diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 9fa8a0e51..f4d0ef255 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -331,6 +331,9 @@ jobs:
              fi
              cosign sign-blob --key cosign.key --output-file "${bin_name}.sig" "${os}/${bin_name}"
            done
+          for f in *.{gz,zip}; do \
+            cosign sign-blob --key cosign.key --output-file "${f}.sig" "${f}"; \
+          done
 
       - uses: release-drafter/release-drafter@v5
         id: release_drafter