diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 6505dbeaa9..10c0af64e3 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -103,6 +103,8 @@ jobs:
             SOURCE_DATE_EPOCH=${{ steps.args.outputs.epoch }}
             CREATED=${{ steps.args.outputs.created }}
             GIT_SHA=${{ steps.args.outputs.sha }}
+          provenance: mode=max
+          sbom: true
 
       - name: Upload the image
         uses: actions/upload-artifact@v7.0.2