ci: attest output after signing

rxri · web-flow · commit 6aeea42826e8 · 2025-08-14T15:35:57.000+02:00
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -76,13 +76,6 @@ jobs:
           GOARCH: ${{ matrix.arch }}
           CGO_ENABLED: 0
 
-      - name: Attest output
-        uses: actions/attest-build-provenance@v2
-        if: env.IS_UNIX == 'true' || env.IS_WIN == 'true'
-        with:
-          subject-path: "./spicetify${{ matrix.os == 'windows' && '.exe' || '' }}"
-          subject-name: "spicetify v${{ env.TAG }} (${{ matrix.os }}, ${{ (matrix.os == 'windows' && matrix.arch == 'amd64' && 'x64') || (matrix.os == 'windows' && matrix.arch == '386' && 'x32') || matrix.arch }})"
-
       - name: Upload Artifact for Signing
         if: env.IS_WIN == 'true'
         id: upload-artifact-for-signing
@@ -108,6 +101,13 @@ jobs:
         run: |
           cp ./signed/spicetify.exe ./spicetify.exe
 
+      - name: Attest output
+        uses: actions/attest-build-provenance@v2
+        if: env.IS_UNIX == 'true' || env.IS_WIN == 'true'
+        with:
+          subject-path: "./spicetify${{ matrix.os == 'windows' && '.exe' || '' }}"
+          subject-name: "spicetify v${{ env.TAG }} (${{ matrix.os }}, ${{ (matrix.os == 'windows' && matrix.arch == 'amd64' && 'x64') || (matrix.os == 'windows' && matrix.arch == '386' && 'x32') || matrix.arch }})"
+
       - name: 7z - .tar
         if: env.IS_UNIX == 'true'
         uses: edgarrc/action-7z@v1
