Attest build artifacts

Author: MacaylaMarvelous81

.builds/ubuntu.yml

@@ -13,6 +13,12 @@ on:
           required: false
           type: string
 
+permissions:
+  id-token: write
+  contents: read
+  attestations: write
+  actions: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -36,8 +42,18 @@ jobs:
         run: chmod +x ./gradlew
       - name: Build
         run: ./gradlew build
-      - name: Upload artifacts
+      - name: Read gradle.properties
+        uses: madhead/[email protected]
+        id: properties
+        with:
+          file: gradle.properties
+          all: true
+      - name: Generate artifact attestation
+        uses: actions/[email protected]
+        with:
+          subject-path: build/libs/${{ steps.properties.outputs.archives_base_name }}-${{ steps.properties.outputs.mod_version }}.jar
+      - name: Upload artifact
         uses: actions/[email protected]
         with:
           name: Artifacts
-          path: build/libs
+          path: build/libs/${{ steps.properties.outputs.archives_base_name }}-${{ steps.properties.outputs.mod_version }}.jar