Skip to content

Refactor/execution (#691) #1454

Refactor/execution (#691)

Refactor/execution (#691) #1454

Workflow file for this run

name: Security
on: [push, pull_request]
jobs:
check:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- uses: software-mansion/setup-scarb@v1
with:
scarb-version: "2.3.1"
- name: Install Semgrep
run: |
pip install semgrep==1.45.0
- name: Run Semgrep
run: semgrep --config .github/semgrep-cairo-rules.yaml ./src > semgrep-output.txt
- name: Save Semgrep Output as an Artifact
uses: actions/upload-artifact@v3
with:
name: semgrep-cairo
path: semgrep-output.txt
- name: Build cairo programs
run: scarb build
- name: Cache Cargo dependencies
uses: actions/cache@v2
with:
path: |
~/.cargo
key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
# - name: Check if Caracal is installed
# id: check-caracal
# run: |
# if ! command -v caracal &> /dev/null; then
# echo "Caracal is not installed. Installing..."
# cargo install --git https://github.com/crytic/caracal --profile release --force
# else
# echo "Caracal is already installed."
# fi
# - name: Run Caracal
# run: caracal detect . > caracal-output.txt
# - name: Save Caracal Output as an Artifact
# uses: actions/upload-artifact@v3
# with:
# name: caracal-cairo
# path: caracal-output.txt