diff --git a/.github/workflows/analyse.yml b/.github/workflows/analyse.yml index c954162fa..da01a4721 100644 --- a/.github/workflows/analyse.yml +++ b/.github/workflows/analyse.yml @@ -20,14 +20,12 @@ jobs: # REVIEW: here and below steps taken from official guide # https://github.com/actions/setup-python/blob/main/docs/advanced-usage.md#caching-packages - name: Install poetry - run: > - pipx install poetry + run: pipx install poetry # REVIEW: # https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#example-of-adding-a-system-path - name: Add poetry to $GITHUB_PATH - run: > - echo "$HOME/.local/bin" >> $GITHUB_PATH + run: echo "$HOME/.local/bin" >> $GITHUB_PATH - uses: actions/setup-python@v5 with: @@ -37,12 +35,21 @@ jobs: - name: Install dependencies run: poetry install --no-root - - name: Remove foundry.toml - run: rm -f foundry.toml + - name: Versions + run: > + poetry --version && + python --version && + echo "slither $(poetry run slither --version)" && + poetry run slitherin --version - name: Run slither - run: > - poetry run slither . --sarif results.sarif --no-fail-pedantic + run: > + poetry run slither . \ + --filter-paths test \ + --no-fail-pedantic \ + --compile-force-framework hardhat \ + --sarif results.sarif \ + --exclude pess-strange-setter - name: Check results.sarif presence id: results diff --git a/poetry.lock b/poetry.lock index c036d9b06..a277c6e25 100644 --- a/poetry.lock +++ b/poetry.lock @@ -1632,6 +1632,20 @@ doc = ["pdoc"] lint = ["black (==22.3.0)", "pylint (==3.0.3)"] test = ["coverage[toml]", "deepdiff", "filelock", "numpy", "pytest", "pytest-cov", "pytest-insta", "pytest-xdist"] +[[package]] +name = "slitherin" +version = "0.7.2" +description = "Pessimistic security Slither detectors" +optional = false +python-versions = ">=3.8" +files = [ + {file = "slitherin-0.7.2-py3-none-any.whl", hash = "sha256:08e25a6dd6e1340754e0969d6ce5b9fcdbaf62b3ed7ce2dcc4fa988a0ce3491d"}, + {file = "slitherin-0.7.2.tar.gz", hash = "sha256:9e1d2f7be9034df9046e5ef038cc72d86c3af49ed77b64df3066d72a2e15af62"}, +] + +[package.dependencies] +slither-analyzer = ">=0.10.0" + [[package]] name = "solc-select" version = "1.0.4" @@ -1935,4 +1949,4 @@ multidict = ">=4.0" [metadata] lock-version = "2.0" python-versions = "^3.12.1" -content-hash = "5e52daf2ad7fc946a43b063a2d328bf3031a19627a9fe4bd126242c56a5e25fe" +content-hash = "7dbd95475986aea633803fbd89c20c125261399458f5b68f372d390dd07bf649" diff --git a/pyproject.toml b/pyproject.toml index 2b95acaec..bd0e0306e 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -13,6 +13,7 @@ setuptools = "^70.0.0" [tool.poetry.group.dev.dependencies] slither-analyzer = "^0.10.4" +slitherin = "^0.7.2" [build-system] requires = ["poetry-core"]