BUILD-9447 Generation attestation for build actions

Author: SamirM-BE

.github/workflows/build.yml

@@ -18,12 +18,15 @@ jobs:
     permissions:
       id-token: write
       contents: write
+      attestations: write
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-      - uses: SonarSource/ci-github-actions/build-poetry@master # dogfood
+      - uses: SonarSource/ci-github-actions/build-poetry@feat/smarini/BUILD-9447
         with:
           sonar-platform: sqc-eu
           deploy-pull-request: true
+          attest-build-provenance: 'true'
+          attest-on-pr: 'true'
 
   promote:
     needs: