diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 879840b..2849a2b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -55,6 +55,11 @@ jobs:
           compression-level: 9
           overwrite: true
 
+      - name: Attest
+        uses: actions/attest-build-provenance@v1.3.2
+        with:
+          subject-path: "build/libs/**/*"
+
   code-coverage:
     needs: build
     name: Test on Java 17
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 150d4ed..139e2bf 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -90,3 +90,7 @@ jobs:
       - name: Remove Gradle cache lock file
         if: always()
         run: rm -rvf $HOME/.gradle/caches/modules-2/modules-2.lock
+
+      - name: Attest
+        uses: actions/attest-build-provenance@v1.3.2
+        subject-path: "build/libs/**/*"