Workflow added

.github/workflows/deploy.yml

@@ -7,6 +7,11 @@ jobs:
   tag:
     name: New tag
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+      attestations: write
+    timeout-minutes: 70
     steps:
       - name: Checkout project
         uses: actions/checkout@v4
@@ -16,7 +21,14 @@ jobs:
         run: composer run-script build
       - name: WordPress Plugin Deploy
         uses: 10up/action-wordpress-plugin-deploy@stable
+        id: deploy
         env:
           SVN_PASSWORD: ${{ secrets.SVN_PASSWORD }}
           SVN_USERNAME: ${{ secrets.SVN_USERNAME }}
           SLUG: multisite-language-switcher
+        with:
+          generate-zip: true
+      - name: Attest build provenance
+        uses: johnbillion/[email protected]
+        with:
+          zip-path: ${{ steps.deploy.outputs.zip-path }}

composer.json

@@ -34,7 +34,7 @@
   },
   "scripts": {
     "test": "vendor/bin/phpunit",
-    "coverage": "php -d xdebug.mode=coverage vendor/bin/phpunit --coverage-html tests/coverage",
+    "coverage": "@php -d xdebug.mode=coverage vendor/bin/phpunit --coverage-html tests/coverage",
     "analyze": "vendor/bin/phpstan analyze",
     "playwright": "npx playwright test",
     "php74": "phpcs -p ./*.php includes/ --standard=vendor/phpcompatibility/php-compatibility/PHPCompatibility --runtime-set testVersion 7.4",