attest root catalog artifact

rcaelers · Sep 30, 2024 · 41829e7 · 41829e7
1 parent a3830cf
commit 41829e7
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -14,6 +14,9 @@ on:
 jobs:
   prep:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      attestations: write
     outputs:
       WORKRAVE_BUILD_DATETIME: ${{ steps.out.outputs.WORKRAVE_BUILD_DATETIME }}
       WORKRAVE_BUILD_DATE: ${{ steps.out.outputs.WORKRAVE_BUILD_DATE }}
@@ -39,6 +42,11 @@ jobs:
           WORKRAVE_BUILD_DATETIME: ${{ needs.prep.outputs.WORKRAVE_BUILD_DATETIME }}
           WORKRAVE_BUILD_DATE: ${{ needs.prep.outputs.WORKRAVE_BUILD_DATE }}
 
+      - name: attest
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: "_deploy/*"
+
       - name: Upload artifacts to GitHub
         uses: actions/upload-artifact@v4
         with: