slither action

.github/dependabot.yaml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"

.github/workflows/pr.yaml

@@ -0,0 +1,14 @@
+name: pull_request
+
+on:
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  checkout:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+  test:
+    uses: ./.github/workflows/slither.yaml

.github/workflows/slither.yaml

@@ -0,0 +1,23 @@
+name: Slither Analysis
+
+permissions:
+  contents: read
+  security-events: write
+
+on: [workflow_call]
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: crytic/slither-action@v0.3.0
+        id: slither
+        with:
+          sarif: results.sarif
+          fail-on: none
+          target: fee-collectors
+
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: ${{ steps.slither.outputs.sarif }}

.gitmodules

@@ -22,6 +22,6 @@
 [submodule "fee-collectors/lib/earlybird-evm-interfaces"]
 	path = fee-collectors/lib/earlybird-evm-interfaces
 	url = https://github.com/orb-labs/earlybird-evm-interfaces
-[submodule "fee-collectors/lib/forge-std"]
-	path = fee-collectors/lib/forge-std
+[submodule "fee-collectors/lib/fee-collectors/lib/forge-std"]
+	path = fee-collectors/lib/fee-collectors/lib/forge-std
 	url = https://github.com/foundry-rs/forge-std