From 27992b7cdb3c44e407fca4d1a1c871daec4b8b1d Mon Sep 17 00:00:00 2001 From: John Cairns Date: Thu, 2 May 2024 10:33:01 -0500 Subject: [PATCH] Add audit feedback, release process --- .github/workflows/test.yml | 27 ------------------------- .github/workflows/testnet.yml | 37 +++++++++++++++++++++++++++++++++++ AUDIT.md | 7 +++++++ CHANGELOG.md | 3 +++ Dockerfile | 2 +- README.md | 4 ++++ 6 files changed, 52 insertions(+), 28 deletions(-) delete mode 100644 .github/workflows/test.yml create mode 100644 .github/workflows/testnet.yml create mode 100644 AUDIT.md create mode 100644 CHANGELOG.md diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml deleted file mode 100644 index f5cc201..0000000 --- a/.github/workflows/test.yml +++ /dev/null @@ -1,27 +0,0 @@ -name: test -on: workflow_dispatch -env: - FOUNDRY_PROFILE: ci -jobs: - check: - strategy: - fail-fast: true - name: Foundry project - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - with: - submodules: recursive - - name: Install Foundry - uses: foundry-rs/foundry-toolchain@v1 - with: - version: nightly - - name: Run Forge build - run: | - forge --version - forge build --sizes - id: build - - name: Run Forge tests - run: | - forge test -vvv - id: test diff --git a/.github/workflows/testnet.yml b/.github/workflows/testnet.yml new file mode 100644 index 0000000..ff69e7a --- /dev/null +++ b/.github/workflows/testnet.yml @@ -0,0 +1,37 @@ +name: Testnet Deployment +on: + push: + tags: + - "*" +concurrency: + group: "testnet-deployment" + cancel-in-progress: false +jobs: + build: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v3 + with: + submodules: recursive + - name: Set up QEMU + uses: docker/setup-qemu-action@v2 + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v2 + - name: Build and Push + uses: docker/build-push-action@v3 + with: + context: . + push: false + build-args: | + VERSION=latest + - name: GitHub Release + uses: actions/create-release@v1 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + with: + draft: false + prerelease: false + tag_name: ${{ github.ref_name }} + release_name: ${{ github.ref_name }} + body_path: CHANGELOG.md diff --git a/AUDIT.md b/AUDIT.md new file mode 100644 index 0000000..978df8a --- /dev/null +++ b/AUDIT.md @@ -0,0 +1,7 @@ +# 1.0.0-audit (2024-05-02) + +- Zokyo audit, score 100, details available from Stader Labs + +# 0.1.0-audit (2024-03-20) + +- SigmaPrime audit, details available from Stader Labs \ No newline at end of file diff --git a/CHANGELOG.md b/CHANGELOG.md new file mode 100644 index 0000000..6f3e468 --- /dev/null +++ b/CHANGELOG.md @@ -0,0 +1,3 @@ +# 1.0.0 (2024-05-02) + +- Implementation and audit complete \ No newline at end of file diff --git a/Dockerfile b/Dockerfile index 5de189b..44a6ea0 100644 --- a/Dockerfile +++ b/Dockerfile @@ -21,6 +21,6 @@ RUN yamlfmt -lint .github/workflows/*.yml RUN forge install RUN forge fmt --check -#RUN python3 -m slither . --exclude-dependencies --exclude-info --exclude-low --exclude-medium +RUN python3 -m slither . --exclude-dependencies --exclude-info --exclude-low --exclude-medium RUN npm run lint RUN forge test -v diff --git a/README.md b/README.md index 460b994..9d82da6 100644 --- a/README.md +++ b/README.md @@ -4,6 +4,10 @@ hsETH is an ERC-20 token developed by Stader Labs, specifically designed for the Staders restaking ecosystem. It allows users to deposit ETH tokens into the contract and mint liquid hsETH, providing unique opportunities for decentralized exchange liquidity pools. This facilitates easy entry and exit from positions representing restaked assets. +### Audit History + +[AUDIT.md](AUDIT.md) + ### Deployment | Contract | Address | Network |