diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 95f9d041..25083e07 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -62,6 +62,8 @@ jobs:
       - name: Publish images
         uses: docker/build-push-action@v3
         with:
+          sbom: true
+          provenance: true
           push: true
           builder: ${{ steps.buildx.outputs.name }}
           context: .
diff --git a/Dockerfile b/Dockerfile
index 9cd650f5..2dc73860 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -61,7 +61,7 @@ RUN export CGO_LDFLAGS="-static -fuse-ld=lld" && \
 # Ensure that the binary was cross-compiled correctly to the target platform.
 RUN xx-verify --static /source-controller
 
-FROM alpine:3.16
+FROM alpine:3.17
 
 ARG TARGETPLATFORM
 RUN apk --no-cache add ca-certificates \