ci: attest release artifacts

Blooym · Nov 7, 2024 · 0712927 · 0712927
1 parent 2adc00d
commit 0712927
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -14,6 +14,8 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      attestations: write
+      id-token: write
     steps:
       - name: GitHub Checkout
         uses: actions/checkout@v4
@@ -39,6 +41,13 @@ jobs:
           mv xlm xlm-x86_64-unknown-linux-gnu
           sha256sum xlm-x86_64-unknown-linux-gnu > xlm-x86_64-unknown-linux-gnu.sha256sum
 
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: |
+            ./target/release/xlm-x86_64-unknown-linux-gnu
+            ./target/release/xlm-x86_64-unknown-linux-gnu.sha256sum
+
       - name: Release on GitHub
         uses: softprops/action-gh-release@v2
         with: