name: SLSA Provenance on: workflow_dispatch: permissions: id-token: write jobs: provenance: name: Generate signed SLSA provenance with Sigstore runs-on: ubuntu-latest steps: - name: Setup node uses: ...