From 43e544f60ea835808d8fe764b99f047e2493e0e5 Mon Sep 17 00:00:00 2001
From: Igor Aleksanov <popzxc@yandex.ru>
Date: Tue, 7 Jan 2025 12:32:55 +0400
Subject: [PATCH] feat: Add binary attestation (#511)

---
 .github/workflows/release.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ebfb1d3b..0f4f73e9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -26,6 +26,9 @@ jobs:
       VERSION: ${{ steps.extract_version.outputs.VERSION }}
 
   build:
+    permissions:
+      id-token: write
+      attestations: write
     name: build release
     strategy:
       matrix:
@@ -97,6 +100,11 @@ jobs:
           name: anvil-zksync-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.arch }}.tar.gz
           path: anvil-zksync-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.arch }}.tar.gz
 
+      - name: Binaries attestation
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: target/release/anvil-zksync
+
   draft-release:
     name: draft release
     needs: [build, extract-version]