mirror of
https://github.com/j178/prek.git
synced 2026-04-25 02:11:36 +02:00
dbca90425f
Closes #1493 Adds [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) to the release workflow so consumers can verify artifacts were built by CI: ```bash gh attestation verify <artifact> --repo j178/prek ``` GitHub already generates release attestations that verify file integrity (checksums), but build provenance additionally proves the artifacts were produced by the CI workflow rather than uploaded manually.