diff --git a/src/main/scala/sbtghactions/GenerativePlugin.scala b/src/main/scala/sbtghactions/GenerativePlugin.scala
index 6e74eb2..3cf9495 100644
--- a/src/main/scala/sbtghactions/GenerativePlugin.scala
+++ b/src/main/scala/sbtghactions/GenerativePlugin.scala
@@ -203,6 +203,7 @@ ${indent(rendered.mkString("\n"), 1)}"""
 
   def compilePermissionScope(permissionScope: PermissionScope): String = permissionScope match {
     case PermissionScope.Actions => "actions"
+    case PermissionScope.Attestations => "attestations"
     case PermissionScope.Checks => "checks"
     case PermissionScope.Contents => "contents"
     case PermissionScope.Deployments => "deployments"
diff --git a/src/main/scala/sbtghactions/PermissionScope.scala b/src/main/scala/sbtghactions/PermissionScope.scala
index 214628f..250204a 100644
--- a/src/main/scala/sbtghactions/PermissionScope.scala
+++ b/src/main/scala/sbtghactions/PermissionScope.scala
@@ -32,6 +32,7 @@ sealed trait PermissionScope extends Product with Serializable
 
 object PermissionScope {
   case object Actions extends PermissionScope
+  case object Attestations extends PermissionScope
   case object Checks extends PermissionScope
   case object Contents extends PermissionScope
   case object Deployments extends PermissionScope