diff --git a/.github/workflows/generate-srcinfo.yml b/.github/workflows/generate-srcinfo.yml
index 8203ae0a..99af3427 100644
--- a/.github/workflows/generate-srcinfo.yml
+++ b/.github/workflows/generate-srcinfo.yml
@@ -92,7 +92,7 @@ jobs:
         run: |
           msys2-sbom create srcinfo.json.gz sbom.cdx.json
           ./bin/grype sbom:sbom.cdx.json -o cyclonedx-json=sbom.vuln.cdx.json -o json=sbom.grype.json
-          msys2-sbom fixup sbom.vuln.cdx.json --grype-json sbom.grype.json
+          msys2-sbom fixup sbom.vuln.cdx.json --grype-json sbom.grype.json --srcinfo-cache srcinfo.json.gz
 
       - uses: actions/upload-artifact@v4
         with: