updated

Author: dconco

.github/workflows/release.yml

@@ -2,14 +2,14 @@ name: Release
 
 on:
   push:
-    tags:
+    branches:
       - 'v*'
 
 permissions:
   contents: read
 
 env:
-  COMPOSER_FLAGS: "--ansi --no-interaction --no-dev --optimize-autoloader --no-progress --no-suggest --prefer-dist"
+  COMPOSER_FLAGS: "--ansi --no-interaction --no-dev --optimize-autoloader --no-progress --prefer-dist"
 
 jobs:
   build:
@@ -37,13 +37,29 @@ jobs:
 
       - name: Build Phar file
         run: composer run-script compile
+      
+      - name: Generate build provenance attestation
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: '${{ github.workspace }}/composer.phar'
+
+      - name: Create release
+        id: create_release
+        uses: actions/create-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tag_name: ${{ github.ref }}
+          release_name: ${{ github.ref }}
+          draft: true
+          body: TODO
 
-      - name: Upload Release Asset
+      - name: Upload phar
         uses: actions/upload-release-asset@v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
-          upload_url: ${{ github.event.release.upload_url }}
+          upload_url: ${{ steps.create_release.outputs.upload_url }}
           asset_path: ./phpslides.phar
           asset_name: phpslides.phar
           asset_content_type: application/octet-stream