diff --git a/.github/workflows/deb.yaml b/.github/workflows/deb.yaml
index 593ad3a..89c2014 100644
--- a/.github/workflows/deb.yaml
+++ b/.github/workflows/deb.yaml
@@ -55,6 +55,10 @@ jobs:
           image: protonmail-bridge:latest
           fail-build: true
           severity-cutoff: critical
+      - name: Upload Anchore scan SARIF report
+        uses: github/codeql-action/upload-sarif@v1
+        with:
+          sarif_file: ${{ steps.scan.outputs.sarif }}
       - name: Push image
         uses: docker/build-push-action@v2
         with: