diff --git a/.github/workflows/publish-container.yml b/.github/workflows/publish-container.yml
index dd6fe2bfaa..82c6f4642d 100644
--- a/.github/workflows/publish-container.yml
+++ b/.github/workflows/publish-container.yml
@@ -67,6 +67,8 @@ jobs:
           file: ./deploy/Dockerfile
           platforms: linux/amd64,linux/arm64
           push: true
+          provenance: mode=max
+          sbom: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           build-args: |