From 790a45f27a40302631642f13c7dade02eac39491 Mon Sep 17 00:00:00 2001
From: TangRufus <tangrufus@gmail.com>
Date: Sat, 18 Oct 2025 20:21:00 +0100
Subject: [PATCH] Verify attestation for specific tag

---
 action.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/action.yml b/action.yml
index d3daafb..3e27b69 100644
--- a/action.yml
+++ b/action.yml
@@ -91,10 +91,11 @@ runs:
 
     - name: Verify Attestation
       if: ${{ inputs.verify-attestation == 'true' }}
-      run: gh attestation verify --repo typisttech/php-matrix php-matrix.tar.gz
+      run: gh release verify-asset --repo typisttech/php-matrix ${TAG} php-matrix.tar.gz
       shell: bash
       working-directory: ${{ github.action_path }}
       env:
+        TAG: ${{ inputs.version || '' }}
         GH_TOKEN: ${{ inputs.github-token }}
 
     - name: Unarchive the binary