slither.yml

name: Slither Analysis
# Config File for CBHQ Github Repos
on:
  # Only run this action on pushes / pull requests to main branch
  push:
    branches: [main, testing]
  pull_request:
    branches: [main, testing]

jobs:
  analyze:
    runs-on:
      - ubuntu-latest
      # - default-config
      # - small
      # - amd64
    steps:
      - name: Git Checkout
        uses: actions/checkout@v4
        with:
          submodules: recursive

      - name: Run Slither Action
        uses: ./.github/actions/slither-action
        id: slither
        with:
          sarif: results.sarif
          fail-on: none

      - name: Upload SARIF file
        uses: github/codeql-action/upload-sarif@v3
        with:
          sarif_file: results.sarif
            

# Set GH_TOKEN permissions to be as restricted as possible
# security-events must be set to write for the SARIF upload step
permissions:
  security-events: write
  contents: read
  actions: read