diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index fa354ee358..ce94a6e073 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -175,6 +175,8 @@ jobs:
           file: ${{ env.DOCKERFILE_PATH }}
           platforms: ${{ env.DOCKER_PLATFORMS }}
           push: true
+          provenance: mode=max
+          sbom: true
           tags: ${{ steps.resolve.outputs.tags }}
           build-args: |
             BRANCH=${{ matrix.branch }}