diff --git a/.chainguard/source.yml b/.chainguard/source.yml
index 19083b4..cd7232a 100644
--- a/.chainguard/source.yml
+++ b/.chainguard/source.yml
@@ -1,5 +1,6 @@
 spec:
   authorities:
+    - keyless:
     - key:
         kms: https://github.com/web-flow.gpg # whitelist / allow GITHUB default GPG key used during merge commits
     - key: