action-wordpress-plugin-attestation

GitHub Action to generate an attestation for the build provenance of a plugin zip file on wordpress.org. Maintained by johnbillion on GitHub, where it has earned 47 stars from the community.

It's actively developed around supply-chain-security, wordpress, github-actions, and is a solid reference for anyone building with these tools.