slither.yml

name: Slither

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - "**"

jobs:
  slither-analyze:
    name: Slither Analyze
    runs-on: ubuntu-latest
    permissions:
      actions: read
      contents: read
      security-events: write
    steps:
      - name: Checkout repository and submodules
        uses: actions/checkout@v4
        with:
          submodules: recursive

      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: 3.8

      - name: Install Slither
        run: |
          pip install slither-analyzer

      - name: Install Foundry
        run: ./scripts/install_foundry.sh

      - name: Run Slither
        run: |
          export PATH=$PATH:$HOME/.foundry/bin
          cd contracts
          slither ./ --fail-none --sarif ./results.sarif

      - name: Upload SARIF file
        uses: github/codeql-action/upload-sarif@v3
        with:
          sarif_file: contracts/results.sarif