diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
index 25ae1518..7d7e7a5f 100644
--- a/.github/workflows/master.yml
+++ b/.github/workflows/master.yml
@@ -41,5 +41,6 @@ jobs:
           build-args: |
             SOURCE_DATE_EPOCH=${{ env.SOURCE_DATE_EPOCH }}
             DEBIAN_TAG=${{ env.DEBIAN_TAG }}
+          provenance: mode=max
           outputs: type=registry,rewrite-timestamp=true
           tags: ghcr.io/siemens/kas/${{ matrix.image-name }}
diff --git a/.github/workflows/next.yml b/.github/workflows/next.yml
index b794cb6c..86f1867d 100644
--- a/.github/workflows/next.yml
+++ b/.github/workflows/next.yml
@@ -102,5 +102,6 @@ jobs:
           build-args: |
             SOURCE_DATE_EPOCH=${{ env.SOURCE_DATE_EPOCH }}
             DEBIAN_TAG=${{ env.DEBIAN_TAG }}
+          provenance: mode=max
           outputs: type=registry,rewrite-timestamp=true
           tags: ghcr.io/siemens/kas/${{ matrix.image-name }}:next
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a622161a..ef717409 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -32,6 +32,7 @@ jobs:
           build-args: |
             SOURCE_DATE_EPOCH=${{ env.SOURCE_DATE_EPOCH }}
             DEBIAN_TAG=${{ env.DEBIAN_TAG }}
+          provenance: mode=max
           outputs: type=registry,rewrite-timestamp=true
           tags: |
             ghcr.io/siemens/kas/${{ matrix.image-name }}