diff --git a/.github/workflows/compile-binary.yml b/.github/workflows/compile-binary.yml index 04f3dcd..fd05173 100644 --- a/.github/workflows/compile-binary.yml +++ b/.github/workflows/compile-binary.yml @@ -7,6 +7,9 @@ on: permissions: contents: read + id-token: write + attestations: write + jobs: linux: @@ -28,6 +31,10 @@ jobs: --include-data-file=./Whatsapp_Chat_Exporter/whatsapp.html=./Whatsapp_Chat_Exporter/whatsapp.html \ --assume-yes-for-downloads Whatsapp_Chat_Exporter --output-filename=wtsexporter_linux_x64 sha256sum wtsexporter_linux_x64 + - name: Generate artifact attestation + uses: actions/attest-build-provenance@v3 + with: + subject-path: ./wtsexporter_linux_x64 - uses: actions/upload-artifact@v6 with: name: binary-linux @@ -52,6 +59,10 @@ jobs: python -m nuitka --onefile --include-data-file=./Whatsapp_Chat_Exporter/whatsapp.html=./Whatsapp_Chat_Exporter/whatsapp.html --assume-yes-for-downloads Whatsapp_Chat_Exporter --output-filename=wtsexporter copy wtsexporter.exe wtsexporter_x64.exe Get-FileHash wtsexporter_x64.exe + - name: Generate artifact attestation + uses: actions/attest-build-provenance@v3 + with: + subject-path: .\wtsexporter_x64.exe - uses: actions/upload-artifact@v6 with: name: binary-windows @@ -77,6 +88,10 @@ jobs: --include-data-file=./Whatsapp_Chat_Exporter/whatsapp.html=./Whatsapp_Chat_Exporter/whatsapp.html \ --assume-yes-for-downloads Whatsapp_Chat_Exporter --output-filename=wtsexporter_macos_x64 shasum -a 256 wtsexporter_macos_x64 + - name: Generate artifact attestation + uses: actions/attest-build-provenance@v3 + with: + subject-path: ./wtsexporter_macos_x64 - uses: actions/upload-artifact@v6 with: name: binary-macos