Add the Attestation object to the session

warehouse/attestations/services.py

@@ -140,15 +140,15 @@ def generate_provenance(
         provenance = Provenance(attestation_bundles=[attestation_bundle])
 
         for attestation in attestations:
-            database_attestation = DatabaseAttestation(
-                file=file,
-                attestation_file_blake2_digest=hashlib.blake2b(
-                    attestation.model_dump_json().encode("utf-8")
-                ).hexdigest(),
+            self.db.add(
+                DatabaseAttestation(
+                    file=file,
+                    attestation_file_blake2_digest=hashlib.blake2b(
+                        attestation.model_dump_json().encode("utf-8")
+                    ).hexdigest(),
+                )
             )
 
-            file.attestations.append(database_attestation)
-
         return provenance
 
     def get_provenance_digest(self, file: File) -> str | None:
@@ -241,6 +241,7 @@ def parse_attestations(
     def generate_provenance(
         self, request: Request, file: File, attestations: list[Attestation]
     ) -> Provenance | None:
+
         # Generate the provenance object.
         provenance = self._build_provenance_object(request.oidc_publisher, attestations)
 
@@ -276,15 +277,14 @@ def _persist_attestations(
                 database_attestation = DatabaseAttestation(
                     file=file, attestation_file_blake2_digest=attestation_digest
                 )
+                self.db.add(database_attestation)
 
                 self.storage.store(
                     database_attestation.attestation_path,
                     tmp_file.name,
                     meta=None,
                 )
 
-                file.attestations.append(database_attestation)
-
     def _build_provenance_object(
         self, oidc_publisher: OIDCPublisher, attestations: list[Attestation]
     ) -> Provenance | None: