diff --git a/.chainguard/source.yaml b/.chainguard/source.yaml
index 619c8b328..bd773a512 100644
--- a/.chainguard/source.yaml
+++ b/.chainguard/source.yaml
@@ -11,6 +11,8 @@ spec:
             subject: https://github.com/chainguard-dev/malcontent/.github/workflows/release.yaml@refs/heads/main
           - issuer: https://token.actions.githubusercontent.com
             subject: https://github.com/chainguard-dev/malcontent/.github/workflows/third-party.yaml@refs/heads/main
+          - issuer: https://token.actions.githubusercontent.com
+            subject: https://github.com/chainguard-dev/malcontent/.github/workflows/version.yaml@refs/heads/main
     - key:
         # allow commits signed by GitHub, e.g. the UI
         kms: https://github.com/web-flow.gpg