diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml
index 8dfd7f4..533b96d 100644
--- a/.gitea/workflows/release.yaml
+++ b/.gitea/workflows/release.yaml
@@ -1,4 +1,4 @@
-name: "Release"
+name: Release
 
 on:
   push:
@@ -15,7 +15,24 @@ jobs:
     - uses: actions/checkout@v6.0.2
       with:
         fetch-depth: 0
+    - name: Install curl
+      run: apt-get update && apt-get install --yes curl
+    - name: Install syft
+      env:
+        SYFT_VERSION: "1.41.1" # renovate: datasource=github-releases depName=anchore/syft
+      run: |
+        OS="$(uname | tr '[:upper:]' '[:lower:]')"
+        ARCH="$(dpkg --print-architecture)"
+        curl \
+          --fail \
+          --location \
+          --silent \
+          --output syft_${SYFT_VERSION}_${OS}_${ARCH}.deb \
+            "https://github.com/anchore/syft/releases/download/v${SYFT_VERSION}/syft_${SYFT_VERSION}_${OS}_${ARCH}.deb"
+        dpkg -i syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
+        rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
     - uses: docker/setup-qemu-action@v3.7.0
+    - uses: docker/setup-buildx-action@v3.12.0
     - uses: actions/setup-go@v6.2.0
       with:
         go-version: stable