diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 413b396..cb1c1c6 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -27,3 +27,5 @@ jobs:
           tags: |
             ghcr.io/${{ github.repository }}:${{ steps.split.outputs.tag }}
             ghcr.io/${{ github.repository }}:latest
+          sbom: 'true'
+          provenance: 'true'