diff --git a/.github/workflows/build-server-image.yml b/.github/workflows/build-server-image.yml
index 4b3e18e6822..0b9c463419b 100644
--- a/.github/workflows/build-server-image.yml
+++ b/.github/workflows/build-server-image.yml
@@ -9,6 +9,9 @@ on:
       - server/build/Dockerfile.buildenv-fips
       - .github/workflows/build-server-image.yml
 
+env:
+  CHAINCTL_IDENTITY: ee399b4c72dd4e58e3d617f78fc47b74733c9557/922f2d48307d6f5f
+
 jobs:
   build-image:
     runs-on: ubuntu-22.04
@@ -39,6 +42,9 @@ jobs:
   build-image-fips:
     runs-on: ubuntu-22.04
     steps:
+      - uses: chainguard-dev/setup-chainctl@f4ed65b781b048c44d4f033ae854c025c5531c19 # v0.3.2
+        with:
+          identity: ${{ env.CHAINCTL_IDENTITY }}
       - name: buildenv/checkout-repo
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
diff --git a/.github/workflows/dispatch-server-builder-image.yml b/.github/workflows/dispatch-server-builder-image.yml
index 88b05456348..6c82ff7a7f5 100644
--- a/.github/workflows/dispatch-server-builder-image.yml
+++ b/.github/workflows/dispatch-server-builder-image.yml
@@ -11,6 +11,9 @@ on:
         description: "Docker image tag (e.g. v1.2.3 or latest)"
         required: true
 
+env:
+  CHAINCTL_IDENTITY: ee399b4c72dd4e58e3d617f78fc47b74733c9557/922f2d48307d6f5f
+
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
@@ -61,6 +64,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
+      - uses: chainguard-dev/setup-chainctl@f4ed65b781b048c44d4f033ae854c025c5531c19 # v0.3.2
+        with:
+          identity: ${{ env.CHAINCTL_IDENTITY }}
       - name: Checkout code
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #4.2.2
         with: