffebc43842f100d1dc261501a9c8))
+
+### [14.1.1](https://github.com/mojaloop/bulk-api-adapter/compare/v14.1.0...v14.1.1) (2022-08-18)
+
+
+### Bug Fixes
+
+* **mojaloop/#2863:** fix put callback http code ([#89](https://github.com/mojaloop/bulk-api-adapter/issues/89)) ([c6699ad](https://github.com/mojaloop/bulk-api-adapter/commit/c6699ad695e0a4627fd76d4288b9ef6e64cd2130))
+
+## [14.1.0](https://github.com/mojaloop/bulk-api-adapter/compare/v14.0.2...v14.1.0) (2022-08-12)
+
+
+### Features
+
+* **mojaloop/#2796:** duplicate transaction not getting callback for post /bulkTransfers ([#86](https://github.com/mojaloop/bulk-api-adapter/issues/86)) ([fcc7799](https://github.com/mojaloop/bulk-api-adapter/commit/fcc7799368c54adf54c729627ce1e424cbd2df16)), closes [mojaloop/#2796](https://github.com/mojaloop/project/issues/2796)
+
+### [14.0.2](https://github.com/mojaloop/bulk-api-adapter/compare/v14.0.1...v14.0.2) (2022-08-11)
+
+
+### Bug Fixes
+
+* remove buiness logic from bulk-api-adapter ([#87](https://github.com/mojaloop/bulk-api-adapter/issues/87)) ([4fac6a8](https://github.com/mojaloop/bulk-api-adapter/commit/4fac6a8662336d1fc911156dff8e5aeadea76d6d))
+
+### [14.0.1](https://github.com/mojaloop/bulk-api-adapter/compare/v14.0.0...v14.0.1) (2022-08-01)
+
+
+### Bug Fixes
+
+* update bulkPrepare kafka message to use headers ([#83](https://github.com/mojaloop/bulk-api-adapter/issues/83)) ([4c39f3d](https://github.com/mojaloop/bulk-api-adapter/commit/4c39f3dfe9b84d6802e024eca77d35f0f1f2280d))
+
+## [14.0.0](https://github.com/mojaloop/bulk-api-adapter/compare/v13.0.1...v14.0.0) (2022-07-07)
+
+
+### ⚠ BREAKING CHANGES
+
+* upgrade ci, image, packages, audit (#82)
+
+### Features
+
+* upgrade ci, image, packages, audit ([#82](https://github.com/mojaloop/bulk-api-adapter/issues/82)) ([a7c67bd](https://github.com/mojaloop/bulk-api-adapter/commit/a7c67bdae473f85ff4523a4a450b1634fc3fb784))
+
+### [13.0.1](https://github.com/mojaloop/bulk-api-adapter/compare/v13.0.0...v13.0.1) (2022-03-07)
+
+
+### Bug Fixes
+
+* core-services support for non-breaking backward api compatibility ([#77](https://github.com/mojaloop/bulk-api-adapter/issues/77)) ([d3275b0](https://github.com/mojaloop/bulk-api-adapter/commit/d3275b0c82b18fb48de3e32e8d2e2c0a2a551aa1)), closes [#2704](https://github.com/mojaloop/bulk-api-adapter/issues/2704)
+
+## [13.0.0](https://github.com/mojaloop/bulk-api-adapter/compare/v12.1.0...v13.0.0) (2022-03-04)
+
+
+### ⚠ BREAKING CHANGES
+
+* **mojaloop/#2704:** - Config PROTOCOL_VERSIONS.CONTENT has now been modified to support backward compatibility for minor versions (i.e. v1.0 & 1.1) as follows:
+
+> ```
+>   "PROTOCOL_VERSIONS": {
+>     "CONTENT": "1.1", <-- used when generating messages from the "SWITCH", and validate incoming FSPIOP API requests/callbacks CONTENT-TYPE headers
+>     "ACCEPT": {
+>       "DEFAULT": "1", <-- used when generating messages from the "SWITCH"
+>       "VALIDATELIST": [ <-- used to validate incoming FSPIOP API requests/callbacks ACCEPT headers
+>         "1",
+>         "1.0",
+>         "1.1"
+>       ]
+>     }
+>   },
+> ```
+> 
+> to be consistent with the ACCEPT structure as follows:
+> 
+> ```
+>   "PROTOCOL_VERSIONS": {
+>     "CONTENT": {
+>       "DEFAULT": "1.1", <-- used when generating messages from the "SWITCH"
+>       "VALIDATELIST": [ <-- used to validate incoming FSPIOP API requests/callbacks CONTENT-TYPE headers
+>         "1.1",
+>         "1.0"
+>       ]
+>     },
+>     "ACCEPT": {
+>       "DEFAULT": "1", <-- used when generating messages from the "SWITCH"
+>       "VALIDATELIST": [ <-- used to validate incoming FSPIOP API requests/callbacks ACCEPT headers
+>         "1",
+>         "1.0",
+>         "1.1"
+>       ]
+>     }
+>   },
+> ```
+
+### Features
+
+* **mojaloop/#2704:** core-services support for non-breaking backward api compatibility ([#74](https://github.com/mojaloop/bulk-api-adapter/issues/74)) ([62afc4e](https://github.com/mojaloop/bulk-api-adapter/commit/62afc4e9637599474f8761617b084a3da9ca4398)), closes [mojaloop/#2704](https://github.com/mojaloop/project/issues/2704)
+
+## [12.1.0](https://github.com/mojaloop/bulk-api-adapter/compare/v12.0.2...v12.1.0) (2021-12-14)
+
+
+### Features
+
+* **mojaloop/#2608:** injected resource versions config for outbound requests ([#70](https://github.com/mojaloop/bulk-api-adapter/issues/70)) ([a2c6a91](https://github.com/mojaloop/bulk-api-adapter/commit/a2c6a918799bb833ede26924b3598ffa954023ff)), closes [mojaloop/#2608](https://github.com/mojaloop/project/issues/2608)
+
+### [12.0.2](https://github.com/mojaloop/bulk-api-adapter/compare/v12.0.1...v12.0.2) (2021-11-22)
+
+
+### Bug Fixes
+
+* release v13.1.0 ([#69](https://github.com/mojaloop/bulk-api-adapter/issues/69)) ([5464a62](https://github.com/mojaloop/bulk-api-adapter/commit/5464a62348782ae3b75997b1fa8dfd4bcdb10cef)), closes [mojaloop/#2584](https://github.com/mojaloop/project/issues/2584)
+
+### [12.0.1](https://github.com/mojaloop/bulk-api-adapter/compare/v12.0.0...v12.0.1) (2021-11-18)
+
+## [12.0.0](https://github.com/mojaloop/bulk-api-adapter/compare/v11.1.4...v12.0.0) (2021-11-17)
+
+
+### ⚠ BREAKING CHANGES
+
+* **mojaloop/#2538:** Forcing a major version change for awareness of the config changes. The `LIB_RESOURCE_VERSIONS` env var is now deprecated, and this is now also controlled by the PROTOCOL_VERSIONS config in the default.json. This has been done for consistency between all API services going forward and unifies the config for both inbound and outbound Protocol API validation/transformation features.
+
+### Bug Fixes
+
+* **mojaloop/#2538:** fspiop api version negotiation not handled ([#67](https://github.com/mojaloop/bulk-api-adapter/issues/67)) ([416293a](https://github.com/mojaloop/bulk-api-adapter/commit/416293af3bded50986437a5a91797c65ce2b9c38)), closes [mojaloop/#2538](https://github.com/mojaloop/project/issues/2538)

package/CODEOWNERS

@@ -0,0 +1,38 @@
+# This is a comment.
+# Each line is a file pattern followed by one or more owners.
+
+## These owners will be the default owners for everything in
+## the repo. Unless a later match takes precedence,
+## @global-owner1 and @global-owner2 will be requested for
+## review when someone opens a pull request.
+#*       @global-owner1 @global-owner2
+* @elnyry-sam-k @vijayg10 @kleyow @oderayi @bushjames @geka-evk @shashi165 @gibaros
+
+## Order is important; the last matching pattern takes the most
+## precedence. When someone opens a pull request that only
+## modifies JS files, only @js-owner and not the global
+## owner(s) will be requested for a review.
+# *.js    @js-owner
+
+## You can also use email addresses if you prefer. They'll be
+## used to look up users just like we do for commit author
+## emails.
+#*.go docs@example.com
+
+# In this example, @doctocat owns any files in the build/logs
+# directory at the root of the repository and any of its
+# subdirectories.
+# /build/logs/ @doctocat
+
+## The `docs/*` pattern will match files like
+## `docs/getting-started.md` but not further nested files like
+## `docs/build-app/troubleshooting.md`.
+# docs/*  docs@example.com
+
+## In this example, @octocat owns any file in an apps directory
+## anywhere in your repository.
+#apps/ @octocat
+
+## In this example, @doctocat owns any file in the `/docs`
+## directory in the root of your repository.
+#/docs/ @doctocat

package/Dockerfile

@@ -0,0 +1,44 @@
+# Arguments
+ARG NODE_VERSION=lts-alpine
+
+# NOTE: Ensure you set NODE_VERSION Build Argument as follows...
+#
+#  export NODE_VERSION="$(cat .nvmrc)-alpine" \
+#  docker build \
+#    --build-arg NODE_VERSION=$NODE_VERSION \
+#    -t mojaloop/sdk-scheme-adapter:local \
+#    . \
+#
+
+# Build Image
+FROM node:${NODE_VERSION} as builder
+
+USER root
+
+WORKDIR /opt/app/
+
+RUN apk add --no-cache -t build-dependencies git make gcc g++ python3 py3-setuptools libtool autoconf automake bash \
+    && cd $(npm root -g)/npm
+
+COPY package.json package-lock.json* /opt/app/
+RUN npm ci
+
+COPY src /opt/app/src
+COPY config /opt/app/config
+
+FROM node:${NODE_VERSION}
+WORKDIR /opt/app/
+
+# Create empty log file & link stdout to the application log file
+RUN mkdir ./logs && touch ./logs/combined.log
+RUN ln -sf /dev/stdout ./logs/combined.log
+
+# Create a non-root user: app-user
+RUN adduser -D app-user
+USER app-user
+
+COPY --chown=app-user --from=builder /opt/app/ .
+RUN npm prune --production
+
+EXPOSE 3000
+CMD ["node src/api/index.js"]

package/LICENSE.md

@@ -0,0 +1,10 @@
+# LICENSE
+
+Copyright © 2020-2025 Mojaloop Foundation
+
+The Mojaloop files are made available by the Mojaloop Foundation under the Apache License, Version 2.0
+(the "License") and you may not use these files except in compliance with the [License](http://www.apache.org/licenses/LICENSE-2.0). 
+
+You may obtain a copy of the License at [http://www.apache.org/licenses/LICENSE-2.0](http://www.apache.org/licenses/LICENSE-2.0)
+
+Unless required by applicable law or agreed to in writing, the Mojaloop files are distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the [License](http://www.apache.org/licenses/LICENSE-2.0).

package/README.md

@@ -0,0 +1,40 @@
+# bulk-api-adapter
+[![Git Commit](https://img.shields.io/github/last-commit/mojaloop/bulk-api-adapter.svg?style=flat)](https://github.com/mojaloop/bulk-api-adapter/commits/main)
+[![Git Releases](https://img.shields.io/github/release/mojaloop/bulk-api-adapter.svg?style=flat)](https://github.com/mojaloop/bulk-api-adapter/releases)
+[![Docker pulls](https://img.shields.io/docker/pulls/mojaloop/bulk-api-adapter.svg?style=flat)](https://hub.docker.com/r/mojaloop/bulk-api-adapter)
+[![CircleCI](https://circleci.com/gh/mojaloop/bulk-api-adapter.svg?style=svg)](https://app.circleci.com/pipelines/github/mojaloop/bulk-api-adapter)
+
+Bulk Transfers API and notifications.
+
+## API Definition
+
+Swagger API [location](./src/interface/swagger.yaml)
+
+## Auditing Dependencies
+
+We use `audit-ci` along with `npm audit` to check dependencies for node vulnerabilities, and keep track of resolved dependencies with an `audit-ci.jsonc` file.
+
+To start a new resolution process, run:
+
+```bash
+npm run audit:fix
+```
+
+You can then check to see if the CI will pass based on the current dependencies with:
+
+```bash
+npm run audit:check
+```
+
+The [audit-ci.jsonc](./audit-ci.jsonc) contains any audit-exceptions that cannot be fixed to ensure that CircleCI will build correctly.
+
+## Container Scans
+
+As part of our CI/CD process, we use anchore-cli to scan our built docker container for vulnerabilities upon release.
+
+If you find your release builds are failing, refer to the [container scanning](https://github.com/mojaloop/ci-config#container-scanning) in our shared Mojaloop CI config repo. There is a good chance you simply need to update the `mojaloop-policy-generator.js` file and re-run the circleci workflow.
+
+For more information on anchore and anchore-cli, refer to:
+- [Anchore CLI](https://github.com/anchore/anchore-cli)
+- [Circle Orb Registry](https://circleci.com/orbs/registry/orb/anchore/anchore-engine)
+

package/audit-ci.jsonc

@@ -0,0 +1,9 @@
+{
+  "$schema": "https://github.com/IBM/audit-ci/raw/main/docs/schema.json",
+  // audit-ci supports reading JSON, JSONC, and JSON5 config files.
+  // Only use one of ["low": true, "moderate": true, "high": true, "critical": true]
+  "moderate": true,
+  "allowlist": [ // NOTE: Please add as much information as possible to any items added to the allowList
+    // Currently no fixes available for the following
+  ]
+}

package/config/default.json

@@ -0,0 +1,164 @@
+{
+  "HUB_PARTICIPANT": {
+    "ID": 1,
+    "NAME": "Hub"
+  },
+  "PORT": 3003,
+  "HOSTNAME": "http://bulk-api-adapter",
+  "PROTOCOL_VERSIONS": {
+    "CONTENT": {
+      "DEFAULT": "1.1",
+      "VALIDATELIST": [
+        "1.1",
+        "1.0"
+      ]
+    },
+    "ACCEPT": {
+      "DEFAULT": "1",
+      "VALIDATELIST": [
+        "1",
+        "1.0",
+        "1.1"
+      ]
+    }
+  },
+  "ENDPOINT_SOURCE_URL": "http://localhost:3001/participants/{{fsp}}/endpoints",
+  "ENDPOINT_HEALTH_URL": "http://localhost:3001/health",
+  "ENDPOINT_CACHE_CONFIG": {
+    "expiresIn": 180000,
+    "generateTimeout": 30000
+  },
+  "MONGODB": {
+    "HOST": "localhost",
+    "PORT": 27017,
+    "USER": "",
+    "PASSWORD": "",
+    "DATABASE": "mlos"
+  },
+  "ENDPOINT_SECURITY":{
+    "TLS": {
+      "rejectUnauthorized": true
+    },
+    "JWS": {
+      "JWS_SIGN": false,
+      "JWS_SIGNING_KEY_PATH": "secrets/jwsSigningKey.key"
+    }
+  },
+  "MAX_FULFIL_TIMEOUT_DURATION_SECONDS": 300,
+  "AMOUNT": {
+    "PRECISION": 10,
+    "SCALE": 2
+  },
+  "HANDLERS": {
+    "DISABLED": false,
+    "API": {
+      "DISABLED": false
+    }
+  },
+  "INSTRUMENTATION": {
+    "METRICS": {
+      "DISABLED": false,
+      "config": {
+        "timeout": 5000,
+        "prefix": "moja_bl_",
+        "defaultLabels": {
+          "serviceName": "bulk-service"
+        }
+      }
+    }
+  },
+  "KAFKA": {
+    "TOPIC_TEMPLATES": {
+      "GENERAL_TOPIC_TEMPLATE": {
+        "TEMPLATE": "topic-{{functionality}}-{{action}}",
+        "REGEX": "topic-(.*)-(.*)"
+      }
+    },
+    "CONSUMER": {
+      "NOTIFICATION": {
+        "EVENT": {
+          "config": {
+            "options": {
+              "mode": 2,
+              "batchSize": 1,
+              "pollFrequency": 10,
+              "recursiveTimeout": 100,
+              "messageCharset": "utf8",
+              "messageAsJSON": true,
+              "sync": true,
+              "consumeTimeout": 1000
+            },
+            "rdkafkaConf": {
+              "client.id": "bulk-con-notification-event",
+              "group.id": "bulk-group-notification-event",
+              "metadata.broker.list": "localhost:9092",
+              "allow.auto.create.topics": true,
+              "socket.keepalive.enable": true
+            },
+            "topicConf": {
+              "auto.offset.reset": "earliest"
+            }
+          }
+        }
+      }
+    },
+    "PRODUCER": {
+      "BULK": {
+        "PREPARE": {
+          "config": {
+            "options": {
+              "messageCharset": "utf8"
+            },
+            "rdkafkaConf": {
+              "metadata.broker.list": "localhost:9092",
+              "client.id": "bulk-prod-bulk-prepare",
+              "event_cb": true,
+              "dr_cb": true,
+              "socket.keepalive.enable": true,
+              "queue.buffering.max.messages": 10000000
+            },
+            "topicConf": {
+              "request.required.acks": "all"
+            }
+          }
+        },
+        "FULFIL": {
+          "config": {
+            "options": {
+              "messageCharset": "utf8"
+            },
+            "rdkafkaConf": {
+              "metadata.broker.list": "localhost:9092",
+              "client.id": "bulk-prod-bulk-fulfil",
+              "event_cb": true,
+              "dr_cb": true,
+              "socket.keepalive.enable": true,
+              "queue.buffering.max.messages": 10000000
+            },
+            "topicConf": {
+              "request.required.acks": "all"
+            }
+          }
+        },
+        "GET": {
+          "config": {
+            "options": {
+              "messageCharset": "utf8"
+            },
+            "rdkafkaConf": {
+              "metadata.broker.list": "localhost:9092",
+              "client.id": "bulk-prod-bulk-get",
+              "event_cb": true,
+              "dr_cb": true,
+              "socket.keepalive.enable": true,
+              "queue.buffering.max.messages": 10000000
+            },
+            "topicConf": {
+              "request.required.acks": "all"
+            }
+          }
+        }
+      }
+    }
+  }
+}