Try adding attestation build provenance for NuGet packages

jedisct1 · May 2, 2024 · 2c6d526 · 2c6d526
1 parent b6ed54f
commit 2c6d526
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/dotnet-core.yml b/.github/workflows/dotnet-core.yml
@@ -6,6 +6,11 @@ on:
       - stable
       - next
 
+permissions:
+  id-token: write
+  attestations: write
+  contents: read
+
 jobs:
   build-windows-msvc:
     runs-on: windows-latest
@@ -330,3 +335,8 @@ jobs:
         run: |
           chmod +x .libsodium-builds/linux-${{ matrix.arch }}/Tests
           env LD_LIBRARY_PATH=${{ matrix.libs }} .libsodium-builds/linux-${{ matrix.arch }}/Tests
+
+      - name: Attest Build Provenance
+        uses: actions/attest-build-provenance@897ed5eab6ed058a474202017ada7f40bfa52940
+        with:
+         subject-path: ".libsodium-builds/libsodium-1.0.19.2.nupkg"