Attest APK

cbeuw · Jun 29, 2024 · 1f3c851 · 1f3c851
1 parent b81ddea
commit 1f3c851
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
@@ -2,6 +2,10 @@ name: Release APK
 
 on: [push, pull_request]
 
+permissions:
+  id-token: write
+  attestations: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -48,8 +52,14 @@ jobs:
       env:
         BUILD_TOOLS_VERSION: "34.0.0"
 
+    - name: Attest APK
+      uses: actions/attest-build-provenance@v1
+      with:
+        subject-path: ${{steps.sign_app.outputs.signedReleaseFile}}
+
     - name: Upload release files
       uses: softprops/action-gh-release@v2
       if: startsWith(github.ref, 'refs/tags/')
       with:
         files: ${{steps.sign_app.outputs.signedReleaseFile}}
+