From 506442392c92ef4284b7b4570c82e6f4da2a800e Mon Sep 17 00:00:00 2001
From: KnugiHK <24708955+KnugiHK@users.noreply.github.com>
Date: Sat, 27 Dec 2025 16:53:45 +0800
Subject: [PATCH] Add artifact attestation

---
 .github/workflows/compile-binary.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/.github/workflows/compile-binary.yml b/.github/workflows/compile-binary.yml
index 04f3dcd..fd05173 100644
--- a/.github/workflows/compile-binary.yml
+++ b/.github/workflows/compile-binary.yml
@@ -7,6 +7,9 @@ on:
 
 permissions:
   contents: read
+  id-token: write
+  attestations: write
+
 
 jobs:
   linux:
@@ -28,6 +31,10 @@ jobs:
           --include-data-file=./Whatsapp_Chat_Exporter/whatsapp.html=./Whatsapp_Chat_Exporter/whatsapp.html \
           --assume-yes-for-downloads Whatsapp_Chat_Exporter --output-filename=wtsexporter_linux_x64
         sha256sum wtsexporter_linux_x64
+    - name: Generate artifact attestation
+      uses: actions/attest-build-provenance@v3
+      with:
+        subject-path: ./wtsexporter_linux_x64
     - uses: actions/upload-artifact@v6
       with:
         name: binary-linux
@@ -52,6 +59,10 @@ jobs:
         python -m nuitka --onefile --include-data-file=./Whatsapp_Chat_Exporter/whatsapp.html=./Whatsapp_Chat_Exporter/whatsapp.html --assume-yes-for-downloads Whatsapp_Chat_Exporter --output-filename=wtsexporter 
         copy wtsexporter.exe wtsexporter_x64.exe
         Get-FileHash wtsexporter_x64.exe
+    - name: Generate artifact attestation
+      uses: actions/attest-build-provenance@v3
+      with:
+        subject-path: .\wtsexporter_x64.exe
     - uses: actions/upload-artifact@v6
       with:
         name: binary-windows
@@ -77,6 +88,10 @@ jobs:
           --include-data-file=./Whatsapp_Chat_Exporter/whatsapp.html=./Whatsapp_Chat_Exporter/whatsapp.html \
           --assume-yes-for-downloads Whatsapp_Chat_Exporter --output-filename=wtsexporter_macos_x64 
         shasum -a 256 wtsexporter_macos_x64
+    - name: Generate artifact attestation
+      uses: actions/attest-build-provenance@v3
+      with:
+        subject-path: ./wtsexporter_macos_x64
     - uses: actions/upload-artifact@v6
       with:
         name: binary-macos