From 3cebb6ca6755d4617e7857020767ae464f018d20 Mon Sep 17 00:00:00 2001
From: Raphael Stolt <raphael.stolt@gmail.com>
Date: Wed, 26 Jun 2024 13:04:13 +0200
Subject: [PATCH] Adds attestation build step

---
 .github/workflows/distribute.yml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/distribute.yml b/.github/workflows/distribute.yml
index 34dcab6..38064cf 100644
--- a/.github/workflows/distribute.yml
+++ b/.github/workflows/distribute.yml
@@ -6,10 +6,15 @@ on:
       - 'v*'
 
 jobs:
-    tests:
+    build:
         name: distribute
         runs-on: ubuntu-latest
 
+        permissions:
+          id-token: write
+          contents: read
+          attestations: write
+
         strategy:
             fail-fast: true
             matrix:
@@ -43,3 +48,8 @@ jobs:
                 if: startsWith(github.ref, 'refs/tags/')
                 with:
                     files: bin/lean-package-validator.phar
+
+            -   name: Create attestation
+                uses: actions/attest-build-provenance@v1
+                with:
+                    subject-path: '${{ github.workspace }}/bin/lean-package-validate.phar'