diff --git a/.github/workflows/binaries.yml b/.github/workflows/binaries.yml
index 985f91fa5..c008cc7b4 100644
--- a/.github/workflows/binaries.yml
+++ b/.github/workflows/binaries.yml
@@ -133,18 +133,18 @@ jobs:
           $Env:STELLAR_CLI_VERSION = "${{ env.VERSION }}"
           ISCC.exe installer.iss
 
-      - name: Build provenance for attestation (release only)
-        if: github.event_name == 'release'
-        uses: actions/attest-build-provenance@v1
-        with:
-          subject-path: ${{ env.STELLAR_CLI_INSTALLER }}
-
       - name: Upload Artifact
         uses: actions/upload-artifact@v4
         with:
           name: ${{ env.STELLAR_CLI_INSTALLER }}
           path: Output/stellar-installer.exe
 
+      - name: Build provenance for attestation (release only)
+        if: github.event_name == 'release'
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: ${{ env.STELLAR_CLI_INSTALLER }}
+
       - name: Upload to Release (release only)
         if: github.event_name == 'release'
         uses: actions/github-script@v7