diff --git a/.github/workflows/docker-push.yml b/.github/workflows/docker-push.yml
index aef66ab..1895d93 100644
--- a/.github/workflows/docker-push.yml
+++ b/.github/workflows/docker-push.yml
@@ -31,7 +31,7 @@ jobs:
         run: |
           TIMESTAMP=$(date +"%Y%m%d%H%M%S")
 
-          docker build -t kiwitcms/postgres:${{ matrix.version }} .
+          docker build --sbom=true --provenance=mode=max -t kiwitcms/postgres:${{ matrix.version }} .
           docker tag kiwitcms/postgres:${{ matrix.version }} kiwitcms/postgres:${{ matrix.version }}-$TIMESTAMP
 
           docker images
diff --git a/.github/workflows/testing.yml b/.github/workflows/testing.yml
index 6edfc3e..76fa9ce 100644
--- a/.github/workflows/testing.yml
+++ b/.github/workflows/testing.yml
@@ -30,7 +30,7 @@ jobs:
       - name: Build kiwitcms/postgres:${{ matrix.version }}
         working-directory: ${{ matrix.version }}
         run: |
-          docker build -t kiwitcms/postgres:${{ matrix.version }} .
+          docker build --sbom=true --provenance=mode=max -t kiwitcms/postgres:${{ matrix.version }} .
 
           docker images