ci: Generate release artifact provenance (#2315)

This commit is contained in:
Pun Butrach 2025-02-10 19:34:12 +07:00 committed by GitHub
parent 0c59bbb7be
commit 3e8862ea5a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -17,7 +17,9 @@ jobs:
release:
name: Release
permissions:
contents: write
id-token: write
contents: write
attestations: write
runs-on: ubuntu-latest
steps:
- name: Checkout
@ -63,3 +65,8 @@ jobs:
KEYSTORE_ENTRY_PASSWORD: ${{ secrets.KEYSTORE_ENTRY_PASSWORD }}
run: |
npx semantic-release
- name: Generate artifact attestation
uses: actions/attest-build-provenance@v1
with:
subject-path: build/app/outputs/apk/release/revanced-manager-*.apk