From 8901ab45c5394aaba2c3c9abf417faa4cb98487f Mon Sep 17 00:00:00 2001
From: GrantBirki <grantbirki@github.com>
Date: Wed, 22 May 2024 14:21:43 -0700
Subject: [PATCH 1/2] bump version

---
 Gemfile.lock   | 2 +-
 lib/version.rb | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Gemfile.lock b/Gemfile.lock
index 110f229..5e70e64 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    entitlements-app (0.3.2)
+    entitlements-app (0.3.3)
       concurrent-ruby (= 1.1.9)
       faraday (~> 2.0)
       net-ldap (~> 0.17)
diff --git a/lib/version.rb b/lib/version.rb
index 5dbb0fc..81862a2 100644
--- a/lib/version.rb
+++ b/lib/version.rb
@@ -2,6 +2,6 @@
 
 module Entitlements
   module Version
-    VERSION = "0.3.2"
+    VERSION = "0.3.3"
   end
 end

From 08696423d8178abe998207ad45c1907fa8e67be6 Mon Sep 17 00:00:00 2001
From: GrantBirki <grantbirki@github.com>
Date: Wed, 22 May 2024 14:23:40 -0700
Subject: [PATCH 2/2] publish build attestations for the `entitlements-app` gem

---
 .github/workflows/release.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c8a0bc1..e30645f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,6 +11,8 @@ on:
 permissions:
   contents: write
   packages: write
+  id-token: write
+  attestations: write
 
 jobs:
   release:
@@ -39,6 +41,10 @@ jobs:
         # builds the gem and saves the version to GITHUB_ENV
       - name: build
         run: echo "GEM_VERSION=$(gem build ${{ env.GEM_NAME }}.gemspec 2>&1 | grep Version | cut -d':' -f 2 | tr -d " \t\n\r")" >> $GITHUB_ENV
+      
+      - uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: "${{ env.GEM_NAME }}-${{ env.GEM_VERSION }}.gem"
 
       - name: publish to GitHub packages
         run: |