diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6509ac0..07c7a22 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -22,8 +22,6 @@ jobs:
         uses: actions/setup-go@v3
         with:
           go-version-file: 'go.mod'
-      - name: install syft
-        run: go install github.com/anchore/syft/cmd/syft@latest
       -
         name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v4
diff --git a/.goreleaser.yml b/.goreleaser.yml
index 3e1e8ec..993348f 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -23,9 +23,10 @@ builds:
   - -trimpath
   ldflags: -s -w -X github.com/goark/ml/facade.Version=v{{ .Version }}
 
+source:
+  rlcp: true
 archives:
 -
-  rlcp: true
   format: tar.gz
   format_overrides:
     - goos: windows
@@ -54,9 +55,6 @@ changelog:
       - Merge pull request
       - Merge branch
 
-sboms:
-  - artifacts: archive
-
 snapshot:
   name_template: SNAPSHOT-{{ .Commit }}