From ef6cfc88ffe3362c9c14c2434efae80f4756d067 Mon Sep 17 00:00:00 2001
From: alphago9 <zhanghao.tips@gmail.com>
Date: Tue, 31 Mar 2026 14:56:34 +0800
Subject: [PATCH] fix(ci): attest release artifacts directly

---
 .github/workflows/release.yml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c09aeb6..c7f8a11 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,6 +9,7 @@ permissions:
   contents: write
   id-token: write
   attestations: write
+  artifact-metadata: write
 
 concurrency:
   group: release-${{ github.ref }}
@@ -56,7 +57,10 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Attest Release Checksums
+      - name: Attest Release Artifacts
         uses: actions/attest@v4
         with:
-          subject-checksums: src/dist/epusdt_${{ github.ref_name }}_checksums.txt
+          subject-path: |
+            src/dist/*.tar.gz
+            src/dist/*.zip
+            src/dist/*_checksums.txt