This repository is a thin GitHub Actions composite action that serves as a wrapper around `actions/attest`. It provides a user-friendly interface for generating signed build provenance attestations for workflow artifacts, delegating all actual logic to the underlying `actions/attest` action. The action.yml defines inputs (subject-path, subject-digest, etc.) and outputs (bundle-path, attestation-id, etc.) and passes them directly to the pinned version of `actions/attest`. There is no custom code; the entire implementation is a single composite step. The CI workflow tests the action by running it with a dummy subject digest. The repository is actively maintained with dependabot and CI, but it offers no reusable components or novel engineering patterns.