ci: add gh slither action

.github/scripts/comment.js

@@ -1,11 +1,11 @@
 // The script that posts comments to PRs on gh
-module.exports = async ({ github, context, header, body }) => {
+module.exports = async ({ github, context, header, body, pr_number }) => {
     const comment = [header, body].join("\n");
 
     const { data: comments } = await github.rest.issues.listComments({
         owner: context.repo.owner,
         repo: context.repo.repo,
-        issue_number: context.payload.number,
+        issue_number: pr_number,
     });
 
     const botComment = comments.find(

.github/workflows/slither.yml

@@ -16,21 +16,26 @@ jobs:
         id: slither
         with:
           fail-on: none
-          continue-on-error: true
           sarif: results.sarif
           slither-config: ethereum-bridge-contracts/slither.config.json
           target: ethereum-bridge-contracts
           slither-args: --checklist --markdown-root ${{ github.server_url }}/${{ github.repository }}/blob/${{ github.sha }}/
 
-      - name: ls
-        run: ls
+      - name: Push SARIF to DefectDojo
+        # TODO: push to DefectDojo
+#        run: ls results.sarif
+        run: echo ${{ github.event.number }}
 
       - name: Create/update checklist as PR comment
         uses: actions/github-script@v6
         if: github.event_name == 'push'
+        env:
+          REPORT: ${{ steps.slither.outputs.stdout }}
+          PR_NUMBER: ${{ github.event.number }}
         with:
           script: |
             const script = require('.github/scripts/comment')
             const header = '# Slither report'
-#            const body = `${{ steps.slither.outputs.stdout }}`
-#            await script({ github, context, header, body })
+            const { REPORT } = process.env
+            const { PR_NUMBER } = process.env
+            await script({ github, context, header, body: REPORT, pr_number: PR_NUMBER })