CI/CD Pipeline

name: Test Suite
on: [push, pull_request]
 
jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      
      - name: Setup Node.js
        uses: actions/setup-node@v3
        with:
          node-version: '18'
      
      - name: Install Dependencies
        run: npm ci
      
      - name: Run Hardhat Tests (753 tests)
        run: npm test
        timeout-minutes: 10
      
      - name: Run Foundry Tests (181 tests)
        run: forge test
        timeout-minutes: 5
      
      - name: Generate Coverage
        run: npm run coverage
      
      - name: Upload Coverage
        uses: codecov/codecov-action@v3

name: Security Scans
on:
  push:
  schedule:
    - cron: '0 0 * * 0'  # Weekly
 
jobs:
  slither:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      
      - name: Run Slither
        uses: crytic/slither-action@v0.3.0
        with:
          fail-on: high
      
      - name: Upload Report
        uses: actions/upload-artifact@v3
        with:
          name: slither-report
          path: slither-report.json
  
  mythril:
    runs-on: ubuntu-latest
    steps:
      - name: Run Mythril
        run: |
          pip3 install mythril
          myth analyze contracts/**/*.sol --execution-timeout 7200

name: Fuzzing
on:
  pull_request:
  schedule:
    - cron: '0 2 * * *'  # Nightly at 2 AM
 
jobs:
  echidna:
    runs-on: ubuntu-latest
    timeout-minutes: 480  # 8 hours
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      
      - name: Install Echidna
        run: |
          wget https://github.com/crytic/echidna/releases/download/v2.2.1/echidna
          chmod +x echidna
      
      - name: Run Echidna Fuzzing
        run: ./echidna . --config echidna.config.yaml --test-limit 100000
      
      - name: Upload Results
        uses: actions/upload-artifact@v3
        with:
          name: echidna-results
          path: echidna-*.log

✅ Test Suite / Hardhat Tests (753 tests)      ~5-6m
✅ Test Suite / Foundry Tests (181 tests)      ~2s
✅ Security / Slither Analysis                 45s
✅ Coverage / Generate Report                  1m 12s
⚠️ Gas / Compare with main (+2.3%)            38s

All checks passed - Ready to merge ✅

name: Deploy to Fuji
on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Version to deploy'
        required: true
 
jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Run Pre-deployment Checks
        run: npm run pre-deploy
      
      - name: Deploy Contracts
        run: npx hardhat run scripts/deploy/deploy-fuji.js --network fuji
        env:
          PRIVATE_KEY: ${{ secrets.DEPLOYER_KEY }}
      
      - name: Verify Contracts
        run: npm run verify-all
      
      - name: Update Documentation
        run: npm run sync-dapp

name: Deploy Docs
on:
  push:
    branches: [main]
 
# Handled automatically by Vercel
# Builds Nextra site
# Deploys to production

🚨 CI Failed - seal360-contracts
Branch: feature/new-staking
Commit: a7f3c21
Failed Check: Hardhat Tests
Details: 5 tests failing in S360Governor
Link: https://github.com/.../actions/runs/123456

Subject: [CRITICAL] Security Scan Failed - seal360-contracts

Slither detected 1 HIGH severity issue:
- Reentrancy in S360Staking.unstake()

View Report: https://github.com/.../artifacts/slither-report.json

Function              | Gas Before | Gas After | Change
----------------------|------------|-----------|--------
token.transfer()      | 51,234     | 51,234    | 0%
staking.stake()       | 127,456    | 125,892   | -1.2% ✅
bonding.buy()         | 189,234    | 189,234   | 0%
governor.propose()    | 234,567    | 236,123   | +0.7% ⚠️

npm run ci:quick
# Runs: tests + linting + format check
# Time: ~6 minutes

npm run ci:full
# Runs: tests + security + coverage + gas report
# Time: ~15 minutes

npm run setup-hooks
# Installs git hooks that run tests before commit