Developed a secure install attestation verification feature for the tw93/Mole repository, focusing on strengthening the installation trust chain and mitigating supply-chain risks. The solution enhanced the install.sh script to verify release provenance using the GitHub CLI, anchoring the SHA256SUMS file to GitHub Actions build attestations to prevent tampering. A fallback mechanism maintained compatibility by reverting to SHA256-only verification when the GitHub CLI was unavailable. Additionally, an environment variable allowed deployments to enforce strict attestation requirements. This work leveraged DevOps practices, security principles, and shell scripting expertise to reinforce end-to-end integrity from release creation through installation.