From 67f6eede69540a1e366b3eddbffba24751b4bcc2 Mon Sep 17 00:00:00 2001
From: ian <ianopolous@protonmail.com>
Date: Fri, 3 May 2024 16:44:49 +0100
Subject: [PATCH] sign jar builds

---
 .github/workflows/jar-build.yml | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/jar-build.yml b/.github/workflows/jar-build.yml
index 9fe917a5..789e10f6 100644
--- a/.github/workflows/jar-build.yml
+++ b/.github/workflows/jar-build.yml
@@ -14,9 +14,13 @@ jobs:
         java-version: 17
     - name: Build with Ant
       run: ant -noinput -buildfile build.xml peergos_submodule_sync dist 
-    - name: Upload jar artifact
-      uses: actions/upload-artifact@v2
-      with:
-        name: Peergos.jar
-        path: "./server/Peergos.jar"
-    
+    - name: Sign and upload jar artifact
+        uses: actions/attest-build-provenance@v1.0.0
+        with:
+          subject-path: '${{ github.workspace }}/server/Peergos.jar'
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v3
+        with:
+          name: Peergos.jar
+          path: "./server/Peergos.jar"