crytic/slither-action
Runs Slither, the Solidity static analyzer.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| solc-version | The version of solc to use. Should be autodetected, but may be specified manually. | — | — |
| node-version | The version of node to use. | — | — |
| target | The path of the project that Slither should analyze, relative to the repo root. | — | . |
| sarif | If provided, the path of the SARIF file to produce, relative to the repo root. | — | — |
| slither-args | Extra arguments to pass to Slither. | — | — |
| slither-config | The path to the Slither configuration file. By default, `./slither.config.json` is used if present. | — | — |
| slither-version | The version of slither-analyzer to use. By default, the latest release in PyPI is used. | — | — |
| slither-plugins | A requirements.txt file to install alongside Slither. Useful to install custom plugins. | — | — |
| ignore-compile | Whether to ignore the compilation step when running crytic-compile and Slither. | — | false |
| fail-on | Cause the action to fail if Slither finds any findings of this severity or higher. By default it will fail if any finding is found | — | all |
| internal-github-workspace | — | — | ${{ toJSON(github.workspace) }} |
Outputs
| name | description |
|---|---|
| sarif | If produced, the path of the SARIF file, relative to the repo root. |
| stdout | Standard output from Slither. Works well when passing `--checklist` in slither-args. |