diff --git a/.github/workflows/desktop-build.yml b/.github/workflows/desktop-build.yml
index 895bb8d6a..ff78d2893 100644
--- a/.github/workflows/desktop-build.yml
+++ b/.github/workflows/desktop-build.yml
@@ -212,6 +212,7 @@ jobs:
         with:
           subject-path: ${{steps.build.outputs.path}}
           subject-name: ${{steps.build.outputs.name}}
+          subject-digest: sha256:${{ steps.upload_artifact.outputs.artifact-digest }}
 
       - name: Verify binary attestation
         if: steps.attestation.outcome == 'success'