Slither CI workflow

.github/workflows/ci.yml

@@ -41,6 +41,19 @@ jobs:
       - name: Check forge snapshots
         run: forge snapshot --check --match-contract Gas
 
+      - name: Run Slither
+        uses: crytic/slither-action@main
+        id: slither
+        continue-on-error: true
+        with:
+          sarif: results.sarif
+          fails_on: none
+
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@v1
+        with:
+          sarif_file: ${{ steps.slither.outputs.sarif }}
+
   coverage:
     runs-on: ubuntu-latest
     steps:

.gitignore

@@ -16,3 +16,6 @@
 .pnp.*
 yarn-debug.log*
 yarn-error.log*
+
+# ide
+.idea

slither.config.json

@@ -1,10 +1,10 @@
 {
-  "detectors_to_exclude": "assembly-usage, block-timestamp, conformance-to-solidity-naming-conventions, incorrect-versions-of-solidity",
+  "detectors_to_exclude": "assembly-usage, block-timestamp, conformance-to-solidity-naming-conventions, incorrect-versions-of-solidity, similar-variables, low-level-calls",
   "exclude_informational": false,
   "exclude_low": false,
   "exclude_medium": false,
   "exclude_high": false,
   "disable_color": false,
-  "filter_paths": "(test/|lib/forge-std/|script/)",
+  "filter_paths": "(test/|lib/|script/|node_modules/)",
   "legacy_ast": false
 }