diff --git a/.github/workflows/contracts/chainloop-vault-release.yml b/.github/workflows/contracts/chainloop-vault-release.yml index 6dae43ccc..f1b41290c 100644 --- a/.github/workflows/contracts/chainloop-vault-release.yml +++ b/.github/workflows/contracts/chainloop-vault-release.yml @@ -1,5 +1,10 @@ # Contract for the release workflow schemaVersion: v1 +materials: + - name: slsa-attestation + type: SLSA_PROVENANCE + annotations: + - name: github_attestation policies: attestation: - ref: source-commit diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 1bdd06f84..f3847f735 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -174,7 +174,7 @@ jobs: - name: Attest SLSA attestation run: | - chainloop attestation --name slsa-attestation add --value ${{ steps.slsa-attest.outputs.bundle-path }} --kind SLSA_PROVENANCE --attestation-id ${{ env.ATTESTATION_ID }} + chainloop attestation --name slsa-attestation add --value ${{ steps.slsa-attest.outputs.bundle-path }} --annotation github_attestation="${{ steps.slsa-attest.outputs.attestation-url }}" --kind SLSA_PROVENANCE --attestation-id ${{ env.ATTESTATION_ID }} - name: Include source code on attestation run: |