From 4b1dab8b276ccf6182b52b954e346aaea2922ea0 Mon Sep 17 00:00:00 2001
From: Taiki Endo <te316e89@gmail.com>
Date: Sat, 4 Jul 2026 02:20:56 +0900
Subject: [PATCH] Use artifact attestations verification for cargo-binstall

---
 tools/codegen/base/cargo-binstall.json | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/tools/codegen/base/cargo-binstall.json b/tools/codegen/base/cargo-binstall.json
index ede41704..ca31180d 100644
--- a/tools/codegen/base/cargo-binstall.json
+++ b/tools/codegen/base/cargo-binstall.json
@@ -6,7 +6,11 @@
   "asset_name": "${package}-${rust_target}.zip",
   "version_range": "latest",
   "signing": {
-    "kind": "minisign-binstall"
+    "kind": {
+      "gh-attestation": {
+        "signer-workflow": "cargo-bins/cargo-binstall/.github/workflows/release-cli.yml"
+      }
+    }
   },
   "platform": {
     "x86_64_linux_musl": {