diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 29bba66..95d2a3c 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -40,8 +40,13 @@ jobs:
           ssh-agent -a $SSH_AUTH_SOCK > /dev/null
           ssh-add - <<< "${{ secrets.NEXTMVBOT_SSH_KEY }}"
 
+          echo "${{ secrets.NEXTMVBOT_SIGNING_KEY }}" > ~/.ssh/signing.key
+          chmod 600 ~/.ssh/signing.key
+
           git config --global user.name "nextmv-bot"
           git config --global user.email "tech+gh-nextmv-bot@nextmv.io"
+          git config --global gpg.format ssh
+          git config --global user.signingkey ~/.ssh/signing.key
 
           git clone git@github.com:nextmv-io/nextmv-py.git
 
@@ -52,7 +57,7 @@ jobs:
       - name: commit new version
         run: |
           git add nextmv/__about__.py
-          git commit -m "Bump version to $VERSION"
+          git commit -S -m "Bump version to $VERSION"
           git push
           git tag $VERSION
           git push origin $VERSION