diff --git a/.github/workflows/14-build-attestations.yml b/.github/workflows/14-build-attestations.yml index b34c701..8123ba2 100644 --- a/.github/workflows/14-build-attestations.yml +++ b/.github/workflows/14-build-attestations.yml @@ -45,4 +45,17 @@ jobs: with: # Specify the path to the folder you want to attest subject-path: staging/MyClassLibrary.dll + + # Lets validate the attestation + - name: Validate Attestation + id: validate + run: gh attestation verify staging/MyClassLibrary.dll -R djredman99/githhub-intro-to-actions-demos + + - name: Output Attestation + if: steps.validate.outcome == 'success' + run: echo "The attestation is VERIFIED" >> GITHUB_STEP_SUMMARY + + - name: Output Attestation FAILED + if: steps.validate.outcome == 'failure' + run: echo "The attestation is NOT VERIFIED" >> GITHUB_STEP_SUMMARY \ No newline at end of file