Generate artifact attestation.

Author: dlemstra

.github/workflows/release.yml

@@ -42,13 +42,14 @@ jobs:
     permissions:
       contents: write
       id-token: write
+      attestations: write
 
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1
-        name: Download executables
+      - name: Download executables
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1
         with:
           path: ${{github.workspace}}/Artifacts
           merge-multiple: true
@@ -67,6 +68,13 @@ jobs:
         run: |
           powershell -Command "Compress-Archive -Path 'ColorProfiles','Configs','Installer','OpenCL','PerlMagick','Tools' -DestinationPath 'files.zip'"
 
+      - name: Generate artifact attestation
+        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 #v4.1.0
+        with:
+          subject-path: |
+            ${{github.workspace}}/Artifacts/Configure.*
+            ${{github.workspace}}/files.zip
+
       - name: Set version
         shell: bash
         run: echo "VERSION=$(date +'%Y.%m.%d.%H%M')" >> $GITHUB_ENV