diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 69678ce..0401e44 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -50,6 +50,8 @@ jobs:
           platforms: linux/amd64,linux/arm64/v8
           cache-from: type=registry,ref=ghcr.io/${{ github.repository_owner }}/cache/symfony:${{ inputs.version }}-${{ inputs.variant }}
           cache-to: type=registry,mode=max,ref=ghcr.io/${{ github.repository_owner }}/cache/symfony:${{ inputs.version }}-${{ inputs.variant }}
+          provenance: true
+          sbom: true
           push: true
           tags: |
             ${{ inputs.tags }}