meshtastic/Meshtastic-Android
1
0
Fork 0
mirror of https://github.com/meshtastic/Meshtastic-Android.git synced 2026-04-20 22:23:37 +00:00
Code Issues Projects Releases Packages Wiki Activity

ci: add build provenance attestation (#2685)

Browse source 
Signed-off-by: James Rich <2199651+jamesarich@users.noreply.github.com>
This commit is contained in:
James Rich 2025-08-11 11:01:54 -05:00 • committed by GitHub
parent 4da518d9bc
commit e0feee7bb8
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 25 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
.github/workflows/release.yml vendored
View file

@ -168,6 +168,10 @@ jobs:
create-github-release:
needs: [ prepare-release-info, build-fdroid, build-google ]
runs-on: ubuntu-latest
permissions:
id-token: write
contents: read
attestations: write
# Only run this job if the input create_github_release is true
if: github.repository == 'meshtastic/Meshtastic-Android' && github.event.inputs.create_github_release == 'true'
steps:
@ -260,3 +264,11 @@ jobs:
asset_path: ./version_info.txt
asset_name: version_info.txt
asset_content_type: text/plain
- name: Attest Build Provenance
uses: actions/attest-build-provenance@v2
with:
subject-path: |
./google-apk-download/app-google-release.apk
./google-aab-download/app-google-release.aab
./fdroid-apk-download/app-fdroid-release.apk