From f19a681890dfb1882f4948067e428c3ae1f1951c Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Tue, 12 May 2026 19:12:08 +0000
Subject: [PATCH] Fix: Include artifact attestation files in GitHub release

---
 .github/workflows/release.yml | 23 ++++-------------------
 1 file changed, 4 insertions(+), 19 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ff11f45..50835df 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -29,11 +29,11 @@ jobs:
           echo "main-js-path=main.js" >> $GITHUB_OUTPUT
           echo "styles-css-path=styles.css" >> $GITHUB_OUTPUT
 
-  attest:
+  release:
     needs: build
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
       id-token: write
     steps:
       - uses: actions/checkout@v4
@@ -56,23 +56,6 @@ jobs:
         with:
           subject-path: styles.css
 
-  release:
-    needs: [build, attest]
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      id-token: write
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: '20'
-          cache: 'npm'
-
-      - run: npm ci
-      - run: npm run build
-
       - name: Create Release
         uses: softprops/action-gh-release@v1
         with:
@@ -80,3 +63,5 @@ jobs:
             main.js
             styles.css
             manifest.json
+            main.js.intoto.jsonl
+            styles.css.intoto.jsonl