Use authentihash

.github/workflows/build.yml

@@ -18,10 +18,18 @@ jobs:
           call "C:\Program Files\Microsoft Visual Studio\2022\Enterprise\VC\Auxiliary\Build\vcvars64.bat"
           cl .\hello.cpp
           .\hello.exe
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
+      - name: Install lief
+        run: |
+          pip install lief
+          python -c "import lief, binascii; print('DIGEST=' + binascii.hexlify(lief.parse('hello.exe').authentihash_sha256))" >> $GITHUB_ENV
       - name: Attest
         uses: actions/attest@v1
         with:
-          subject-path: 'hello.exe'
+          subject-name: 'hello.exe'
+          subject-digest: "sha256:${DIGEST}"
           predicate-type: 'https://in-toto.io/attestation/release/v0.1'
           predicate: '{"purl": "git+https://github.com/qstokkink/testghattestations.git@1","releaseId": "1"}'
       - name: Upload Artifacts