ci: generate attestations (#517)

scikit-build · Jul 3, 2024 · 7ffbed1 · 7ffbed1
1 parent 2e561f3
commit 7ffbed1
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -234,11 +234,17 @@ jobs:
       url: https://pypi.org/p/cmake
     permissions:
       id-token: write
+      attestations: write
     steps:
       - uses: actions/download-artifact@v4
         with:
           pattern: cibw-*
           merge-multiple: true
           path: dist
 
+      - name: Generate artifact attestation for sdist and wheel
+        uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2
+        with:
+          subject-path: "dist/cmake-*"
+
       - uses: pypa/gh-action-pypi-publish@release/v1