From c3c29e94cb150cca9b913d8af41538aacde55b84 Mon Sep 17 00:00:00 2001 From: Henry Schreiner Date: Fri, 17 Jan 2025 16:27:52 -0500 Subject: [PATCH] ci: add github attestations (#100) Signed-off-by: Henry Schreiner --- .github/workflows/deploy.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 229b86e..a57dcb6 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -19,12 +19,20 @@ jobs: deploy: runs-on: ubuntu-latest if: startsWith(github.ref, 'refs/tags/v') + permissions: + attestations: write + steps: - uses: actions/download-artifact@v4 with: name: Packages path: dist + - name: Generate artifact attestation for sdist and wheel + uses: actions/attest-build-provenance@v2 + with: + subject-path: "dist/*" + - name: Publish package uses: pypa/gh-action-pypi-publish@release/v1 with: