diff --git a/.github/workflows/docker-publish-hardened.yaml b/.github/workflows/docker-publish-hardened.yaml
index 0299159d..ac8547df 100644
--- a/.github/workflows/docker-publish-hardened.yaml
+++ b/.github/workflows/docker-publish-hardened.yaml
@@ -243,6 +243,6 @@ jobs:
         uses: actions/attest-build-provenance@v1
         if: (github.event_name == 'schedule' || startsWith(github.ref, 'refs/tags/'))
         with:
-          subject-name: ${{ env.DOCKERHUB_REPO }}
+          subject-name: docker.io/${{ env.DOCKERHUB_REPO }}
           subject-digest: ${{ steps.push-dockerhub.outputs.digest }}
           push-to-registry: true
diff --git a/.github/workflows/docker-publish-rootless.yaml b/.github/workflows/docker-publish-rootless.yaml
index ad335e25..004a4040 100644
--- a/.github/workflows/docker-publish-rootless.yaml
+++ b/.github/workflows/docker-publish-rootless.yaml
@@ -245,6 +245,6 @@ jobs:
         uses: actions/attest-build-provenance@v1
         if: (github.event_name == 'schedule' || startsWith(github.ref, 'refs/tags/'))
         with:
-          subject-name: ${{ env.DOCKERHUB_REPO }}
+          subject-name: docker.io/${{ env.DOCKERHUB_REPO }}
           subject-digest: ${{ steps.push-dockerhub.outputs.digest }}
           push-to-registry: true
diff --git a/.github/workflows/docker-publish.yaml b/.github/workflows/docker-publish.yaml
index 710761e8..6fcc67d6 100644
--- a/.github/workflows/docker-publish.yaml
+++ b/.github/workflows/docker-publish.yaml
@@ -236,6 +236,6 @@ jobs:
         uses: actions/attest-build-provenance@v1
         if: (github.event_name == 'schedule' || startsWith(github.ref, 'refs/tags/'))
         with:
-          subject-name: ${{ env.DOCKERHUB_REPO }}
+          subject-name: docker.io/${{ env.DOCKERHUB_REPO }}
           subject-digest: ${{ steps.push-dockerhub.outputs.digest }}
           push-to-registry: true