From 4b4929245a083b9d2392d25617b97cf4bb63653d Mon Sep 17 00:00:00 2001 From: forkless Date: Mon, 1 Jun 2026 11:04:41 +0200 Subject: [PATCH] Add SLSA provenance generation --- .github/workflows/release.yml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index de70c4b..6646eef 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -43,3 +43,22 @@ jobs: with: files: builds/* body_path: _release.md + + provenance: + needs: build + if: startsWith(github.ref, 'refs/tags/v') + runs-on: ubuntu-latest + permissions: + contents: write + id-token: write + actions: read + steps: + - uses: actions/checkout@v4 + - name: Generate SLSA provenance + uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v2.0.0 + with: + provenance-name: notalterra.intoto.jsonl + - name: Upload provenance + uses: softprops/action-gh-release@v2 + with: + files: notalterra.intoto.jsonl