diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index ef171441b..8a4ead221 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -25,6 +25,6 @@ jobs:
         run: go mod download
 
       - name: Run unit and integration tests
-        run: go test -v ./pkg/cmd/release/verify-asset/...
+        run: go test -v ./pkg/cmd/release/verify-asset ./pkg/cmd/attestation/artifact
       - name: Build
         run: go build -v ./cmd/gh
diff --git a/pkg/cmd/attestation/artifact/file_test.go b/pkg/cmd/attestation/artifact/file_test.go
new file mode 100644
index 000000000..ed9e7049a
--- /dev/null
+++ b/pkg/cmd/attestation/artifact/file_test.go
@@ -0,0 +1,23 @@
+package artifact
+
+import (
+	"testing"
+
+	"github.com/cli/cli/v2/pkg/cmd/attestation/test"
+	"github.com/stretchr/testify/require"
+)
+
+func Test_digestLocalFileArtifact_withRealZip(t *testing.T) {
+	// Path to the test artifact
+	artifactPath := test.NormalizeRelativePath("../../attestation/test/data/github_release_artifact.zip")
+
+	// Calculate expected digest using the same algorithm as the function under test
+	expectedDigest := "f7165848f9f5ddc578d7adbd1f566a394169385c73bd88bf60df7e759db8e08d"
+
+	// Call the function under test
+	artifact, err := digestLocalFileArtifact(artifactPath, "sha256")
+	require.NoError(t, err)
+	require.Equal(t, "file://"+artifactPath, artifact.URL)
+	require.Equal(t, expectedDigest, artifact.digest)
+	require.Equal(t, "sha256", artifact.digestAlg)
+}