ci: Attestation

Signed-off-by: Pun Butrach <pun.butrach@gmail.com>

.github/workflows/release.yml

@@ -56,11 +56,18 @@ jobs:
         run: |
           echo "${{ secrets.KEYSTORE }}" | base64 --decode > "keystore.jks"}
 
-      - name: Release
+      - name: Semantic Release
+        uses: cycjimmy/semantic-release-action@v4
+        id: release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
           KEYSTORE_ENTRY_ALIAS: ${{ secrets.KEYSTORE_ENTRY_ALIAS }}
           KEYSTORE_ENTRY_PASSWORD: ${{ secrets.KEYSTORE_ENTRY_PASSWORD }}
-        run: |
-          npx semantic-release
+          
+      - name: Attest
+        if: steps.release.outputs.new_release_published == 'true'
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-name: 'ReVanced Manager APKMirror Downloader ${{ steps.release.outputs.new_release_git_tag }}'
+          subject-path: build/outputs/apk/release/*.apk