doc: internal audit 16 #1357
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Workflow | |
| concurrency: | |
| cancel-in-progress: true | |
| group: ${{github.workflow}}-${{github.ref}} | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| jobs: | |
| build: | |
| continue-on-error: False | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository and submodules | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive | |
| - name: Install Node.js | |
| uses: actions/setup-node@v4 | |
| # Install modules | |
| - name: Install modules | |
| run: yarn install | |
| - name: Install Foundry | |
| uses: foundry-rs/foundry-toolchain@v1 | |
| with: | |
| version: nightly | |
| # Run linters | |
| - name: Run ESLint | |
| run: ./node_modules/.bin/eslint . --ext .js,.jsx,.ts,.tsx | |
| - name: Run solhint | |
| run: ./node_modules/.bin/solhint contracts/interfaces/*.sol contracts/*.sol contracts/test/*.sol \ | |
| contracts/multisigs/*.sol contracts/utils/*.sol contracts/staking/*.sol | |
| # Compile the code and run tests and deploy script(s) | |
| - name: Compile the code | |
| run: yarn compile | |
| - name: Run tests | |
| run: yarn test | |
| # Run hardhat coverage and upload codecov report | |
| - name: Solidity coverage summary | |
| run: export NODE_OPTIONS="--max-old-space-size=8192" && yarn coverage | |
| - name: Upload coverage to Codecov | |
| uses: codecov/codecov-action@v1 | |
| with: | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| directory: ./coverage | |
| flags: unittests | |
| name: codecov-umbrella | |
| fail_ci_if_error: false | |
| # Compile the code and run foundry tests | |
| - name: Run foundry tests | |
| run: forge test --match-contract Staking -vvv && forge test --match-contract PolySafeCreator -vvv | |
| scan: | |
| name: gitleaks | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 | |
| - uses: actions/setup-go@v3 | |
| with: | |
| go-version: "1.17.7" | |
| - run: | | |
| wget https://github.com/gitleaks/gitleaks/releases/download/v8.21.2/gitleaks_8.21.2_linux_x64.tar.gz && \ | |
| tar -xzf gitleaks_8.21.2_linux_x64.tar.gz && \ | |
| sudo install gitleaks /usr/bin && \ | |
| gitleaks detect --report-format json --report-path leak_report -v |