main.yml

name: main

on:
    push:
        branches:
            - main
    pull_request:

concurrency:
    group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
    cancel-in-progress: true

jobs:
    deps:
        runs-on: ubuntu-latest
        outputs:
            cache-path: ${{ steps.cache-env.outputs.cache-path }}
            cache-key: ${{ steps.cache-env.outputs.cache-key }}
        steps:
            - uses: actions/checkout@v4
            - uses: actions/setup-node@v4
              with:
                  node-version: "20"

            - name: Get yarn cache directory path
              id: cache-env
              run: |
                  echo "cache-path=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
                  echo "cache-key=${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}" >> $GITHUB_OUTPUT

            - uses: actions/cache@v4
              id: cache
              with:
                  path: ${{ steps.cache-env.outputs.cache-path }}
                  key: ${{ steps.cache-env.outputs.cache-key }}
                  restore-keys: ${{ runner.os }}-yarn-

            - if: steps.cache.outputs.cache-hit != 'true'
              run: yarn

    get-changed-files:
        runs-on: ubuntu-latest
        outputs:
            any_changed: ${{ steps.changed-files.outputs.any_changed }}
        steps:
            - uses: actions/checkout@v4
            - name: Get changed files
              id: changed-files
              uses: tj-actions/changed-files@v44
              with:
                  files: packages/**/*.{sol,json,ts}

    compile:
        if: ${{ needs.get-changed-files.outputs.any_changed }}
        needs: [get-changed-files, deps]
        runs-on: ubuntu-latest
        steps:
            - uses: actions/checkout@v4
            - uses: actions/setup-node@v4
              with:
                  node-version: "20"
            - uses: actions/cache/restore@v4
              with:
                  path: ${{ needs.deps.outputs.cache-path }}
                  key: ${{ needs.deps.outputs.cache-key }}

            - run: yarn compile

            - name: Upload compilation results
              uses: actions/upload-artifact@v4
              with:
                  name: all-artifacts
                  path: packages/**/artifacts/**

    style:
        needs: deps
        runs-on: ubuntu-latest
        steps:
            - uses: actions/checkout@v4
            - uses: actions/setup-node@v4
              with:
                  node-version: "20"
            - uses: actions/cache/restore@v4
              with:
                  path: ${{ needs.deps.outputs.cache-path }}
                  key: ${{ needs.deps.outputs.cache-key }}

            - run: yarn format
    tests:
        if: ${{ needs.get-changed-files.outputs.any_changed }}
        needs: compile
        runs-on: ubuntu-latest
        steps:
            - uses: actions/checkout@v4
            - uses: actions/setup-node@v4
              with:
                  node-version: "20"
            - uses: actions/cache/restore@v4
              with:
                  path: ${{ needs.deps.outputs.cache-path }}
                  key: ${{ needs.deps.outputs.cache-key }}
            - uses: actions/download-artifact@v4
              with:
                  name: all-artifacts
                  path: packages/

            - run: yarn test

            - if: github.event_name == 'push' && github.ref == 'refs/heads/main'
              name: Coveralls
              uses: coverallsapp/github-action@v2
              with:
                  github-token: ${{ secrets.GITHUB_TOKEN }}

    set-slither-matrix:
        needs: get-changed-files
        if: ${{ needs.get-changed-files.outputs.any_changed == 'true' }}
        runs-on: ubuntu-latest
        outputs:
            matrix: ${{ steps.set-matrix.outputs.matrix }}
        steps:
            - uses: actions/checkout@v4
            - name: Set matrix
              id: set-matrix
              run: |
                  matrix=$(ls -1 packages | jq -Rsc 'split("\n") | map(select(length > 0))')
                  echo "matrix=$matrix" >> $GITHUB_OUTPUT

    slither:
        if: ${{ needs.get-changed-files.outputs.any_changed }}
        needs: [set-slither-matrix, compile]
        runs-on: ubuntu-latest
        permissions:
            contents: read
            security-events: write
        strategy:
            matrix:
                dir: ${{ fromJson(needs.set-slither-matrix.outputs.matrix) }}
        steps:
            - uses: actions/checkout@v4

            - name: Run slither
              uses: crytic/slither-action@v0.4.0
              id: slither
              with:
                  ignore-compile: true
                  fail-on: none
                  sarif: results.sarif
                  slither-args: --filter-paths "test" --exclude-dependencies --markdown-root ${{ github.server_url }}/${{ github.repository }}/blob/${{ github.sha }}/
                  target: packages/${{ matrix.dir }}
            - name: Upload SARIF files
              uses: github/codeql-action/upload-sarif@v3
              with:
                  sarif_file: ${{ steps.slither.outputs.sarif }}

            - name: Create/update checklist as PR comment
              uses: actions/github-script@v7
              if: github.even_name == 'pull_request'
              env:
                  REPORT: ${{ steps.slither.stdout }}
              with:
                  script: |
                      const script = require('.github/scripts/slither-comment')
                      const header = '# Slither report'
                      const body = process.env.REPORT
                      await script({ github, context, header, body })