ci: Update per Q3 audit findings #917

	name: Foundry Tests

	on:
	workflow_dispatch:
	pull_request:
	branches: [main]

	permissions:
	contents: read

	jobs:
	check:
	strategy:
	fail-fast: true

	name: Foundry project
	runs-on: smart-contracts-linux-large
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
	with:
	egress-policy: audit
	- name: Checkout code
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	submodules: recursive

	- name: Use Node.js [18]
	uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
	with:
	node-version: 18
	cache: npm

	- name: Create .env file
	run: cp local.env .env

	- name: Install dependencies
	run: npm ci

	- name: Install Foundry
	uses: step-security/foundry-toolchain@01e2d127ea061e2ce8fa34340de71ca8518f093e # v1.2.1
	with:
	version: nightly

	- name: Run Forge build
	run: \|
	forge --version
	forge build
	forge build
	id: build

	- name: Run Forge tests
	run: \|
	forge test -vvv
	id: test

Provide feedback