Add artifact attestation to workflows.

vezel-dev · May 6, 2024 · f4683b8 · f4683b8
1 parent c8905f5
commit f4683b8
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/package.yml b/.github/workflows/package.yml
@@ -5,7 +5,9 @@ on:
     branches:
       - master
 permissions:
+  attestations: write
   contents: read
+  id-token: write
   packages: write
 defaults:
   run:
@@ -34,6 +36,10 @@ jobs:
       - name: Run Cake
         run: |
           ./cake upload-core-github
+      - name: Attest packages
+        uses: actions/[email protected]
+        with:
+          subject-path: out/pkg/debug/*.nupkg
       - name: Upload artifacts
         if: always()
         uses: actions/[email protected]

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -5,7 +5,9 @@ on:
     types:
       - published
 permissions:
+  attestations: write
   contents: read
+  id-token: write
 defaults:
   run:
     shell: bash
@@ -33,6 +35,10 @@ jobs:
       - name: Run Cake
         run: |
           ./cake upload-core-nuget -c Release
+      - name: Attest packages
+        uses: actions/[email protected]
+        with:
+          subject-path: out/pkg/release/*.nupkg
       - name: Upload artifacts
         if: always()
         uses: actions/[email protected]