diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 5efc343..6a977b0 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -51,6 +51,8 @@ jobs:
           file: ./Dockerfile
           target: ${{ matrix.flavor }}
           push: true
+          sbom: true
+          provenance: mode=max
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=registry,ref=harbor.pollinger.dev/build-cache/latex-build-container:${{ matrix.flavor }}