Repository files navigation

• Protect your Smart Contract Proxy from storage collisions upon upgrading, by running this action in a CI on each of your Pull Requests!
• Feel safe when extending your storage layout by trusting this action to check that extended layout is zero-ed out on-chain!

Check outPR #21 for a live example:

• Action is ran oncontracts/Example.sol:Example
• Warnings & errors appear on thePull Request changes

Add a workflow (.github/workflows/foundry-storage-check.yml):

name:Check storage layouton:push:branches:      -mainpull_request:# Optionally configure to run only for changes in specific files. For example:# paths:# - src/**# - test/**# - foundry.toml# - remappings.txt# - .github/workflows/foundry-storage-check.ymljobs:check_storage_layout:runs-on:ubuntu-lateststeps:      -uses:actions/checkout@v4      -name:Install Foundryuses:foundry-rs/foundry-toolchain@v1.2.0      -name:Check storage layoutuses:Rubilmax/foundry-storage-check@v3.8with:contract:src/Contract.sol:Contract# settings below are optional, but allows to check whether the added storage slots are empty on the deployed contractrpcUrl:wss://eth-mainnet.g.alchemy.com/v2/<YOUR_ALCHEMY_KEY># the RPC url to use to query the deployed contract's storage slotsaddress:0x0000000000000000000000000000000000000000# the address at which the contract check is deployedfailOnRemoval:true# fail the CI when removing storage slots (default: false)

ℹ️An error will appear at first run!
🔴Error: No workflow run found with an artifact named "..."
As the action is expecting a comparative file stored on the base branch and cannot find it (because the action never ran on the target branch and thus has never uploaded any storage layout)

Everytime somebody opens a Pull Request, the action runsFoundryforge to generate the storage layout of the Smart Contract you want to check.

Once generated, the action will fetch the comparative storage layout stored as an artifact from previous runs and compare them, to perform a series of checks at each storage byte, and raise a notice accordingly:

• Variable changed:error
• Type definition changed:error
• Type definition removed:warning
• Different variable naming:warning
• Variable removed (optional):error

The action automatically checks for:

• All canonic storage bytes
• Array value (32 bytes) at index#0
• Mapping value (32 bytes) at key0x00
• Zero-ed bytes for added storage variables

The path and name of the contract of which to inspect storage layout (e.g. src/Contract.sol:Contract).

Required

The address at which the contract is deployed on the EVM-compatible chain queried viarpcUrl.

The HTTP/WS url used to query the EVM-compatible chain for storage slots to check for clashing.

Whether to fail the CI when removing a storage slot (to only allow added or renamed storage slots).

Defaults to:false

The gas diff reference branch name, used to fetch the previous gas report to compare the freshly generated gas report to.

Defaults to:${{ github.base_ref || github.ref_name }}

The gas diff target branch name, used to upload the freshly generated gas report.

Defaults to:${{ github.head_ref || github.ref_name }}

The directory inside which to run forge inspect.

Defaults to:.

The retry delay (in milliseconds) between each GitHub API query.

Defaults to:1000

The github token allowing the action to upload and download gas reports generated by foundry. You should not need to customize this, as the action already has access to the default Github Action token.

Defaults to:${{ github.token }}

This repository is maintained independently fromFoundry and may not work as expected with all versions offorge.