zarifpour / slither-action-sarif

🐍 Demonstrating the effectiveness of Slither's Code Scanning integration.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

🐍 slither-action-sarif

This repository showcases the integration of Slither, a static analysis tool for Solidity, with GitHub's Code Scanning feature. It aims to demonstrate the automated detection of vulnerabilities in smart contracts using Slither within a GitHub Actions workflow.

Getting Started

  • Review the GitHub Actions setup in this repo to see Slither in action.
  • Examine the SARIF (Static Analysis Results Interchange Format) reports generated by Slither for insights into potential vulnerabilities.
  • Detailed integration steps and usage guidelines are available in the Slither GitHub Action documentation.

See Results

To view the results of Slither's Code Scanning in this repository, visit the Security tab.

About

🐍 Demonstrating the effectiveness of Slither's Code Scanning integration.

License:MIT License


Languages

Language:TypeScript 90.4%Language:Solidity 7.9%Language:JavaScript 1.7%