Try out attestation in CI

hynek · May 13, 2024 · 6a782e1 · 6a782e1
1 parent 925a5b0
commit 6a782e1
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -12,6 +12,10 @@ env:
   SETUPTOOLS_SCM_PRETEND_VERSION: "1.0" # avoid warnings about shallow checkout
   UV_SYSTEM_PYTHON: "true"  # ensure action can deal with this set
 
+permissions:
+  id-token: write
+  attestations: write
+
 jobs:
   check-argon2-cffi-bindings:
     name: Build & verify the argon2-cffi-bindings package.
@@ -53,6 +57,7 @@ jobs:
         with:
           path: structlog
           upload-name-suffix: "-structlog"
+          attest-build-provenance-github: "true"
 
       - run: echo Packages can be found at ${{ steps.baipp.outputs.dist }}