From b296a3d7e6741c85141c8e037dd552ba15dad53a Mon Sep 17 00:00:00 2001
From: Paul <70213368+LostPaul@users.noreply.github.com>
Date: Fri, 15 May 2026 13:03:10 +0200
Subject: [PATCH] Update release.yaml

---
 .github/workflows/release.yaml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 2023ed5..9839495 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -6,6 +6,11 @@ on:
     tags:
       - "[0-9]+.[0-9]+.[0-9]+"
 
+permissions:
+  id-token: write
+  contents: read
+  attestations: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -57,6 +62,16 @@ jobs:
           npm install
           npm run fn-build --if-present
 
+      - name: Generate artifact attestation for main.js
+        uses: actions/attest@v4
+        with:
+          subject-path: 'main.js'
+
+      - name: Generate artifact attestation for styles.css
+        uses: actions/attest@v4
+        with:
+          subject-path: 'styles.css'
+
       - name: Create Plugin release
         uses: ncipollo/release-action@v1.12.0
         with: