Attest を追加

Author: s1204IT

.github/workflows/build.yml

@@ -22,6 +22,8 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      id-token: write
+      attestations: write
     steps:
 
       - name: Checkout
@@ -86,6 +88,11 @@ jobs:
             cp -f app/build/outputs/bundle/debug/app-debug.aab ${{ env.repo }}-${{ env.version }}@${{ env.commit }}.aab
           fi
 
+      - name: Attest
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: ${{ env.repo }}-${{ env.version }}*.a*
+
       - name: Upload APK
         uses: actions/upload-artifact@v4
         with: