diff --git a/.github/workflows/02-sign.yml b/.github/workflows/02-sign.yml
index cb68792..dd8894b 100644
--- a/.github/workflows/02-sign.yml
+++ b/.github/workflows/02-sign.yml
@@ -128,9 +128,12 @@ jobs:
         run: |
           mkdir -p ~/.gnupg
           echo "$GPG_PRIVATE_KEY" | gpg --batch --quiet --import > /dev/null 2>&1 || true
+          FINGERPRINT=$(gpg --batch --list-secret-keys --with-colons 2>/dev/null \
+            | awk -F: '/^fpr/ { print $10; exit }')
           git config --global commit.gpgSign true
           git config --global gpg.program gpg
           git config --global gpg.exectimeout 180
+          git config --global user.signingkey "$FINGERPRINT"
           git config --global user.name  "github-actions[bot]"
           git config --global user.email "github-actions[bot]@users.noreply.github.com"