fix: reject non-canonical ASN.1 integers (#52) #226
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| pull_request: | |
| workflow_dispatch: | |
| env: | |
| FOUNDRY_PROFILE: default | |
| jobs: | |
| check: | |
| strategy: | |
| fail-fast: true | |
| name: Foundry project | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive | |
| - name: Install Foundry | |
| uses: foundry-rs/foundry-toolchain@v1 | |
| with: | |
| version: nightly | |
| - name: Show Forge version | |
| run: | | |
| forge --version | |
| - name: Run Forge fmt | |
| run: | | |
| forge fmt --check | |
| id: fmt | |
| - name: Run Forge build | |
| run: | | |
| forge build --sizes | |
| id: build | |
| - name: Run Forge tests | |
| run: | | |
| forge test -vvv | |
| id: test | |
| ffi-parity: | |
| name: Off-chain witness parity (FFI) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive | |
| - name: Install Foundry | |
| uses: foundry-rs/foundry-toolchain@v1 | |
| with: | |
| version: nightly | |
| # Asserts the off-chain hint generator (tools/p384_hints.js) produces byte-identical | |
| # hints to the on-chain Solidity reference; guards against the two drifting apart. | |
| # Node.js is preinstalled on ubuntu-latest and the tools use only Node built-ins. | |
| - name: Smoke-test off-chain tools | |
| run: | | |
| node --check tools/nitro_attestation_input.js | |
| node --check tools/hinted_attestation_calls.js | |
| node --test tools/p384_hints.test.js | |
| node tools/nitro_attestation_input.js fixture > /dev/null | |
| node tools/hinted_attestation_calls.js fixture > /dev/null | |
| id: tools | |
| - name: Run FFI parity tests | |
| env: | |
| NITRO_RUN_FFI: "true" | |
| run: | | |
| forge test --ffi -vvv --match-test test_OffchainWitness | |
| id: ffi |