diff --git a/.ci/buildAndPush.sh b/.ci/buildAndPush.sh
index 526ba66d..e28c15e1 100755
--- a/.ci/buildAndPush.sh
+++ b/.ci/buildAndPush.sh
@@ -32,7 +32,7 @@ else # other error
     echo $OUTPUT
 fi
 
-docker buildx build --push --provenance=true \
+docker buildx build --push --provenance=true --sbom=true \
     --platform linux/amd64,linux/arm64 \
     $TAGS \
     --build-arg COMMIT_HASH=$COMMIT_HASH \
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9ae99ac3..22e5fda9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 3.6.2
+
+-   provenance sbom for the Docker Images
+
 ## 3.6.1
 
 -   provenance attestations on the Docker Images
diff --git a/package-lock.json b/package-lock.json
index 5f76f558..00693af6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
     "name": "@nmshd/connector",
-    "version": "3.6.1",
+    "version": "3.6.2",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "@nmshd/connector",
-            "version": "3.6.1",
+            "version": "3.6.2",
             "license": "MIT",
             "workspaces": [
                 ".",
diff --git a/package.json b/package.json
index bd10de61..9c100a6c 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@nmshd/connector",
-    "version": "3.6.1",
+    "version": "3.6.2",
     "private": true,
     "description": "The Enmeshed Connector",
     "homepage": "https://enmeshed.eu/integrate",