diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 4279e33..edb25ce 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -14,6 +14,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - uses: docker/setup-buildx-action@v3
+
       - uses: docker/login-action@v3
         with:
           registry: ghcr.io
@@ -37,6 +39,6 @@ jobs:
       - uses: actions/attest-build-provenance@v1
         with:
           subject-name: ${{ env.IMAGE }}
-          subject-digest: ${{ steps.bake.outputs.digest }}
+          subject-digest: ${{ steps.bake.outputs.metadata.provenance.digest }}
           push-to-registry: true