diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 5ab46d9e..1e0d3352 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -23,6 +23,12 @@ jobs:
         id: buildx
         uses: docker/setup-buildx-action@v2
 
+      - name: Setup Cosign
+        uses: sigstore/cosign-installer@7e0881f8fe90b25e305bbf0309761e9314607e25
+
+      - name: Setup Syft
+        uses: ckotzbauer/actions-toolkit/setup-syft@0.15.0
+
       - name: Checkout
         uses: actions/checkout@v3