diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 2023ed5..9839495 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -6,6 +6,11 @@ on:
     tags:
       - "[0-9]+.[0-9]+.[0-9]+"
 
+permissions:
+  id-token: write
+  contents: read
+  attestations: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -57,6 +62,16 @@ jobs:
           npm install
           npm run fn-build --if-present
 
+      - name: Generate artifact attestation for main.js
+        uses: actions/attest@v4
+        with:
+          subject-path: 'main.js'
+
+      - name: Generate artifact attestation for styles.css
+        uses: actions/attest@v4
+        with:
+          subject-path: 'styles.css'
+
       - name: Create Plugin release
         uses: ncipollo/release-action@v1.12.0
         with: