diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 81cfc75..22ae729 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -30,8 +30,15 @@ changelog:
     exclude:
       - "^docs:"
       - "^test:"
-dockers:
+dockers_v2:
   - dockerfile: Dockerfile.goreleaser
-    image_templates:
-      - "ghcr.io/publiccodeyml/publiccode-validator-api:{{ .Tag }}"
-      - "ghcr.io/publiccodeyml/publiccode-validator-api:latest"
+    images:
+      - "ghcr.io/publiccodeyml/publiccode-validator-api"
+    tags:
+      - "{{ .Tag }}"
+      - "latest"
+    platforms:
+      - linux/amd64
+    # The release job uses the default docker buildx driver, which cannot
+    # push attestations.
+    sbom: false
diff --git a/Dockerfile.goreleaser b/Dockerfile.goreleaser
index 7cf0ca9..fa8b0f9 100644
--- a/Dockerfile.goreleaser
+++ b/Dockerfile.goreleaser
@@ -7,7 +7,9 @@ FROM alpine:3@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371e
 
 RUN addgroup -S validator && adduser -S -G validator validator
 
-COPY publiccode-validator-api /usr/local/bin/publiccode-validator-api
+# GoReleaser places each binary under a directory named after its platform.
+ARG TARGETPLATFORM
+COPY $TARGETPLATFORM/publiccode-validator-api /usr/local/bin/publiccode-validator-api
 
 USER validator
 ENTRYPOINT ["/usr/local/bin/publiccode-validator-api"]