diff --git a/.github/workflows/build-debug.yaml b/.github/workflows/build-debug.yaml
index f51a707d34..907bc51007 100644
--- a/.github/workflows/build-debug.yaml
+++ b/.github/workflows/build-debug.yaml
@@ -69,7 +69,7 @@ jobs:
       - name: Build
         if: success()
         run: ./gradlew --no-daemon app:assembleAlphaRelease
-          
+
       - name: Upload Aritfact (universal)
         uses: actions/upload-artifact@v7
         if: ${{  success() }}
diff --git a/.github/workflows/build-pre-release.yaml b/.github/workflows/build-pre-release.yaml
index 185df7402a..e7f04ebb03 100644
--- a/.github/workflows/build-pre-release.yaml
+++ b/.github/workflows/build-pre-release.yaml
@@ -8,6 +8,10 @@ on:
 jobs:
   BuildPreRelease:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      attestations: write
+      contents: write
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v6
@@ -68,6 +72,11 @@ jobs:
         if: success()
         run: ./gradlew --no-daemon app:assembleAlphaRelease
 
+      - name: Generate Artifact Attestation
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: app/build/outputs/apk/alpha/release/*.apk
+
       # Delete old Prerelease-alpha
       - uses: dev-drprasad/delete-tag-and-release@v1.1
         with:
diff --git a/.github/workflows/build-release.yaml b/.github/workflows/build-release.yaml
index 41beb49499..90774d326c 100644
--- a/.github/workflows/build-release.yaml
+++ b/.github/workflows/build-release.yaml
@@ -10,6 +10,10 @@ on:
 jobs:
   BuildRelease:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      attestations: write
+      contents: write
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v6
@@ -107,6 +111,11 @@ jobs:
         if: success()
         run: ./gradlew --no-daemon app:assembleMetaRelease
 
+      - name: Generate Artifact Attestation
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: app/build/outputs/apk/meta/release/*.apk
+
       - name: Tag Repo
         uses: richardsimko/update-tag@v1
         with: