ci: Support GitHub Attestation SLSA L2

This commit is contained in:
Pun Butrach 2024-10-22 04:05:27 +07:00 committed by validcube
parent 4db4789a06
commit 6ad90a827a
No known key found for this signature in database
GPG Key ID: DBA94253E1D3F267

View File

@ -17,7 +17,9 @@ jobs:
release:
name: Release
permissions:
contents: write
id-token: write
contents: write
attestations: write
runs-on: ubuntu-latest
steps:
- name: Checkout
@ -63,3 +65,8 @@ jobs:
KEYSTORE_ENTRY_PASSWORD: ${{ secrets.KEYSTORE_ENTRY_PASSWORD }}
run: |
npx semantic-release
- name: 🛰️ Generate artifact attestation
uses: actions/attest-build-provenance@v1
with:
subject-path: 'build/app/outputs/flutter-apk/app-release.apk'