slither.yml

name: Slither Analysis

on:
  pull_request: {}
  workflow_dispatch: {}

jobs:
  analyze:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      security-events: write
    steps:
    - name: Checkout repository
      uses: actions/checkout@v3
    - uses: actions/setup-node@v2
      with:
        node-version: 16.x
    - uses: actions/cache@v3
      id: cache
      with:
        path: '**/node_modules'
        key: uns-yarn-${{ hashFiles('**/yarn.lock') }}
    - run: yarn install
      if: steps.cache.outputs.cache-hit != 'true'
    - run: yarn compile

    - name: Run Slither
      uses: crytic/slither-action@main
      continue-on-error: true
      id: slither
      with:
        node-version: 16
        slither-args: "--ignore-compile --hardhat-artifacts-directory ./.artifacts --config-file .slither.json"
        sarif: results.sarif

    - name: Upload SARIF file
      uses: github/codeql-action/upload-sarif@v2
      with:
        sarif_file: ${{ steps.slither.outputs.sarif }}