Static Analysis of Smart Contracts with Slither & GitHub Actions

Let’s automate static analysis of your smart contract with slither & GitHub Actions!

Photo by Christin Hume on Unsplash

Today, I’m going to show you how to automate static analysis of your smart contracts with slither and GitHub actions.

Slither

Slither is a static analysis tool for smart contracts and offered by crytic. As the time of this writing, I found out that crytic website is closing for some reason. I was shocked, but the website says they will open source their private slither detectors as well, so I’m excited to see them.

Anyway, I’m really appreciate all the work crytic have done like developing and open sourcing slither.

crytic website

GitHub Actions

GitHub Actions is a CI/CD tool, so you can automate build, test, and deploy. All you have to do to get started is adding a workflow yaml file in ./github/workflows directory in your repo.

Demo

Here are some example outputs of slither. You can look at the actual output from my repo.