Your tests already record proof. attested keeps it in your CI and gives the pull request a signed receipt instead: the result on this exact commit, every file fingerprinted, and a required check can block the merge without one. Free and open source.