DEPRECATED
This project it now deprecated as the creators of slither release an official action.
This repo does only exist to that workflows using this action do not break
Slither Action
This action is a wrapper for slither, a static vulnerability tool for Solidity smart contracts.
If you're having errors while running slither please check the official slither repo as this is just a wrapper for the tool
Inputs
run-npm-install
By default the action will run npm install on the source folder. Set this variable as false to disable it Default: true Required: no
slither-version
Specify slither version to use. It will download it from official github project. Default: "0.8.1" Required: no
high-threshold
Action will fail if the number of High findings is equal or bigger then this value (0 to disable) Default: 1 Required: no
medium-threshold
Action will fail if the number of Medium findings is equal or bigger then this value (0 to disable) Default: 1 Required: no
low-threshold
Action will fail if the number of Low findings is equal or bigger then this value (0 to disable) Default: 1 Required: no
optimization-threshold
Action will fail if the number of Optimization findings is equal or bigger then this value (0 to disable) Default: 1 Required: no
informative-threshold
Action will fail if the number of Informative findings is equal or bigger then this value (0 to disable) Default: 10 Required: no
projectPath
The path to the smart contract's project Default: "." Required: no
slither-params
Extra slither params to be appended. By default the action runnins with: slither --json - .
Required: no
Example usage
uses: luisfontes19/slither-static-analysis-action@v0.3.4
Full Action Example
on: [push]
jobs:
main_job:
runs-on: ubuntu-latest
name: Solidity Security
steps:
- name: Checkout
uses: actions/checkout@v2
- name: Slither Static Analysis
uses: luisfontes19/slither-static-analysis-action@v0.3.2
with:
slither-version: '0.6.13'
run-npm-install: true
high-threshold: 1
medium-threshold: 1
low-threshold: 1
optimization-threshold: 1
informative-threshold: 10
projectPath: "."
For Developers
npm install
#do some changes
npm run build
#commit
#push