Artifact signing

Artifact signing to be compliant with OSSF scorecard policy
intel · Jun 19, 2024 · 1da011b · 1da011b
1 parent 04fab91
commit 1da011b
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml
@@ -6,6 +6,8 @@ name: Build extension
 on: [push]
 permissions:
   contents: read
+  id-token: write
+  attestations: write
 
 jobs:
   build:
@@ -30,6 +32,10 @@ jobs:
         with:
           name: vscode-tcf-debug.vsix
           path: vscode-tcf-debug/*vsix
+      - name: Attest Build Provenance
+        uses: actions/attest-build-provenance@897ed5eab6ed058a474202017ada7f40bfa52940 # v1.0.0
+        with:
+          subject-path: 'vscode-tcf-debug.vsix'
       - name: Run tests
         run: |
           cd tests