Attest provenance

hynek · hynek · commit 261f6c29d6a2 · 2024-05-13T17:48:50.000+02:00
diff --git a/.github/workflows/pypi-package.yml b/.github/workflows/pypi-package.yml
@@ -25,6 +25,8 @@ jobs:
           fetch-depth: 0
 
       - uses: hynek/build-and-inspect-python-package@v2
+        with:
+          attest-build-provenance-github: 'true'
 
   # Upload to Test PyPI on every commit on main.
   release-test-pypi:
