diff --git a/.github/workflows/build-push.yml b/.github/workflows/build-push.yml
index ccb0a382..df2ef63e 100644
--- a/.github/workflows/build-push.yml
+++ b/.github/workflows/build-push.yml
@@ -45,7 +45,7 @@ jobs:
       - run: |
           set -Eeuo pipefail
           ANNOTATIONS=$(echo '${{ steps.meta.outputs.labels }}' | sed 's/org.opencontainers.image./annotation-index.org.opencontainers.image./' | tr '\n' ',')
-          echo annotations=${ANNOTATIONS::-1} >> "$GITHUB_OUTPUT"
+          echo "annotations=${ANNOTATIONS::-1}" >> "$GITHUB_OUTPUT"
         id: annotations
       - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
       - uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
@@ -63,7 +63,7 @@ jobs:
           push: ${{ github.event_name != 'merge_group' }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
-          outputs: ${{ steps.annotations.outputs.annotations }}type=image,name=target
+          outputs: type=image,name=target,${{ steps.annotations.outputs.annotations }}
           sbom: true
           provenance: true
           cache-from: type=gha