# .github/workflows/release.yml
# Confium keyless signing for GitHub releases.
on:
release:
types: [created]
permissions:
id-token: write
contents: write
jobs:
sign:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: confium/action@v1
with:
artifact: release.tar.gz