From 366e17a9cc02cbc92325a0f9d7768075b38baf15 Mon Sep 17 00:00:00 2001 From: squidfunk Date: Thu, 18 Dec 2025 11:52:38 +0100 Subject: [PATCH] chore: only create attestations during release workflow Signed-off-by: squidfunk --- .github/workflows/build.yml | 4 ++++ .github/workflows/release.yml | 1 + 2 files changed, 5 insertions(+) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index e81bf983..643b06e5 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -35,6 +35,9 @@ on: ref: required: true type: string + attestations: + required: true + type: boolean permissions: attestations: write # Required for attestations @@ -82,6 +85,7 @@ jobs: fi - name: Create artifact attestation + if: inputs.attestations == true uses: actions/attest-build-provenance@v1 with: show-summary: false diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index af1b1eac..98cde890 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -44,6 +44,7 @@ jobs: uses: ./.github/workflows/build.yml with: ref: ${{ github.event.pull_request.merge_commit_sha }} + attestations: true tag: name: Create tag