ci: add build provenance

mitmproxy · May 3, 2024 · f85bc6e · f85bc6e
1 parent a609601
commit f85bc6e
Showing 1 changed file with 6 additions and 12 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -302,20 +302,14 @@ jobs:
           path: docs/archive
       - uses: actions/download-artifact@v4
         with:
-          name: binaries.windows
+          pattern: binaries.*
+          merge-multiple: true
           path: release/dist
-      - uses: actions/download-artifact@v4
-        with:
-          name: binaries.linux
-          path: release/dist
-      - uses: actions/download-artifact@v4
+      - id: provenance
+        uses: actions/attest-build-provenance@v1
         with:
-          name: binaries.macos-x86_64
-          path: release/dist
-      - uses: actions/download-artifact@v4
-        with:
-          name: binaries.macos-arm64
-          path: release/dist
+          subject-path: 'release/dist/*'
+      - run: mv ${{ steps.provenance.outputs.bundle-path }} release/dist/mitmproxy-${{ github.ref_name }}.sigstore
       - run: ls docs/public
       - run: ls release/dist