diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 05332e6..a8865b6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -77,20 +77,8 @@ jobs:
           name: release-binaries
           path: builds/
 
-  provenance:
-    needs: build
-    if: startsWith(github.ref, 'refs/tags/v')
-    permissions:
-      id-token: write
-      contents: write
-      actions: read
-    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
-    with:
-      base64-subjects: "${{ needs.build.outputs.hashes }}"
-      upload-assets: false
-
   release:
-    needs: [build, provenance]
+    needs: build
     if: startsWith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-latest
     permissions:
@@ -115,3 +103,15 @@ jobs:
           files: builds/*
           body_path: _release.md
           draft: true
+
+  provenance:
+    needs: [build, release]
+    if: startsWith(github.ref, 'refs/tags/v')
+    permissions:
+      id-token: write
+      contents: write
+      actions: read
+    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
+    with:
+      base64-subjects: "${{ needs.build.outputs.hashes }}"
+      upload-assets: true