diff --git a/.github/workflows/contracts/release.yml b/.github/workflows/contracts/release.yml index 99766a0aa..6c36d0ba4 100644 --- a/.github/workflows/contracts/release.yml +++ b/.github/workflows/contracts/release.yml @@ -17,5 +17,10 @@ policyGroups: with: bannedLicenses: AGPL-1.0-only, AGPL-1.0-or-later, AGPL-3.0-only, AGPL-3.0-or-later bannedComponents: log4j@2.14.1 + - ref: slsa-checks + with: + provenance_material_name: slsa-attestation + runner: GITHUB_ACTION + federated_identity: "true" runner: type: GITHUB_ACTION