From 9928e77a1988fb4e1f29963e0f6f800c5e32aa67 Mon Sep 17 00:00:00 2001
From: VenomVendor <1086927+VenomVendor@users.noreply.github.com>
Date: Fri, 21 Jun 2024 23:43:35 -0400
Subject: [PATCH] Attest build files

---
 .github/workflows/build.yml   | 5 +++++
 .github/workflows/publish.yml | 4 ++++
 2 files changed, 9 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 879840b..2849a2b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -55,6 +55,11 @@ jobs:
           compression-level: 9
           overwrite: true
 
+      - name: Attest
+        uses: actions/attest-build-provenance@v1.3.2
+        with:
+          subject-path: "build/libs/**/*"
+
   code-coverage:
     needs: build
     name: Test on Java 17
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 150d4ed..139e2bf 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -90,3 +90,7 @@ jobs:
       - name: Remove Gradle cache lock file
         if: always()
         run: rm -rvf $HOME/.gradle/caches/modules-2/modules-2.lock
+
+      - name: Attest
+        uses: actions/attest-build-provenance@v1.3.2
+        subject-path: "build/libs/**/*"