Bump @openzeppelin/contracts from 4.4.2 to 4.8.3 in /contracts #1649
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: OUSD | |
| on: | |
| pull_request: | |
| types: [opened, reopened] | |
| push: | |
| workflow_dispatch: | |
| concurrency: | |
| cancel-in-progress: true | |
| group: ${{ github.ref_name }} | |
| jobs: | |
| contracts-lint: | |
| name: "Contracts Linter" | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Use Node.js | |
| uses: actions/setup-node@v2 | |
| with: | |
| node-version: "14.x" | |
| cache: "yarn" | |
| cache-dependency-path: contracts/yarn.lock | |
| - run: yarn install --frozen-lockfile | |
| working-directory: ./contracts | |
| - run: yarn run lint | |
| working-directory: ./contracts | |
| - run: yarn prettier:check | |
| working-directory: ./contracts | |
| contracts-test: | |
| name: "Contracts Unit Tests" | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Use Node.js | |
| uses: actions/setup-node@v2 | |
| with: | |
| node-version: "14.x" | |
| cache: "yarn" | |
| cache-dependency-path: contracts/yarn.lock | |
| - run: yarn install --frozen-lockfile | |
| working-directory: ./contracts | |
| - run: yarn run test | |
| working-directory: ./contracts | |
| contracts-forktest: | |
| name: "Contracts Fork Tests" | |
| runs-on: ubuntu-latest | |
| env: | |
| HARDHAT_CACHE_DIR: ./cache | |
| PROVIDER_URL: ${{ secrets.PROVIDER_URL }} | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Use Node.js | |
| uses: actions/setup-node@v2 | |
| with: | |
| node-version: "14.x" | |
| cache: "yarn" | |
| cache-dependency-path: contracts/yarn.lock | |
| - uses: actions/cache@v3 | |
| id: hardhat-cache | |
| with: | |
| path: contracts/cache | |
| key: ${{ runner.os }}-hardhat-${{ hashFiles('contracts/cache/*.json') }} | |
| restore-keys: | | |
| ${{ runner.os }}-hardhat-cache | |
| - run: yarn install --frozen-lockfile | |
| working-directory: ./contracts | |
| - run: yarn run test:fork | |
| working-directory: ./contracts | |
| dapp-lint: | |
| name: "DApp Linter" | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Use Node.js | |
| uses: actions/setup-node@v2 | |
| with: | |
| node-version: "14.x" | |
| cache: "yarn" | |
| cache-dependency-path: dapp/yarn.lock | |
| - run: yarn install --frozen-lockfile | |
| working-directory: ./dapp | |
| - run: yarn prettier:check | |
| working-directory: ./dapp | |
| slither: | |
| name: "Slither" | |
| # As long as we need Python 3.6 here in the test, we can only use up to Ubuntu 20. | |
| # https://github.com/rwth-i6/returnn/issues/1226 | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Set up Python 3.6 | |
| uses: actions/setup-python@v2 | |
| with: | |
| python-version: 3.6 | |
| - name: Install dependencies | |
| run: | | |
| wget https://github.com/ethereum/solidity/releases/download/v0.5.11/solc-static-linux | |
| chmod +x solc-static-linux | |
| sudo mv solc-static-linux /usr/local/bin/solc | |
| pip3 install slither-analyzer | |
| - name: Use Node.js | |
| uses: actions/setup-node@v2 | |
| with: | |
| node-version: "14.x" | |
| cache: "yarn" | |
| cache-dependency-path: contracts/yarn.lock | |
| - run: yarn install --frozen-lockfile | |
| working-directory: ./contracts | |
| - name: Test with Slither | |
| working-directory: ./contracts | |
| run: yarn run slither | |
| snyk: | |
| name: "Snyk" | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@master | |
| - name: Run Snyk to check for vulnerabilities | |
| uses: snyk/actions/node@master | |
| continue-on-error: true | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| with: | |
| args: --severity-threshold=high --all-projects |