diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 50a7030bd..f98d9b60c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -256,6 +256,7 @@ jobs:
             cryptomator_*.dsc
             cryptomator_*.orig.tar.xz
             cryptomator_*.debian.tar.xz
+            cryptomator_*_source.buildinfo
             cryptomator_*_source.changes
             cryptomator_*_amd64.deb
 
@@ -271,6 +272,10 @@ jobs:
         run: |
           sudo apt-get update
           sudo apt-get install dput
+      - name: import public key
+        run: curl -sSL ${GPG_PUBLIC_KEY_URL} | gpg --import -
+        env:
+          GPG_PUBLIC_KEY_URL: https://gist.githubusercontent.com/cryptobot/211111cf092037490275f39d408f461a/raw/E6E6A235.asc
       - name: download linux-deb-package
         uses: actions/download-artifact@v2
         with: