diff --git a/.github/workflows/quality-gate.yml b/.github/workflows/quality-gate.yml index 62f4740..1313a21 100644 --- a/.github/workflows/quality-gate.yml +++ b/.github/workflows/quality-gate.yml @@ -1,7 +1,6 @@ name: Quality Gate on: push: - branches: [ignore] env: NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }} @@ -11,6 +10,7 @@ jobs: permissions: contents: read packages: read + security-events: write steps: - name: Checkout uses: actions/checkout@v3 diff --git a/.github/workflows/security-gate.yml b/.github/workflows/security-gate.yml index c8a1ec9..3aac6f6 100644 --- a/.github/workflows/security-gate.yml +++ b/.github/workflows/security-gate.yml @@ -1,30 +1,29 @@ -name: Slither Analysis - +name: Quality Gate on: push: - # branches: [ main ] - # pull_request: - # branches: [ main ] +env: + NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }} jobs: - analyze: + build_and_validate: runs-on: ubuntu-latest permissions: contents: read + packages: read security-events: write steps: - - name: Checkout repository - uses: actions/checkout@v3 - - - name: Run Slither - uses: crytic/slither-action@v0.3.0 - id: slither - with: - node-version: "18" - sarif: results.sarif - fail-on: none + - name: Checkout + uses: actions/checkout@v3 + - name: Install Foundry + uses: foundry-rs/foundry-toolchain@v1 + - name: Run Slither + uses: crytic/slither-action@v0.3.0 + id: slither + with: + sarif: results.sarif + fail-on: none - - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v2 - with: - sarif_file: ${{ steps.slither.outputs.sarif }} \ No newline at end of file + - name: Upload SARIF file + uses: github/codeql-action/upload-sarif@v2 + with: + sarif_file: ${{ steps.slither.outputs.sarif }}