Skip to content

Add automated security scanning pipeline with Slither and Mythril #388

@Smartdevs17

Description

@Smartdevs17

Description

No automated security scanning for Solidity/EVM contracts. Integrate Slither and Mythril in CI pipeline.

Acceptance Criteria

  • Slither integration with all detectors enabled
  • Mythril symbolic execution in CI
  • Vulnerability severity classification
  • CI gate on medium+ severity findings
  • Historical finding tracking
  • False positive suppression mechanism

Technical Scope

  • .github/workflows/security-audit.yml
  • contracts/evm/
  • Edge: tool version drift, analysis timeout on large contracts, false positive management

Metadata

Metadata

Assignees

No one assigned

    Labels

    200-points200 point issueStellar WaveIssues in the Stellar wave programdrips-waveDrips Wave project taskhighHigh priority issue

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions