diff --git a/internal/pipe/nix/testdata/TestRunPipe/deps_build.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/deps_build.nix.golden
index a03786cd5..7974cf4d2 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/deps_build.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/deps_build.nix.golden
@@ -56,6 +56,8 @@ pkgs.stdenv.mkDerivation {
 
   meta = {
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/deps_publish.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/deps_publish.nix.golden
index 9389b726d..a8efc1425 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/deps_publish.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/deps_publish.nix.golden
@@ -56,6 +56,8 @@ pkgs.stdenv.mkDerivation {
 
   meta = {
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/extra-install_build.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/extra-install_build.nix.golden
index 45bf7d895..d78aff728 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/extra-install_build.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/extra-install_build.nix.golden
@@ -57,6 +57,8 @@ pkgs.stdenv.mkDerivation {
 
   meta = {
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/extra-install_publish.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/extra-install_publish.nix.golden
index fee8678b0..c9d694f90 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/extra-install_publish.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/extra-install_publish.nix.golden
@@ -57,6 +57,8 @@ pkgs.stdenv.mkDerivation {
 
   meta = {
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/minimal_build.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/minimal_build.nix.golden
index 90316ab75..7ae78b12d 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/minimal_build.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/minimal_build.nix.golden
@@ -49,6 +49,8 @@ pkgs.stdenv.mkDerivation {
 
   meta = {
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/minimal_publish.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/minimal_publish.nix.golden
index 9c6272e65..ba68c1468 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/minimal_publish.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/minimal_publish.nix.golden
@@ -49,6 +49,8 @@ pkgs.stdenv.mkDerivation {
 
   meta = {
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/open-pr_build.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/open-pr_build.nix.golden
index 4da575978..43c4c3ee6 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/open-pr_build.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/open-pr_build.nix.golden
@@ -52,6 +52,8 @@ pkgs.stdenv.mkDerivation {
     homepage = "https://goreleaser.com";
     license = lib.licenses.mit;
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/open-pr_publish.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/open-pr_publish.nix.golden
index 016779485..0ddbf0c88 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/open-pr_publish.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/open-pr_publish.nix.golden
@@ -52,6 +52,8 @@ pkgs.stdenv.mkDerivation {
     homepage = "https://goreleaser.com";
     license = lib.licenses.mit;
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/partial_build.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/partial_build.nix.golden
index 270527213..d4a5b9f0b 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/partial_build.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/partial_build.nix.golden
@@ -39,6 +39,8 @@ pkgs.stdenv.mkDerivation {
 
   meta = {
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "x86_64-darwin"
       "x86_64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/partial_publish.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/partial_publish.nix.golden
index 0fb07025b..dbdab0260 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/partial_publish.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/partial_publish.nix.golden
@@ -39,6 +39,8 @@ pkgs.stdenv.mkDerivation {
 
   meta = {
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "x86_64-darwin"
       "x86_64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/skip-upload-auto_build.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/skip-upload-auto_build.nix.golden
index 13829a87d..b47ff6da9 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/skip-upload-auto_build.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/skip-upload-auto_build.nix.golden
@@ -49,6 +49,8 @@ pkgs.stdenv.mkDerivation {
 
   meta = {
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/skip-upload_build.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/skip-upload_build.nix.golden
index 13829a87d..b47ff6da9 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/skip-upload_build.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/skip-upload_build.nix.golden
@@ -49,6 +49,8 @@ pkgs.stdenv.mkDerivation {
 
   meta = {
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/unibin-replaces_build.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/unibin-replaces_build.nix.golden
index 388669cef..471a47bd3 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/unibin-replaces_build.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/unibin-replaces_build.nix.golden
@@ -48,6 +48,8 @@ pkgs.stdenv.mkDerivation {
     homepage = "https://goreleaser.com";
     license = lib.licenses.mit;
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/unibin-replaces_publish.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/unibin-replaces_publish.nix.golden
index 7beb6a81a..2154ea9fa 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/unibin-replaces_publish.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/unibin-replaces_publish.nix.golden
@@ -48,6 +48,8 @@ pkgs.stdenv.mkDerivation {
     homepage = "https://goreleaser.com";
     license = lib.licenses.mit;
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/wrapped-in-dir_build.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/wrapped-in-dir_build.nix.golden
index 39429103d..fa2316759 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/wrapped-in-dir_build.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/wrapped-in-dir_build.nix.golden
@@ -52,6 +52,8 @@ pkgs.stdenv.mkDerivation {
     homepage = "https://goreleaser.com";
     license = lib.licenses.mit;
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/wrapped-in-dir_publish.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/wrapped-in-dir_publish.nix.golden
index b9531935e..e301e7493 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/wrapped-in-dir_publish.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/wrapped-in-dir_publish.nix.golden
@@ -52,6 +52,8 @@ pkgs.stdenv.mkDerivation {
     homepage = "https://goreleaser.com";
     license = lib.licenses.mit;
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/zip-with-dependencies_build.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/zip-with-dependencies_build.nix.golden
index 976f48696..951e5777d 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/zip-with-dependencies_build.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/zip-with-dependencies_build.nix.golden
@@ -53,6 +53,8 @@ pkgs.stdenv.mkDerivation {
     homepage = "https://goreleaser.com";
     license = lib.licenses.mit;
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/zip-with-dependencies_publish.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/zip-with-dependencies_publish.nix.golden
index 0b90497ff..915cbea97 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/zip-with-dependencies_publish.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/zip-with-dependencies_publish.nix.golden
@@ -53,6 +53,8 @@ pkgs.stdenv.mkDerivation {
     homepage = "https://goreleaser.com";
     license = lib.licenses.mit;
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/zip_build.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/zip_build.nix.golden
index d7f56426d..5c784c476 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/zip_build.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/zip_build.nix.golden
@@ -51,6 +51,8 @@ pkgs.stdenv.mkDerivation {
     homepage = "https://goreleaser.com";
     license = lib.licenses.mit;
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/testdata/TestRunPipe/zip_publish.nix.golden b/internal/pipe/nix/testdata/TestRunPipe/zip_publish.nix.golden
index 0e27df4b7..94224c21e 100644
--- a/internal/pipe/nix/testdata/TestRunPipe/zip_publish.nix.golden
+++ b/internal/pipe/nix/testdata/TestRunPipe/zip_publish.nix.golden
@@ -51,6 +51,8 @@ pkgs.stdenv.mkDerivation {
     homepage = "https://goreleaser.com";
     license = lib.licenses.mit;
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       "aarch64-darwin"
       "aarch64-linux"
diff --git a/internal/pipe/nix/tmpl.nix b/internal/pipe/nix/tmpl.nix
index b1a672877..e3b7314b9 100644
--- a/internal/pipe/nix/tmpl.nix
+++ b/internal/pipe/nix/tmpl.nix
@@ -102,6 +102,8 @@ pkgs.stdenv.mkDerivation {
     license = lib.licenses.{{ . }};
     {{- end }}
 
+    sourceProvenance = [ lib.sourceTypes.binaryNativeCode ];
+
     platforms = [
       {{- range $index, $plat := .Platforms }}
       "{{ . }}"