From c6bd967ba3c6b73aeeae5b3c75f8a1941e2e0709 Mon Sep 17 00:00:00 2001
From: Ivan <43139773+ivanmolenaar@users.noreply.github.com>
Date: Fri, 29 May 2026 11:41:57 +0200
Subject: [PATCH] Add artifact attestations

---
 .github/workflows/release.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fbb21c4..de03e21 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
     permissions:
+      attestations: write
       contents: write
+      id-token: write
     steps:
       - uses: actions/checkout@v3
 
@@ -23,6 +25,13 @@ jobs:
           npm install
           npm run build
 
+      - name: Attest release artifacts
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: |
+            main.js
+            styles.css
+
       - name: Create release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}