slither.yml

name: Slither Analysis
on: [push]

jobs:
  analyze:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - uses: dorny/paths-filter@v2
        id: filter
        with:
          filters: |
            solidity:
              - 'ethereum-bridge-contracts/**'

      - name: Set .env
        if: steps.filter.outputs.solidity == 'true'
        working-directory: ethereum-bridge-contracts
        run: cp env.template .env

      - name: Run Slither
        uses: crytic/slither-action@v0.3.0
        if: steps.filter.outputs.solidity == 'true'
        with:
          fail-on: none
          sarif: results.sarif
          slither-config: ethereum-bridge-contracts/slither.config.json
          target: ethereum-bridge-contracts
          slither-args: --checklist --markdown-root ${{ github.server_url }}/${{ github.repository }}/blob/${{ github.sha }}/

      - name: Push SARIF to GH
        uses: github/codeql-action/upload-sarif@v2
        with:
          # Path to SARIF file relative to the root of the repository
          sarif_file: results.sarif

      - name: Push SARIF to DefectDojo
        if: steps.filter.outputs.solidity == 'true'
        # TODO: push to DefectDojo
        run: ls results.sarif