From 94875fe0471ac433c13f677a390914020481f41b Mon Sep 17 00:00:00 2001
From: Patrick Gaskin <patrick@pgaskin.net>
Date: Sat, 6 Dec 2025 20:35:56 -0500
Subject: [PATCH] Attest release artifact

---
 .github/workflows/release.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 743300b..43aa6c5 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -25,6 +25,11 @@ jobs:
       with:
         entrypoint: make
         args: all koboroot
+    - name: Attest
+      uses: actions/attest-build-provenance@v3
+      with:
+        subject-path: |
+          KoboRoot.tgz
     - name: Create draft release
       uses: actions/github-script@v8
       id: draft_release