diff --git a/.github/workflows/publish-mcp-server.yml b/.github/workflows/publish-mcp-server.yml
index 9e2d33680..b395920e0 100644
--- a/.github/workflows/publish-mcp-server.yml
+++ b/.github/workflows/publish-mcp-server.yml
@@ -129,6 +129,8 @@ jobs:
         with:
           context: examples/mcp_server
           push: true
+          provenance: mode=max
+          sbom: true
           tags: |
             ${{ env.IMAGE_NAME }}:${{ steps.metadata.outputs.version }}
             ${{ env.IMAGE_NAME }}:latest