diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 748205c..8a52594 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,6 +10,8 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      id-token: write
+      attestations: write
     steps:
       - uses: actions/checkout@v4
 
@@ -27,6 +29,14 @@ jobs:
       - name: List files (Debug)
         run: ls -lh main.js manifest.json styles.css
 
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: |
+            main.js
+            manifest.json
+            styles.css
+
       - name: Create or Update release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}