From a16f4bff954b3a15ce4ef5fc16c3bb332450ba8a Mon Sep 17 00:00:00 2001
From: Pun Butrach <pun.butrach@gmail.com>
Date: Sun, 15 Jun 2025 18:12:46 +0700
Subject: [PATCH] Backport Bubble Tea changes (#5546)

Signed-off-by: Pun Butrach <pun.butrach@gmail.com>
---
 .github/workflows/release_update.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/release_update.yml b/.github/workflows/release_update.yml
index d92eb5a1cd..f696064585 100644
--- a/.github/workflows/release_update.yml
+++ b/.github/workflows/release_update.yml
@@ -23,6 +23,9 @@ on:
 jobs:
   build-release-apk:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      attestations: write
     steps:
       - uses: actions/checkout@v4
         with:
@@ -47,6 +50,10 @@ jobs:
         run: ./gradlew assembleLawnWithQuickstepGithubRelease
       - name: Rename artifact
         run: mv build/outputs/apk/**/**/*.apk "${{ github.event.inputs.artifactName }}"
+      - name: Attest
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: ${{ github.event.inputs.artifactName }}
       - name: Upload artifact
         uses: actions/upload-artifact@v4
         with: