diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..699ef08
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,8 @@
+.github
+.idea
+.claude
+CLAUDE.md
+README.md
+LICENSE
+Dockerfile
+docker-bake.hcl
diff --git a/Dockerfile b/Dockerfile
index dbeac8e..7a5d2cd 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,16 @@
+FROM --platform=${BUILDPLATFORM} tonistiigi/xx:1.9.0 AS xx
+
 FROM --platform=${BUILDPLATFORM} golang:1.24.5 AS builder
+COPY --from=xx / /
+RUN xx-verify --setup
 WORKDIR $GOPATH/src/github.com/docker/compose-bridge-transformer
+COPY go.mod go.sum ./
+RUN go mod download
 COPY . .
-RUN go build -o /go/bin/transform
+ARG TARGETOS TARGETARCH TARGETVARIANT
+RUN CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH GOARM=${TARGETVARIANT#v} \
+    go build -o /go/bin/transform && \
+    xx-verify --static /go/bin/transform
 
 FROM scratch AS transformer
 LABEL com.docker.compose.bridge=transformation