diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index d5f3837..3471b95 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -46,6 +46,12 @@ jobs:
           pnpm --filter @pipelineui/app build
           cp packages/app/nixpacks.toml packages/app/.output
 
+      - name: Attest
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: |
+            packages/app/.output
+
       - name: Upload build artifact
         uses: actions/upload-artifact@v4
         with:
diff --git a/packages/app/nixpacks.toml b/packages/app/nixpacks.toml
index 4db47ff..53771b5 100644
--- a/packages/app/nixpacks.toml
+++ b/packages/app/nixpacks.toml
@@ -2,8 +2,8 @@ providers = ["node"]
 
 [phases.install]
 # Noop command
-cmds = ["mv server/vendor server/node_modules"]
+cmds = [":"]
 
 [phases.build]
 # Noop command
-cmds = [":"]
+cmds = ["mv server/vendor server/node_modules"]