diff --git a/.goreleaser.checksum.sh b/.goreleaser.checksum.sh
new file mode 100644
index 0000000..042f0a2
--- /dev/null
+++ b/.goreleaser.checksum.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+
+set -e
+
+if [ -z "$1" ]; then
+  echo "usage: $0 <path>"
+  exit 1
+fi
+
+shasum -a 256 "$1" | cut -d' ' -f1 > "$1".sha256
\ No newline at end of file
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index d6bdc14..8519b15 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -68,6 +68,10 @@ builds:
   hooks:
     post:
       - cmd: tar -cJf {{ .Path }}.xz {{ .Path }}
+        env:
+          - XZ_OPT=-9
+      - cmd: .goreleaser.checksum.sh {{ .Path }}
+      - cmd: .goreleaser.checksum.sh {{ .Path }}.xz
 
 blobs:
   -