Add attestation

Citrinate · Jan 7, 2025 · 8994c4b · 8994c4b
1 parent 5747aca
commit 8994c4b
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -51,6 +51,8 @@ jobs:
 
     permissions:
       contents: write
+      attestations: write
+      id-token: write
 
     steps:
       - name: Checkout code
@@ -67,6 +69,11 @@ jobs:
           cd out
           7z a -tzip -mx7 ${{ env.PLUGIN_NAME }}.zip *
 
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: 'out/${{ env.PLUGIN_NAME }}.zip'
+
       - name: Create ${{ env.PLUGIN_NAME }} GitHub release
         uses: ncipollo/release-action@v1.13.0
         with: