Merge pull request #67 from ronin-chain/script/add-more-postchecks

script: add more postchecks
ronin-chain · Aug 26, 2024 · aeb52c4 · aeb52c4
2 parents 4a68d51 + 49cf228
commit aeb52c4
Show file tree

Hide file tree

Showing 122 changed files with 2,653 additions and 3,588 deletions.
diff --git a/.github/workflows/post-check.yml b/.github/workflows/post-check.yml
@@ -0,0 +1,63 @@
+name: Post Check
+
+on:
+  push:
+    branches:
+      - mainnet
+      - testnet
+      - "feature/*"
+      - "features/*"
+      - "feat/*"
+      - "feats/*"
+  pull_request:
+    branches:
+      - mainnet
+      - testnet
+      - "feature/*"
+      - "features/*"
+      - "feat/*"
+      - "feats/*"
+      - "release/*"
+
+env:
+  FOUNDRY_PROFILE: ci
+
+jobs:
+  check:
+    strategy:
+      fail-fast: true
+
+    name: Foundry project
+    runs-on: ubuntu-latest
+
+    env:
+      ETHERSCAN_API_KEY: ${{ secrets.ETHERSCAN_API_KEY }}
+      INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}
+
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          submodules: recursive
+
+      - name: Install Foundry
+        uses: foundry-rs/foundry-toolchain@v1
+
+      - name: Update package with soldeer
+        run: forge soldeer update
+
+      - name: Recursively update dependencies
+        run: |
+          chmod +x ./update-deps.sh
+          ./update-deps.sh
+        id: update-deps
+
+      - name: Run Forge build
+        run: |
+          forge --version
+          forge build
+        id: build
+
+      - name: Run PostCheck CI
+        run: |
+          ./run.sh PostCheckCI -f ronin-mainnet -vvvv
+        id: postcheck
diff --git a/.github/workflows/slither-analyze.yml b/.github/workflows/slither-analyze.yml
@@ -0,0 +1,69 @@
+name: Slither Analyze
+
+on:
+  push:
+    branches:
+      - mainnet
+      - testnet
+      - "feature/*"
+      - "features/*"
+      - "feat/*"
+      - "feats/*"
+  pull_request:
+    branches:
+      - mainnet
+      - testnet
+      - "feature/*"
+      - "features/*"
+      - "feat/*"
+      - "feats/*"
+      - "release/*"
+
+env:
+  FOUNDRY_PROFILE: ci
+
+jobs:
+  check:
+    strategy:
+      fail-fast: true
+
+    name: Foundry project
+    runs-on: ubuntu-latest
+
+    env:
+      ETHERSCAN_API_KEY: ${{ secrets.ETHERSCAN_API_KEY }}
+      INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}
+
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          submodules: recursive
+
+      - name: Install Foundry
+        uses: foundry-rs/foundry-toolchain@v1
+
+      - name: Update package with soldeer
+        run: forge soldeer update
+
+      - name: Recursively update dependencies
+        run: |
+          chmod +x ./update-deps.sh
+          ./update-deps.sh
+        id: update-deps
+
+      - name: Run Forge build
+        run: |
+          forge --version
+          forge build
+        id: build
+
+      - name: Install Slither for security analysis
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y python3-pip
+          python3 -m pip install slither-analyzer
+
+      - name: Run Slither analysis
+        run: |
+          slither . --exclude-low --exclude-medium --exclude-informational --exclude-dependencies --filter-paths "dependencies/|mocks/" --exclude-optimization
+        id: slither
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -1,23 +1,23 @@
-name: test
+name: Unit Test
 
 on:
   push:
     branches:
       - mainnet
       - testnet
-      - 'feature/*'
-      - 'features/*'
-      - 'feat/*'
-      - 'feats/*'
+      - "feature/*"
+      - "features/*"
+      - "feat/*"
+      - "feats/*"
   pull_request:
     branches:
       - mainnet
       - testnet
-      - 'feature/*'
-      - 'features/*'
-      - 'feat/*'
-      - 'feats/*'
-      - 'release/*'
+      - "feature/*"
+      - "features/*"
+      - "feat/*"
+      - "feats/*"
+      - "release/*"
 
 env:
   FOUNDRY_PROFILE: ci
@@ -29,15 +29,18 @@ jobs:
 
     name: Foundry project
     runs-on: ubuntu-latest
+
+    env:
+      ETHERSCAN_API_KEY: ${{ secrets.ETHERSCAN_API_KEY }}
+      INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}
+
     steps:
       - uses: actions/checkout@v3
         with:
           submodules: recursive
 
       - name: Install Foundry
         uses: foundry-rs/foundry-toolchain@v1
-        with:
-          version: nightly
 
       - name: Update package with soldeer
         run: forge soldeer update
@@ -46,6 +49,7 @@ jobs:
         run: |
           chmod +x ./update-deps.sh
           ./update-deps.sh
+        id: update-deps
 
       - name: Run Forge build
         run: |
@@ -56,4 +60,4 @@ jobs:
       - name: Run Forge tests
         run: |
           forge test -vvv
-        id: test
+        id: test
diff --git a/.gitmodules b/.gitmodules
@@ -1,11 +1,4 @@
-[submodule "lib/prb-test"]
-	branch = release-v0
-	path = lib/prb-test
-	url = https://github.com/PaulRBerg/prb-test
 [submodule "lib/prb-math"]
 	path = lib/prb-math
 	url = https://github.com/PaulRBerg/prb-math
 	branch = release-v4
-[submodule "lib/openzeppelin-contracts"]
-	path = lib/openzeppelin-contracts
-	url = https://github.com/openzeppelin/openzeppelin-contracts
diff --git a/.husky/generate-layout.sh b/.husky/generate-layout.sh
@@ -1,15 +1,22 @@
 #!/bin/sh
 
 rm -rf logs/storage/*
+
 dirOutputs=$(ls out | grep '^[^.]*\.sol$') # assuming the out dir is at 'out'
+
 while IFS= read -r contractDir; do
-  innerdirOutputs=$(ls out/$contractDir)
+  innerDirOutputs=$(ls out/$contractDir)
+
+  # Skip if folder ends with .s.sol
+  if [[ $contractDir == *".s.sol" ]]; then
+    continue
+  fi
 
   while IFS= read -r jsonFile; do
     fileIn=out/$contractDir/$jsonFile
     fileOut=logs/storage/$contractDir:${jsonFile%.json}.log
     node .husky/storage-logger.js $fileIn $fileOut &
-  done <<< "$innerdirOutputs"
+  done <<< "$innerDirOutputs"
 done <<< "$dirOutputs"
 
 # Wait for all background jobs to finish

diff --git a/.husky/pre-push b/.husky/pre-push
@@ -9,7 +9,7 @@ stashed=true
 if [[ $output == *"No local changes to save"* ]]; then
   stashed=false
 fi
-forge build --skip test script  --sizes 2>&1 | sed -n '/Contract/,$p' > logs/contract-code-sizes.log
+forge build --skip test --skip script --sizes 2>&1 | sed -n '/Contract/,$p' >logs/contract-code-sizes.log
 .husky/generate-layout.sh
 
 git add logs
@@ -21,5 +21,5 @@ if [ "$line_count" -gt 1 ]; then
 fi
 
 if $stashed; then
-  git stash pop 
+  git stash pop
 fi