Add attestation build step

Author: raphaelstolt

.github/workflows/distribute.yml

@@ -11,7 +11,9 @@ jobs:
         runs-on: ubuntu-latest
 
         permissions:
+          id-token: write
           contents: write
+          attestations: write
 
         strategy:
             fail-fast: true
@@ -41,8 +43,13 @@ jobs:
             -   name: Check generated PHAR
                 run: bin/git-user-bend.phar --version
 
-            -   name: Create Release
+            -   name: Create release
                 uses: softprops/action-gh-release@v2
                 if: startsWith(github.ref, 'refs/tags/')
                 with:
                     files: bin/git-user-bend.phar
+
+            -   name: Create attestation
+                uses: actions/attest-build-provenance@v1
+                with:
+                  subject-path: bin/git-user-bend.phar

CHANGELOG.md

@@ -5,6 +5,10 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/) and this p
 
 ## [Unreleased]
 
+### Added
+
+- Attested dist builds.
+
 ## [v1.2.1] - 2023-11-28
 
 ### Added