feat: Add binary attestation

matter-labs · Jan 7, 2025 · 071efb3 · 071efb3
1 parent 49b627d
commit 071efb3
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -26,6 +26,9 @@ jobs:
       VERSION: ${{ steps.extract_version.outputs.VERSION }}
 
   build:
+    permissions:
+      id-token: write
+      attestations: write
     name: build release
     strategy:
       matrix:
@@ -97,6 +100,11 @@ jobs:
           name: anvil-zksync-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.arch }}.tar.gz
           path: anvil-zksync-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.arch }}.tar.gz
 
+      - name: Binaries attestation
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: target/release/anvil-zksync
+
   draft-release:
     name: draft release
     needs: [build, extract-version]

diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
@@ -11,6 +11,11 @@ on:
 
 jobs:
   test:
+    # TODO removeme
+    permissions:
+      id-token: write
+      attestations: write
+
     name: unit-tests
     strategy:
       matrix:
@@ -31,3 +36,13 @@ jobs:
 
     - name: Run tests
       run: cargo nextest run
+
+    # TODO removeme
+    - name: Build release
+      run: cargo build --release 
+
+    # TODO removeme
+    - name: Binaries attestation
+      uses: actions/attest-build-provenance@v2
+      with:
+        subject-path: target/release/anvil-zksync