Commit dd04c30

Karn Wong <[email protected]>
2025-02-23 15:33:45
feat(ci): add attestation tag: v0.6.0
master
1 parent 3f9babb
Changed files (2)
.github
workflows
release.yaml
.goreleaser.yaml
.github/workflows/release.yaml
@@ -5,6 +5,8 @@ on:
       - "*"
 permissions:
   contents: write
+  id-token: write
+  attestations: write
 jobs:
   release-binary:
     runs-on: ubuntu-latest
@@ -25,3 +27,6 @@ jobs:
           args: release --clean --config .goreleaser.yaml
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - uses: actions/attest-build-provenance@v2
+        with:
+          subject-checksums: ./dist/checksums.txt
.goreleaser.yaml
@@ -11,4 +11,5 @@ builds:
       - -w -s
       - -X github.com/kahnwong/swissknife/cmd.version={{.Version}}
 checksum:
-  disable: true
+  disable: false
+  name_template: "checksums.txt"