slither.yaml

name: Slither scanner

on: pull_request

jobs:
  slither-l1:
    name: Slither check for L1 contracts
    runs-on: ubuntu-latest

    steps:
      - name: Checkout the repository
        uses: actions/checkout@v4
        with:
          submodules: recursive

      - name: Use Node.js
        uses: actions/setup-node@v3
        with:
          node-version: 18.18.0
          cache: yarn

      - name: Install dependencies
        run: yarn

      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: 3.8

      - name: Install foundry-zksync
        run: |
          mkdir ./foundry-zksync
          curl -LO https://github.com/matter-labs/foundry-zksync/releases/download/nightly/foundry_nightly_linux_amd64.tar.gz
          tar zxf foundry_nightly_linux_amd64.tar.gz -C ./foundry-zksync
          chmod +x ./foundry-zksync/forge ./foundry-zksync/cast
          echo "$PWD/foundry-zksync" >> $GITHUB_PATH

      - name: Install Slither
        run: |
          pip install slither-analyzer

      - name: Remove non-compiled files
        run: |
          rm -rf ./l1-contracts/contracts/state-transition/utils/
          rm -rf ./l1-contracts/contracts/state-transition/Verifier.sol
          rm -rf ./l1-contracts/contracts/state-transition/TestnetVerifier.sol
          rm -rf ./l1-contracts/contracts/dev-contracts/test/VerifierTest.sol
          rm -rf ./l1-contracts/contracts/dev-contracts/test/VerifierRecursiveTest.sol

      - name: Run Slither
        working-directory: l1-contracts
        run: |
          slither --config ./slither.config.json .