diff --git a/.github/workflows/binaries-publish.yaml b/.github/workflows/binaries-publish.yaml
index f76a1807..84f2f1a8 100644
--- a/.github/workflows/binaries-publish.yaml
+++ b/.github/workflows/binaries-publish.yaml
@@ -43,6 +43,11 @@ jobs:
         run: |
           go install github.com/sigstore/cosign/cmd/cosign@latest
 
+      - name: Install Syft
+        working-directory: backend
+        run: |
+          go install github.com/anchore/syft/cmd/syft@latest
+
       - name: Run GoReleaser
         id: releaser
         if: startsWith(github.ref, 'refs/tags/')