Attempt to add attestations to build artifacts in CI

Author: madalee-com

.github/workflows/godot-ci.yaml

@@ -7,6 +7,9 @@ on:
       - v*
 permissions:
   contents: write
+  id-token: write
+  contents: read
+  attestations: write
 
 env:
   GODOT_VERSION: 4.6
@@ -41,6 +44,10 @@ jobs:
         with:
           name: win64
           path: build/win64
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v3
+        with:
+          subject-path: build/win64/Godot-Show_win64.exe
       - name: Release
         if: startsWith(github.ref, 'refs/tags/v')
         uses: softprops/action-gh-release@v2
@@ -75,6 +82,10 @@ jobs:
         with:
           name: linux_x86_x64
           path: build/linux_x86_x64
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v3
+        with:
+          subject-path: build/linux_x86_x64/Godot-Show_linux.x86_64
       - name: Release
         if: startsWith(github.ref, 'refs/tags/v')
         uses: softprops/action-gh-release@v2
@@ -142,6 +153,10 @@ jobs:
         with:
           name: macos
           path: build/macos
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v3
+        with:
+          subject-path: build/macos/Godot-Show_macos.zip
       - name: Release
         if: startsWith(github.ref, 'refs/tags/v')
         uses: softprops/action-gh-release@v2