diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index 48b6aa5..e958ad3 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -130,6 +130,7 @@ jobs:
         env:
           DUMBSERVE_USERNAME: ${{ secrets.DUMBSERVE_USERNAME }}
           DUMBSERVE_PASSWORD: ${{ secrets.DUMBSERVE_PASSWORD }}
+          GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }}
 
       - name: generate documentation
         if: matrix.version == 'stable' && (github.repository == 'realaravinth/dumbserve')
diff --git a/scripts/publish.sh b/scripts/publish.sh
index 1a02603..adbdb10 100755
--- a/scripts/publish.sh
+++ b/scripts/publish.sh
@@ -76,9 +76,14 @@ sign() {
 	echo "[*] Signing dist tarball checksum"
 	pushd $TMP_DIR
 	export GPG_TTY=$(tty)
-	find $(pwd)
-	find $TMP_DIR
-	gpg --local-user $KEY --output $TARBALL.asc --sign --detach --armor $TARBALL
+	gpg --verbose \
+		--pinentry-mode loopback \
+		--batch --yes \
+		--passphrase $GPG_PASSWORD \
+		--local-user $KEY \
+		--output $TARBALL.asc \
+		--sign --detach \
+		--armor $TARBALL
 	popd
 }