Adds attestation build step

raphaelstolt · Jun 26, 2024 · 3cebb6c · 3cebb6c
1 parent addae08
commit 3cebb6c
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/.github/workflows/distribute.yml b/.github/workflows/distribute.yml
@@ -6,10 +6,15 @@ on:
       - 'v*'
 
 jobs:
-    tests:
+    build:
         name: distribute
         runs-on: ubuntu-latest
 
+        permissions:
+          id-token: write
+          contents: read
+          attestations: write
+
         strategy:
             fail-fast: true
             matrix:
@@ -43,3 +48,8 @@ jobs:
                 if: startsWith(github.ref, 'refs/tags/')
                 with:
                     files: bin/lean-package-validator.phar
+
+            -   name: Create attestation
+                uses: actions/attest-build-provenance@v1
+                with:
+                    subject-path: '${{ github.workspace }}/bin/lean-package-validate.phar'