fix(ci): attest release artifacts directly

2026-03-31 14:56:34 +08:00
parent 04a2629df8
commit ef6cfc88ff
1 changed files with 6 additions and 2 deletions
@@ -9,6 +9,7 @@ permissions:
  contents: write
  id-token: write
  attestations: write
+  artifact-metadata: write

 concurrency:
  group: release-${{ github.ref }}
@@ -56,7 +57,10 @@ jobs:
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

-      - name: Attest Release Checksums
+      - name: Attest Release Artifacts
        uses: actions/attest@v4
        with:
-          subject-checksums: src/dist/epusdt_${{ github.ref_name }}_checksums.txt
+          subject-path: |
+            src/dist/*.tar.gz
+            src/dist/*.zip
+            src/dist/*_checksums.txt