Enable attestation of artifact in release workflow

Author: jozefizso

.github/workflows/release.yml

@@ -6,6 +6,7 @@ on:
 
 permissions:
   id-token: write
+  attestations: write
   contents: write
 
 env:
@@ -49,6 +50,12 @@ jobs:
     - name: pack
       run: dotnet pack --no-build --no-restore -o dist
 
+    - name: attestation
+      uses: actions/attest-build-provenance@v3
+      with:
+        subject-path: 'dist/*.nupkg'
+        show-summary: true
+
     - name: publish artifact
       uses: actions/upload-artifact@v5
       with: