diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 1787b38..379482b 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -74,6 +74,12 @@ jobs:
           context: .
           file: ./Containerfile
           push: true
+          # SLSA provenance + SBOM attestations are stored as separate
+          # manifests in the manifest list and show up in the GHCR UI as
+          # 'unknown/unknown' platform — pure noise for a project without
+          # an attestation consumer. Skip both.
+          provenance: false
+          sbom: false
           build-args: |
             RIPTIDE_VERSION=${{ steps.ver.outputs.version }}
           tags: |