diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c2ccc22..8635990 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -48,4 +48,6 @@ jobs:
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           no-cache: true
+          provenance: mode=max
+          sbom: true
           push: ${{ github.ref == 'refs/heads/main' }}