diff --git a/.github/workflows/slither.yml b/.github/workflows/slither.yml new file mode 100644 index 0000000..e9d3b8d --- /dev/null +++ b/.github/workflows/slither.yml @@ -0,0 +1,33 @@ +name: Slither Analysis + +on: + push: + branches: [ main ] + pull_request: + branches: [ main ] + +jobs: + analyze: + runs-on: ubuntu-latest + steps: + - name: Checkout Repository + uses: actions/checkout@v3 + with: + submodules: recursive + + # [TODO]: Change "uses" back to crytic/slither-action@v0.1.1 (whatever new version) + # once https://github.com/crytic/slither-action/pull/8 gets merged + - name: Run Slither + uses: crytic/slither-action@dev-install-foundry + # [NOTE]: continue-on-error ignores warnings. We are using all available Detectors for every Severity. + continue-on-error: true + # id: slither + # with: + # sarif: results.sarif + + # [TODO]: Configure repository to allow us using SARIF or wait for the repo to be public. + # This will allow us to get proper visual report of the analysis done by Slither. + # - name: Upload SARIF file + # uses: github/codeql-action/upload-sarif@v1 + # with: + # sarif_file: ${{ steps.slither.outputs.sarif }}