We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 3f62483 commit 923e1b0Copy full SHA for 923e1b0
.github/workflows/goreleaser.yml
@@ -5,6 +5,8 @@ on:
5
- "v*"
6
permissions:
7
contents: write
8
+ id-token: write
9
+ attestations: write
10
11
jobs:
12
release:
@@ -33,3 +35,11 @@ jobs:
33
35
workdir: .
34
36
env:
37
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
38
+
39
+ - name: Generate signed build provenance attestations for workflow artifacts
40
+ uses: actions/attest-build-provenance@v2
41
+ with:
42
+ subject-path: |
43
+ dist/*.tar.gz
44
+ dist/*.zip
45
+ dist/*.txt
0 commit comments