diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1fb4039..94078ea 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -214,7 +214,7 @@ jobs:
           version="${GITHUB_REF_NAME#v}"
           hash() { sha256sum "$1" | cut -d' ' -f1; }
           base="https://github.com/JacobOptimiza/dev-nav/releases/download/v$version"
-          jq --arg version "$version" \
+          jq --indent 4 --arg version "$version" \
             --arg url_x64 "$base/DevNav-scoop-x64.zip" --arg sha_x64 "$(hash DevNav-scoop-x64.zip)" \
             --arg url_arm64 "$base/DevNav-scoop-arm64.zip" --arg sha_arm64 "$(hash DevNav-scoop-arm64.zip)" \
             '.version = $version | .architecture = {
diff --git a/tests/powershell/ReleaseProvenanceContract.Tests.ps1 b/tests/powershell/ReleaseProvenanceContract.Tests.ps1
index 104f376..c1d14d0 100644
--- a/tests/powershell/ReleaseProvenanceContract.Tests.ps1
+++ b/tests/powershell/ReleaseProvenanceContract.Tests.ps1
@@ -4,6 +4,10 @@ BeforeAll {
 }
 
 Describe 'release provenance publication contract' {
+    It 'generates Scoop manifests with Scoop canonical four-space formatting' {
+        $script:workflow | Should -Match 'jq\s+--indent\s+4\s+--arg version'
+    }
+
     It 'produces a Scorecard-recognizable intoto jsonl artifact per architecture' {
         $script:workflow |
             Should -Match 'DevNav-build-provenance-\$\{\{ matrix\.architecture \}\}\.intoto\.jsonl'