From 1a089aa88ab4a365291166e22b66b0a53ee1c4be Mon Sep 17 00:00:00 2001
From: Pun Butrach <pun.butrach@gmail.com>
Date: Fri, 22 Nov 2024 09:18:35 +0700
Subject: [PATCH] ci: Generate artifact attestation

---
 .github/workflows/build.yml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4df128fc..e9c9153d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -16,6 +16,9 @@ jobs:
   build:
     name: build
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      attestations: write
     strategy:
       matrix:
         target_arch: [x86_64, x86, arm64-v8a, armeabi-v7a]
@@ -35,8 +38,14 @@ jobs:
         env:
           NDK_TOOLCHAIN: ${{ steps.setup-ndk.outputs.ndk-path }}/toolchains/llvm/prebuilt/linux-x86_64
 
+      - name: Attest build provenance
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-name: dist-${{ matrix.target_arch }}
+          subject-path: dist
+
       - name: Upload artifacts
         uses: actions/upload-artifact@v3
         with:
           name: dist-${{ matrix.target_arch }}
-          path: dist
\ No newline at end of file
+          path: dist