diff --git a/demos/golang/vault/run_occlum_vault_server.sh b/demos/golang/vault/run_occlum_vault_server.sh
index 1ce83a40..9a0cc3dd 100755
--- a/demos/golang/vault/run_occlum_vault_server.sh
+++ b/demos/golang/vault/run_occlum_vault_server.sh
@@ -25,7 +25,8 @@ new_json="$(jq '.resource_limits.user_space_size = "2560MB" |
 echo "${new_json}" > Occlum.json
 
 # 2. Copy executable into Occlum Workspace and build
-cp ../source_code/bin/vault image/bin
+rm -rf image && \
+copy_bom -f ../vault.yaml --root image --include-dir /opt/occlum/etc/template && \
 occlum build
 
 # 3. Run the Hashicorp Vault server listening on "127.0.0.1:8200" 
diff --git a/demos/golang/vault/vault.yaml b/demos/golang/vault/vault.yaml
new file mode 100644
index 00000000..e5c3d3b5
--- /dev/null
+++ b/demos/golang/vault/vault.yaml
@@ -0,0 +1,7 @@
+includes:
+  - base.yaml
+targets:
+  - target: /bin
+    copy:
+      - files:
+        - ../source_code/bin/vault