Reduce delays in webRTC remote display.

.github/workflows/documentation.yml

@@ -22,6 +22,9 @@ jobs:
   headless-docs:   # Build headless and docs
     permissions:
       contents: write  # Artifact upload and release upload
+      id-token: write
+      attestations: write
+      artifact-metadata: write
     runs-on: ubuntu-latest
     env:
       DEVELOPER_BUILD: ${{ github.event.inputs.developer_build || 'ON' }}
@@ -49,6 +52,11 @@ jobs:
           # Rename from Github PR branch SHA to original branch SHA, if needed.
           mv open3d-*-docs.tar.gz open3d-${GITHUB_SHA}-docs.tar.gz
 
+      - name: Generate docs attestation
+        uses: actions/attest@v4
+        with:
+          subject-path: ${{ github.workspace }}/open3d-${{ github.sha }}-docs.tar.gz
+
       - name: Upload docs
         uses: actions/upload-artifact@v4
         with:

.github/workflows/macos.yml

@@ -29,6 +29,9 @@ jobs:
   MacOS:
     permissions:
       contents: write  # upload
+      id-token: write
+      attestations: write
+      artifact-metadata: write
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
@@ -64,7 +67,8 @@ jobs:
       - name: Install dependencies
         run: |
           brew install ccache glslang spirv-cross
-          # Fix gfortran not found issue
+          # Fix gfortran not found issue. 
+          brew install gcc
           ln -s $(brew --prefix gcc)/bin/gfortran-* /usr/local/bin/gfortran
 
           ccache -M 2G  # See .github/workflows/readme.md for ccache strategy.
@@ -86,6 +90,12 @@ jobs:
           zip -rv "open3d-${OPEN3D_VERSION_FULL}-app-macosx-10_15-${{ runner.arch }}.zip" Open3D.app
           ccache -s
 
+      - name: Generate package attestation
+        if: ${{ env.BUILD_SHARED_LIBS == 'ON' }}
+        uses: actions/attest@v4
+        with:
+          subject-path: build/package/${{ env.DEVEL_PKG_NAME }}
+
       - name: Upload package
         if: ${{ env.BUILD_SHARED_LIBS == 'ON' }}
         uses: actions/upload-artifact@v4
@@ -94,6 +104,12 @@ jobs:
           path: build/package/${{ env.DEVEL_PKG_NAME }}
           if-no-files-found: error
 
+      - name: Generate viewer attestation
+        if: ${{ env.BUILD_SHARED_LIBS == 'OFF' }}
+        uses: actions/attest@v4
+        with:
+          subject-path: build/bin/open3d-*-app-macosx-10_15-${{ runner.arch }}.zip
+
       - name: Upload Open3D viewer app
         uses: actions/upload-artifact@v4
         if: ${{ env.BUILD_SHARED_LIBS == 'OFF' }}
@@ -117,6 +133,9 @@ jobs:
     name: Build wheel
     permissions:
       contents: write  # upload
+      id-token: write
+      attestations: write
+      artifact-metadata: write
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
@@ -184,7 +203,9 @@ jobs:
           install_python_dependencies
 
           # Fix macos-14 arm64 runner image issues, see comments in MacOS job.
-          ln -s $(which gfortran-13) /usr/local/bin/gfortran
+          # brew install gcc is required so that `brew --prefix gcc` resolves;
+          brew install gcc
+          ln -s $(brew --prefix gcc)/bin/gfortran-* /usr/local/bin/gfortran
 
           brew install ccache glslang spirv-cross 
           ccache -M 2G  # See .github/workflows/readme.md for ccache strategy.
@@ -199,6 +220,11 @@ jobs:
           PIP_PKG_NAME="$(basename build/lib/python_package/pip_package/open3d*.whl)"
           echo "PIP_PKG_NAME=$PIP_PKG_NAME" >> $GITHUB_ENV
 
+      - name: Generate wheel attestation
+        uses: actions/attest@v4
+        with:
+          subject-path: build/lib/python_package/pip_package/${{ env.PIP_PKG_NAME }}
+
       - name: Upload wheel
         uses: actions/upload-artifact@v4
         with:

.github/workflows/ubuntu-cuda.yml

@@ -47,6 +47,9 @@ jobs:
     name: Build and run
     permissions:
       contents: write   # upload
+      id-token: write
+      attestations: write
+      artifact-metadata: write
     runs-on: ubuntu-latest
     needs: [skip-check]
     if: needs.skip-check.outputs.skip == 'no'
@@ -151,6 +154,12 @@ jobs:
               "${INSTANCE_NAME}":open3d-devel-linux*.tar.xz "$PWD"
           fi
 
+      - name: Generate package attestation
+        if: ${{ env.BUILD_PACKAGE == 'true' }}
+        uses: actions/attest@v4
+        with:
+          subject-path: ${{ github.workspace }}/open3d-devel-linux*.tar.xz
+
       - name: Upload package
         if: ${{ env.BUILD_PACKAGE == 'true' }}
         uses: actions/upload-artifact@v4

.github/workflows/ubuntu-openblas.yml

@@ -37,6 +37,9 @@ jobs:
   openblas-arm64:
     permissions:
       contents: write  # Release upload
+      id-token: write
+      attestations: write
+      artifact-metadata: write
     runs-on: ubuntu-24.04-arm   # latest
     strategy:
       fail-fast: false
@@ -83,6 +86,11 @@ jobs:
       - name: Docker test
         run: docker/docker_test.sh "${DOCKER_TAG}"
 
+      - name: Generate wheel attestation
+        uses: actions/attest@v4
+        with:
+          subject-path: ${{ github.workspace }}/${{ env.PIP_PKG_NAME }}
+
       - name: Upload wheel to GitHub artifacts
         uses: actions/upload-artifact@v4
         with:

.github/workflows/ubuntu-sycl.yml

@@ -26,6 +26,9 @@ jobs:
   ubuntu-sycl:
     permissions:
       contents: write  # Release upload
+      id-token: write
+      attestations: write
+      artifact-metadata: write
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
@@ -54,6 +57,14 @@ jobs:
             docker/docker_test.sh sycl-static
           fi
 
+      - name: Generate artifact attestation
+        if: ${{ matrix.BUILD_SHARED_LIBS == 'ON' }}
+        uses: actions/attest@v4
+        with:
+          subject-path: |
+            ${{ github.workspace }}/open3d*.whl
+            ${{ github.workspace }}/open3d-devel-*.tar.xz
+
       - name: Upload Python wheel and C++ binary package to GitHub artifacts
         if: ${{ matrix.BUILD_SHARED_LIBS == 'ON' }}
         uses: actions/upload-artifact@v4

.github/workflows/ubuntu-wheel.yml

@@ -26,6 +26,9 @@ jobs:
   build-wheel:
     permissions:
       contents: write  # Release upload
+      id-token: write
+      attestations: write
+      artifact-metadata: write
     name: Build wheel
     runs-on: ubuntu-latest
     strategy:
@@ -88,6 +91,12 @@ jobs:
           PIP_CPU_PKG_NAME="$(basename ${GITHUB_WORKSPACE}/open3d_cpu*.whl)"
           echo "PIP_PKG_NAME=$PIP_PKG_NAME" >> $GITHUB_ENV
           echo "PIP_CPU_PKG_NAME=$PIP_CPU_PKG_NAME" >> $GITHUB_ENV
+      - name: Generate artifact attestation
+        uses: actions/attest@v4
+        with:
+          subject-path: |
+            ${{ github.workspace }}/${{ env.PIP_PKG_NAME }}
+            ${{ github.workspace }}/${{ env.PIP_CPU_PKG_NAME }}
       - name: Upload wheel to GitHub artifacts
         uses: actions/upload-artifact@v4
         with:

.github/workflows/ubuntu.yml

@@ -22,6 +22,9 @@ jobs:
   ubuntu:
     permissions:
       contents: write  # Release upload
+      id-token: write
+      attestations: write
+      artifact-metadata: write
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
@@ -62,15 +65,28 @@ jobs:
           elif [ "${{ matrix.BUILD_SHARED_LIBS }}" = "ON"  ] && [ "${{ env.MLOPS }}" = "ON"  ] && [ "${{ env.DEVELOPER_BUILD }}" = "OFF" ]; then
             docker/docker_test.sh cpu-shared-ml-release
           fi
+      - name: Generate package attestation
+        if: ${{ matrix.BUILD_SHARED_LIBS == 'ON' }}
+        uses: actions/attest@v4
+        with:
+          subject-path: ${{ github.workspace }}/open3d-devel-*.tar.xz
+
       - name: Upload package to GitHub artifacts
-        if: ${{ env.BUILD_SHARED_LIBS == 'ON' }}
+        if: ${{ matrix.BUILD_SHARED_LIBS == 'ON' }}
         uses: actions/upload-artifact@v4
         with:
           name: open3d-devel-linux-x86_64
           path: open3d-devel-*.tar.xz
           if-no-files-found: error
+
+      - name: Generate viewer attestation
+        if: ${{ matrix.BUILD_SHARED_LIBS == 'OFF' }}
+        uses: actions/attest@v4
+        with:
+          subject-path: ${{ github.workspace }}/open3d-viewer-*-Linux.deb
+
       - name: Upload viewer to GitHub artifacts
-        if: ${{ env.BUILD_SHARED_LIBS == 'OFF' }}
+        if: ${{ matrix.BUILD_SHARED_LIBS == 'OFF' }}
         uses: actions/upload-artifact@v4
         with:
           name: open3d-viewer-Linux