From 60a484a9828c8c2e327df2da896929723a50b460 Mon Sep 17 00:00:00 2001 From: Tony Meyer Date: Mon, 7 Sep 2026 11:28:20 +1200 Subject: [PATCH] ci: swap attest-build-provenance for actions/attest actions/attest-build-provenance is a thin wrapper around actions/attest as of its v4.0.0, and its release notes recommend using actions/attest directly. With no predicate inputs, actions/attest defaults to build provenance, so subject-path is the only input and the job permissions are unchanged. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_019e4ws34Es9T8rKzwu3zW93 --- .github/workflows/build-and-publish.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build-and-publish.yaml b/.github/workflows/build-and-publish.yaml index 0cc26a4..4191836 100644 --- a/.github/workflows/build-and-publish.yaml +++ b/.github/workflows/build-and-publish.yaml @@ -28,7 +28,7 @@ jobs: - name: Build a binary wheel and a source tarball run: uv build - name: Attest build provenance - uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: subject-path: 'dist/*' - name: Store the distribution packages