diff --git a/.github/workflows/pypi_build_publish_template.yaml b/.github/workflows/pypi_build_publish_template.yaml
index 9b79156486..f2e715aae1 100644
--- a/.github/workflows/pypi_build_publish_template.yaml
+++ b/.github/workflows/pypi_build_publish_template.yaml
@@ -32,5 +32,13 @@ jobs:
           awk "/(${{ inputs.wmcore_component }}$)|(${{ inputs.wmcore_component }},)/ {print \$1}" requirements.wmcore.txt > requirements.txt
       - name: Build sdist
         run: python3 setup.py clean sdist
+      - name: List contents before attestation
+        run: |
+          ls ${{ github.workspace }}
+          ls ${{ github.workspace }}/dist
+      - name: Attest package
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: '${{ github.workspace }}/dist/${{ inputs.wmcore_component }}-*'
       - name: Upload package distribution to PyPi
         uses: pypa/gh-action-pypi-publish@release/v1