certora-review-forwarder.yml

name: certora-review-forwarder

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main

  workflow_dispatch:

jobs:
  verify:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v2
        with:
          submodules: recursive

      - name: Install python
        uses: actions/setup-python@v2
        with: { python-version: 3.9 }

      - name: Install java
        uses: actions/setup-java@v1
        with: { java-version: "11", java-package: jre }

      - name: Install certora cli
        run: pip3 install certora-cli==7.6.3

      - name: Install solc
        run: |
          wget https://github.com/ethereum/solidity/releases/download/v0.8.19/solc-static-linux
          chmod +x solc-static-linux
          sudo mv solc-static-linux /usr/local/bin/solc8.19

      - name: Verify rule ${{ matrix.rule }}
        run: |
          cd security/certora
          touch applyHarness.patch
          make munged
          cd ../..
          certoraRun security/certora/confs/${{ matrix.rule }}
        env:
          CERTORAKEY: ${{ secrets.CERTORAKEY }}

    strategy:
      fail-fast: false
      max-parallel: 16
      matrix:
        rule:
          - verifyCrossChainForwarder-envelopRetry.conf
          - verifyCrossChainForwarder-invariants.conf
          - verifyCrossChainForwarder-newEnvelope.conf
          - verifyCrossChainForwarder-sanity.conf
          - verifyCrossChainForwarder-simpleRules.conf
          - verifyCrossChainForwarder-encode-decode-correct.conf --rule encode_decode_well_formed_TX
          - verifyCrossChainForwarder-shuffle.conf