diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 64e7390..b97ee04 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -57,6 +57,8 @@ jobs:
               with:
                   context: .
                   push: ${{ github.event_name != 'pull_request' }}
+                  provenance: mode=max
+                  sbom: true
                   platforms: linux/amd64,linux/arm64
                   tags: ${{ steps.meta.outputs.tags }}
                   labels: ${{ steps.meta.outputs.labels }}