Added an attestation for standard (latest) builds.

Author: uhop

.github/workflows/build.yml

@@ -25,12 +25,16 @@ jobs:
     name: Node.js ${{matrix.node-version}} on ${{matrix.os}}
     needs: create-release
     runs-on: ${{matrix.os}}
-
     strategy:
       matrix:
         os: [macos-latest, windows-latest, macos-13, windows-11-arm]
         node-version: [20, 22, 23, 24]
 
+    permissions:
+      id-token: write
+      contents: read
+      attestations: write
+
     steps:
       - uses: actions/checkout@v4
         with:
@@ -50,6 +54,10 @@ jobs:
         env:
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
         run: npm run save-to-github
+      - name: Attest
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: '${{ github.workspace }}/build/Release/re2.node'
 
   build-linux-node-20:
     name: Node.js 20 on Bullseye