replace obsolete actions/attest-build-provenance action with actions/attest

This commit is contained in:
Jesse Plamondon-Willard
2026-03-24 23:34:13 -04:00
parent 549a8a8013
commit 38bb6704e9
+5 -4
View File
@@ -12,9 +12,10 @@ jobs:
build_and_release:
runs-on: ubuntu-latest
permissions:
contents: write # for creating releases
id-token: write # for creating attestations
attestations: write
contents: write # for creating releases
id-token: write # for `actions/attest` ("to mint the OIDC token necessary to request a Sigstore signing certificate")
attestations: write # for `actions/attest` ("to persist the attestation")
artifact-metadata: write # for `actions/attest` ("to create the artifact storage record")
steps:
- name: Checkout code
uses: actions/checkout@v6
@@ -96,7 +97,7 @@ jobs:
if-no-files-found: 'error'
- name: Generate artifact attestations
uses: actions/attest-build-provenance@v2
uses: actions/attest@v4
if: github.ref_type == 'tag'
with:
subject-path: bin/SMAPI-${{env.VERSION}}-installer.zip