action.yml

name: 'Automated Smart Contract Auditor Pro'
description: 'AI-powered Solidity & Rust security scanner. Detects reentrancy, flash loans, MEV, gas waste. Inline PR comments. Slither + Foundry + Solana. Free tier available.'
author: 'Maxwell VOSS'
branding:
  icon: 'zap'
  color: 'purple'

inputs:
  contract_address:
    description: 'The smart contract address or file to scan (optional, if omitted it scans the whole repo)'
    required: false
    default: ''
  wallet_address:
    description: 'Your Web3 wallet address to unlock AI Validation Pro features via crypto payment'
    required: false
    default: ''
  rpc_url:
    description: 'RPC URL for Base or Polygon to verify the subscription on-chain'
    required: false
    default: 'https://mainnet.base.org'
  github_token:
    description: 'GitHub token for inline PR comments'
    required: false
    default: ${{ github.token }}
  enterprise_key:
    description: 'Enterprise license key for fiat/Stripe subscriptions (B2B SaaS)'
    required: false
    default: ''

  fuzz_runs:
    description: 'Number of fuzz runs for Foundry'
    required: false
    default: '256'

runs:
  using: "composite"
  steps:
    - name: Set up Python
      uses: actions/setup-python@v5
      with:
        python-version: '3.11'
        cache: 'pip'

    - name: Install Slither & Solc
      shell: bash
      run: |
        pip install --upgrade pip
        pip install slither-analyzer solc-select requests web3 eth-account
        solc-select install 0.8.24
        solc-select use 0.8.24

    - name: Install Foundry
      uses: foundry-rs/foundry-toolchain@v1

    - name: Run Solidity Security Scanner PRO
      shell: bash
      env:
        GITHUB_TOKEN: ${{ inputs.github_token }}
        WORKSPACE: ${{ github.workspace }}
        FUZZ_RUNS: ${{ inputs.fuzz_runs }}
        WALLET_ADDRESS: ${{ inputs.wallet_address }}
        ENTERPRISE_KEY: ${{ inputs.enterprise_key }}
      run: |
        python ${{ github.action_path }}/security_scanner.py \
          "${{ inputs.contract_address }}" \
          "${{ inputs.wallet_address }}" \
          "${{ inputs.rpc_url }}" \
          "${{ inputs.github_token }}" \
          "${{ inputs.enterprise_key }}"