Write attestations

hynek · Aug 3, 2024 · 1e6cc22 · 1e6cc22
1 parent 5b4c93e
commit 1e6cc22
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/pypi-package.yml b/.github/workflows/pypi-package.yml
@@ -11,6 +11,7 @@ on:
   workflow_dispatch:
 
 permissions:
+  attestations: write
   contents: read
   id-token: write
 
@@ -25,6 +26,8 @@ jobs:
           fetch-depth: 0
 
       - uses: hynek/build-and-inspect-python-package@v2
+        with:
+          attest-build-provenance-github: 'true'
 
   release-test-pypi:
     name: Publish in-dev package to test.pypi.org