Skip to content

Commit

Permalink
Try adding attestation build provenance for NuGet packages
Browse files Browse the repository at this point in the history
  • Loading branch information
jedisct1 committed May 2, 2024
1 parent b6ed54f commit 2c6d526
Showing 1 changed file with 10 additions and 0 deletions.
10 changes: 10 additions & 0 deletions .github/workflows/dotnet-core.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,11 @@ on:
- stable
- next

permissions:
id-token: write
attestations: write
contents: read

jobs:
build-windows-msvc:
runs-on: windows-latest
Expand Down Expand Up @@ -330,3 +335,8 @@ jobs:
run: |
chmod +x .libsodium-builds/linux-${{ matrix.arch }}/Tests
env LD_LIBRARY_PATH=${{ matrix.libs }} .libsodium-builds/linux-${{ matrix.arch }}/Tests
- name: Attest Build Provenance
uses: actions/attest-build-provenance@897ed5eab6ed058a474202017ada7f40bfa52940
with:
subject-path: ".libsodium-builds/libsodium-1.0.19.2.nupkg"

0 comments on commit 2c6d526

Please sign in to comment.