[ci] Add artifact attestation to build

Adds a signed build provenance attestations via https://github.com/actions/attest-build-provenance

Author: poteto

.github/workflows/runtime_build_and_test.yml

@@ -284,6 +284,11 @@ jobs:
   build_and_lint:
     name: yarn build and lint
     needs: [runtime_compiler_node_modules_cache]
+    permissions:
+      # Attestation for build: https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds#generating-build-provenance-for-binaries
+      id-token: write
+      contents: read
+      attestations: write
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
@@ -331,7 +336,11 @@ jobs:
         run: yarn lint-build
       - name: Display structure of build
         run: ls -R build
+      - uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: 'build/**/*'
       - name: Archive build
+        id: upload_build
         uses: actions/upload-artifact@v4
         with:
           name: _build_${{ matrix.worker_id }}_${{ matrix.release_channel }}

subject.checksums.txt

@@ -0,0 +1,34 @@
+b63170872efc61a0cc0b78242fa91092ffd1a8e0cccdd22f3ac283338517217f  build/bundle-sizes.json
+1a1cc756ed5e5c9e8cdcfcd5f9436e69f74b045cc31adcc9588d1f23f6224a87  build/facebook-www/VERSION_CLASSIC
+8f774d6f0d8fbcff5b785662f353bbd372cc0e20e1fe6b63a608b7d24ae7c0e9  build/facebook-www/VERSION_MODERN
+8f9c683a75afaf4b7d1bdd3fba2ef2429baa00b6d7b96c453af2f2789b50c3fe  build/facebook-www/shims/ReactBrowserEventEmitter_DO_NOT_USE.js
+da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93  build/oss-experimental/eslint-plugin-react-hooks/LICENSE
+c3b15d97638b5c53a25db828f586aa807edf3b21597246cee365a218fa01cbe6  build/oss-experimental/eslint-plugin-react-hooks/README.md
+16a568170c03e9e8d926a62b8e2a73ee5b8e39f21dfbd7f99e52d918cf20f6fe  build/oss-experimental/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.d.ts
+755b2e8667d2e3d816f716382bfc268b1d1507e2f78001c3f72cfa6e1bc4f274  build/oss-experimental/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.development.js
+9698ce0da30f00f15b4b81d5affbd22bf293a11f3618903d644d6f3cc32f676d  build/oss-experimental/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.production.js
+e9fdead46d7e9b485e9a2233605cd778f7dd5258ce1e810feddccc794f1f1437  build/oss-experimental/eslint-plugin-react-hooks/index.d.ts
+f8bf8df5ea1838b9a9e51b57a4a1e3448119beafac43f202d83e8d8b15c1dc98  build/oss-experimental/eslint-plugin-react-hooks/index.js
+4e703677f852b82649dcc75f592d6a1748e36450643ebb78adae2a4a0fa6c1b8  build/oss-experimental/eslint-plugin-react-hooks/package.json
+da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93  build/oss-stable-semver/eslint-plugin-react-hooks/LICENSE
+c3b15d97638b5c53a25db828f586aa807edf3b21597246cee365a218fa01cbe6  build/oss-stable-semver/eslint-plugin-react-hooks/README.md
+16a568170c03e9e8d926a62b8e2a73ee5b8e39f21dfbd7f99e52d918cf20f6fe  build/oss-stable-semver/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.d.ts
+6e17c673dcbb4afbd0e8e3859b283fbc9e5aab5526b34f0fd1d17316a7379b1e  build/oss-stable-semver/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.development.js
+2a411d5ccfde120c649de77e5c465002995e9616693ac514a03b7657e2b925c7  build/oss-stable-semver/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.production.js
+e9fdead46d7e9b485e9a2233605cd778f7dd5258ce1e810feddccc794f1f1437  build/oss-stable-semver/eslint-plugin-react-hooks/index.d.ts
+f8bf8df5ea1838b9a9e51b57a4a1e3448119beafac43f202d83e8d8b15c1dc98  build/oss-stable-semver/eslint-plugin-react-hooks/index.js
+8caeaec36d8f096f7253573e120d00ce9021d09df5a5fb56bbbbae9be5653619  build/oss-stable-semver/eslint-plugin-react-hooks/package.json
+da6d3703ed11cbe42bd212c725957c98da23cbff1998c05fa4b3d976d1a58e93  build/oss-stable/eslint-plugin-react-hooks/LICENSE
+c3b15d97638b5c53a25db828f586aa807edf3b21597246cee365a218fa01cbe6  build/oss-stable/eslint-plugin-react-hooks/README.md
+16a568170c03e9e8d926a62b8e2a73ee5b8e39f21dfbd7f99e52d918cf20f6fe  build/oss-stable/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.d.ts
+6e17c673dcbb4afbd0e8e3859b283fbc9e5aab5526b34f0fd1d17316a7379b1e  build/oss-stable/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.development.js
+2a411d5ccfde120c649de77e5c465002995e9616693ac514a03b7657e2b925c7  build/oss-stable/eslint-plugin-react-hooks/cjs/eslint-plugin-react-hooks.production.js
+e9fdead46d7e9b485e9a2233605cd778f7dd5258ce1e810feddccc794f1f1437  build/oss-stable/eslint-plugin-react-hooks/index.d.ts
+f8bf8df5ea1838b9a9e51b57a4a1e3448119beafac43f202d83e8d8b15c1dc98  build/oss-stable/eslint-plugin-react-hooks/index.js
+40cd6eab8421bd85593a1355523648f35e4301277950cba1c86bbe88448e9705  build/oss-stable/eslint-plugin-react-hooks/package.json
+a12ce577cf1baaf2bef3511b74515547e7794c87161e43e61f7e04667be53abf  build/react-native/shims/ReactFabric.js
+4b4d133340c64a26f4a86e29fb294512965f389c685bff2afd59d40865999a8a  build/react-native/shims/ReactFeatureFlags.js
+a1926c4e851811345bbe232285643de81c4aa8ee151b295d3f803da4d4ad0796  build/react-native/shims/ReactNative.js
+91f9c548dcae495bf2b35276da8967acfe9f531fb7add429a4916ac3d440414f  build/react-native/shims/ReactNativeTypes.js
+68149b02f4c9a5d220c04028b7b814ecdadac11ad2ff61626f18a907a486b26d  build/react-native/shims/ReactNativeViewConfigRegistry.js
+fc3673db3feb66048686f812ad8331f0f2f7af5732a20ace9bc1ebc6f5b3048a  build/react-native/shims/createReactNativeComponentClass.js