diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 058bea8..33ccf46 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -43,6 +43,8 @@ jobs:
         run: |
           set -euo pipefail
           echo "hashes=$(sha256sum ./rsd | base64 -w0)" >> "$GITHUB_OUTPUT"
+      - name: Generate SBOM via Syft
+        uses: anchore/sbom-action@e8d2a6937ecead383dfe75190d104edd1f9c5751
   provenance:
     needs:
       - build