feat: setup attestation for plugin

davisshaver · Dec 12, 2024 · 5432c2d · 5432c2d
1 parent 0eb1788
commit 5432c2d
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.github/workflows/generate-zip.yml b/.github/workflows/generate-zip.yml
@@ -8,6 +8,13 @@ jobs:
     build:
         runs-on: ubuntu-latest
 
+        permissions:
+          attestations: write
+          contents: read
+          id-token: write
+
+        timeout-minutes: 70
+
         steps:
             - name: Checkout code
               uses: actions/checkout@v4
@@ -51,9 +58,15 @@ jobs:
                   args: unzip -qq wp-farcaster.zip -d wp-farcaster
 
             - name: Upload plugin to WP.org
+              id: deploy
               uses: 10up/[email protected]
               env:
                   SVN_PASSWORD: ${{ secrets.SVN_PASSWORD }}
                   SVN_USERNAME: ${{ secrets.SVN_USERNAME }}
                   SLUG: wp-farcaster
                   BUILD_DIR: ./wp-farcaster
+
+            - name: Attest build provenance
+              uses: johnbillion/[email protected]
+              with:
+                zip-path: ${{ steps.deploy.outputs.zip-path }}