Update OnPush.yml to add artifact attestation

.github/workflows/OnPush.yml

@@ -91,6 +91,11 @@ jobs:
  cxx_compiler: c++
  asm_compiler: ''
 
+ permissions:
+ id-token: write
+ contents: read
+ attestations: write
+
  steps:
  - name: Checkout
  uses: actions/checkout@v3
@@ -160,6 +165,11 @@ jobs:
  if: runner.os == 'Windows'
  working-directory: ${{github.workspace}}
  run: .\prePacking.bat .\out\build\${{runner.arch}}-${{matrix.build_type}}-${{matrix.compiler}}\bin
+
+ - name: Generate Artifact Attestation
+ uses: actions/attest-build-provenance@v1
+ with:
+ subject-path: ${{github.workspace}}\out\build\${{runner.arch}}-${{matrix.build_type}}-${{matrix.compiler}}\bin\*
 
  - name: Archive Artifacts
  uses: actions/upload-artifact@v4