Consider using `attest-build-provenance` action for our builds

[alexander-yevsyukov]

The attest-build-provenance action would be probably necessary for builds publishing to Maven Central.