diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 979543b..c531185 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,6 +7,8 @@ on:
 
 permissions:
     contents: write
+    id-token: write
+    attestations: write
 
 env:
     PLUGIN_ID: ace-code-editor # 插件ID
@@ -61,6 +63,14 @@ jobs:
                   pnpm run build
                   echo "tag_name=$(git tag --sort version:refname | tail -n 1)" >> $GITHUB_OUTPUT
 
+            - name: Generate artifact attestation
+              uses: actions/attest-build-provenance@v2
+              with:
+                  subject-path: |
+                      dist/main.js
+                      dist/manifest.json
+                      dist/styles.css
+
             - name: Create Release
               id: create_release
               uses: softprops/action-gh-release@v2