From 7c7e91c857cbf8e5c2bf17a8d2d94e78177315f5 Mon Sep 17 00:00:00 2001
From: Valentin Popov <valentin@popov.link>
Date: Thu, 25 Jun 2026 13:07:58 +0400
Subject: build(ci): fail closed on shader provenance

---
 .github/workflows/ci.yml | 2 ++
 1 file changed, 2 insertions(+)

(limited to '.github')

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3ca3066..a91fad1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -112,6 +112,8 @@ jobs:
           echo "DYLD_FALLBACK_LIBRARY_PATH=$DYLD_FALLBACK_LIBRARY_PATH" >> "$GITHUB_ENV"
       - name: Install cargo-deny
         run: cargo install cargo-deny --version 0.19.9 --locked
+      - name: Verify shader provenance
+        run: cargo xtask shader-provenance
       - name: Run canonical CI gate
         run: cargo xtask ci
       - name: Run native Vulkan smoke
-- 
cgit v1.2.3