slither.yml

name: Slither Analysis
on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]

jobs:
  analyze:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      security-events: write
    steps:
    - name: Checkout repository
      uses: actions/checkout@v4

    - name: Run Slither
      uses: crytic/slither-action@v0.3.0
      id: slither
      with:
        node-version: 16
        sarif: results.sarif
        fail-on: none
        slither-args: --checklist --markdown-root ${{ github.server_url }}/${{ github.repository }}/blob/${{ github.sha }}/

    #- name: Create/update checklist as PR comment
    #  uses: actions/github-script@v6
    #  if: github.event_name == 'pull_request'
    #  with:
    #    script: |
    #      const script = require('.github/scripts/comment')
    #      const header = '# Slither report'
    #      const body = `${{ steps.slither.outputs.stdout }}`
    #      await script({ github, context, header, body })