certora-prover.yml

name: Certora Prover

on:
  push:
    branches:
      - master
      - release-v*
      - formal-verification
      - m2-mainnet
      - testnet-holesky
  pull_request:
    branches:
      - dev
  workflow_dispatch: {}

jobs:
  list-scripts:
    runs-on: ubuntu-latest
    outputs:
      matrix: ${{ steps.set-matrix.outputs.matrix }}
    steps:
      - uses: actions/checkout@v2
      - id: set-matrix
        run: echo ::set-output name=matrix::$(ls certora/scripts/{,**}/*.sh | grep -v '\WnoCI\W' | jq -Rsc 'split("\n")[:-1]')
  verify:
    runs-on: ubuntu-latest
    needs: list-scripts
    steps:
      - uses: actions/checkout@v3
        with:
          submodules: recursive
      - name: Install Foundry
        uses: foundry-rs/foundry-toolchain@v1
        with:
          version: nightly
      - name: Install forge dependencies
        run: forge install
      - name: Install python
        uses: actions/setup-python@v2
        with:
          python-version: '3.10'
          cache: 'pip'
      - name: Install java
        uses: actions/setup-java@v2
        with:
          distribution: temurin
          java-version: '17'
      - name: Install certora
        run: pip install certora-cli
      - name: Install solc
        run: |
          pip install solc-select
          solc-select use 0.8.12 --always-install
      - name: Verify rule ${{ matrix.params }}
        run: |
          bash ${{ matrix.params }}
        env:
          CERTORAKEY: ${{ secrets.CERTORAKEY }}

    strategy:
      fail-fast: false
      max-parallel: 4
      matrix:
        params: ${{ fromJson(needs.list-scripts.outputs.matrix) }}