Add audit feedback, release process

.github/workflows/testnet.yml

@@ -0,0 +1,37 @@
+name: Testnet Deployment
+on:
+  push:
+    tags:
+      - "*"
+concurrency:
+  group: "testnet-deployment"
+  cancel-in-progress: false
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          submodules: recursive
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+      - name: Build and Push
+        uses: docker/build-push-action@v3
+        with:
+          context: .
+          push: false
+          build-args: |
+            VERSION=latest
+      - name: GitHub Release
+        uses: actions/create-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          draft: false
+          prerelease: false
+          tag_name: ${{ github.ref_name }}
+          release_name: ${{ github.ref_name }}
+          body_path: CHANGELOG.md

AUDIT.md

@@ -0,0 +1,7 @@
+# 1.0.0-audit (2024-05-02)
+
+- Zokyo audit, score 100, details available from Stader Labs
+
+# 0.1.0-audit (2024-03-20)
+
+- SigmaPrime audit, details available from Stader Labs

CHANGELOG.md

@@ -0,0 +1,3 @@
+# 1.0.0 (2024-05-02)
+
+- Implementation and audit complete

Dockerfile

@@ -21,6 +21,6 @@ RUN yamlfmt -lint .github/workflows/*.yml
 
 RUN forge install
 RUN forge fmt --check
-#RUN python3 -m slither . --exclude-dependencies --exclude-info --exclude-low --exclude-medium
+RUN python3 -m slither . --exclude-dependencies --exclude-info --exclude-low --exclude-medium
 RUN npm run lint
 RUN forge test -v

README.md

@@ -4,6 +4,10 @@
 
 hsETH is an ERC-20 token developed by Stader Labs, specifically designed for the Staders restaking ecosystem. It allows users to deposit ETH tokens into the contract and mint liquid hsETH, providing unique opportunities for decentralized exchange liquidity pools. This facilitates easy entry and exit from positions representing restaked assets.
 
+### Audit History
+
+[AUDIT.md](AUDIT.md)
+
 ### Deployment
 
 | Contract                  | Address                                    | Network |