Merge pull request #75 from Kiwari-Labs/update-ci

ci: enforce formatting, testing, wip, and security checks [WIP]

.github/setup/action.yml

@@ -0,0 +1,18 @@
+name: Setup
+description: Common environment setup
+
+runs:
+  using: composite
+  steps:
+    - uses: actions/setup-node@v4
+      with:
+        node-version: 20.x
+    - uses: actions/cache@v4
+      id: cache
+      with:
+        path: '**/node_modules'
+        key: yarn-v1-${{ hashFiles('**/yarn.lock') }}
+    - name: Install dependencies
+      run: yarn install --frozen-lockfile
+      shell: bash
+      if: steps.cache.outputs.cache-hit != 'true'

.github/workflows/checks.yml

@@ -0,0 +1,33 @@
+name: checks
+
+on:
+  push:
+    branches:
+    - main
+  pull_request: {}
+
+jobs:
+  format-code:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up environment
+        uses: ./.github/setup
+      - run: yarn format
+
+  tests:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up environment
+        uses: ./.github/setup
+      - name: Run tests
+        run: yarn test
+
+  slither:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up environment
+        uses: ./.github/setup
+      - uses: crytic/[email protected]  

.github/workflows/wip-check.yml

@@ -0,0 +1,13 @@
+name: WIP
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, edited]
+
+jobs:
+  check-wip:
+    runs-on: ubuntu-latest
+    steps:
+      - name: WIP Check
+        uses: wip/action@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}