From dd193c4084f7d4135db3547cedaba41d83c48ba7 Mon Sep 17 00:00:00 2001
From: squidfunk <martin.donath@squidfunk.com>
Date: Thu, 18 Dec 2025 11:43:37 +0100
Subject: [PATCH] chore: only create attestations during release workflow

Signed-off-by: squidfunk <martin.donath@squidfunk.com>
---
 .github/workflows/build.yml   | 4 ++++
 .github/workflows/release.yml | 1 +
 2 files changed, 5 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 04ca6b4..c05de90 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -35,6 +35,9 @@ on:
       ref:
         required: true
         type: string
+      attestations:
+        required: true
+        type: boolean
 
 permissions:
   attestations: write # Required for attestations
@@ -111,6 +114,7 @@ jobs:
             -DestinationPath artifacts/mono-${{ matrix.target }}.zip
 
       - name: Create artifact attestation
+        if: ${{ inputs.attestations == true }}
         uses: actions/attest-build-provenance@v1
         with:
           show-summary: false
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7023876..ffd6337 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -44,6 +44,7 @@ jobs:
     uses: ./.github/workflows/build.yml
     with:
       ref: ${{ github.event.pull_request.merge_commit_sha }}
+      attestations: true
 
   tag:
     name: Create tag