diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index e81bf983..643b06e5 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -35,6 +35,9 @@ on: ref: required: true type: string + attestations: + required: true + type: boolean permissions: attestations: write # Required for attestations @@ -82,6 +85,7 @@ jobs: fi - name: Create artifact attestation + if: inputs.attestations == true uses: actions/attest-build-provenance@v1 with: show-summary: false diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index af1b1eac..98cde890 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -44,6 +44,7 @@ jobs: uses: ./.github/workflows/build.yml with: ref: ${{ github.event.pull_request.merge_commit_sha }} + attestations: true tag: name: Create tag