diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 342b026..ff56979 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -31,8 +31,14 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
 
+      - name: Set up GPG keys
+        run: |
+          echo "${{ secrets.GPG_SIGNING_KEY }}" | gpg --quiet --batch --yes --import
+          echo "echo ${{ secrets.GPG_SIGNING_PASSPHRASE }}" >/tmp/gpg-pinentry
+          chmod 700 /tmp/gpg-pinentry
+
       - name: Download and include package files
-        run: ./addlatest
+        run: gpg-agent --pinentry-program /tmp/gpg-pinentry --daemon ./addlatest
 
       - name: Push changes
         uses: ad-m/github-push-action@v0.6.0
diff --git a/debian/conf/distributions b/debian/conf/distributions
index 77d28d8..debb277 100644
--- a/debian/conf/distributions
+++ b/debian/conf/distributions
@@ -6,3 +6,4 @@ Suite: unstable
 Architectures: amd64
 Components: contrib
 DebOverride: deboverride
+SignWith: 65828D743CEE8B69