Add build attestation

Author: orf

.github/workflows/release.yaml

@@ -25,6 +25,11 @@ jobs:
     name: cargo build
     runs-on: ${{ matrix.os }}
 
+    permissions:
+      id-token: write
+      contents: read
+      attestations: write
+
     steps:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@stable
@@ -39,6 +44,11 @@ jobs:
 
       - run: cp target/${{ matrix.target }}/release/${{ matrix.bin }} ${{ matrix.bin }}
 
+      - name: Attest
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: '${{ github.workspace }}/${{ matrix.bin }}'
+
       - if: matrix.os == 'windows-latest'
         run: | 
           7z a "${{ matrix.target}}.${{ matrix.suffix }}" ${{ matrix.bin }}