Verify attestation for specific tag (#48)

Author: tangrufus

action.yml

@@ -91,10 +91,11 @@ runs:
 
     - name: Verify Attestation
       if: ${{ inputs.verify-attestation == 'true' }}
-      run: gh attestation verify --repo typisttech/php-matrix php-matrix.tar.gz
+      run: gh release verify-asset --repo typisttech/php-matrix ${TAG} php-matrix.tar.gz
       shell: bash
       working-directory: ${{ github.action_path }}
       env:
+        TAG: ${{ inputs.version || '' }}
         GH_TOKEN: ${{ inputs.github-token }}
 
     - name: Unarchive the binary