diff --git a/.github/workflows/sign.yml b/.github/workflows/sign.yml
new file mode 100644
index 0000000..161ae58
--- /dev/null
+++ b/.github/workflows/sign.yml
@@ -0,0 +1,25 @@
+name: Sign
+
+on:
+  push:
+    tags:        
+      - '*'           # Push events to every tag not containing /
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+    - uses: actions/setup-node@v3
+      with:
+        node-version: 18.x
+        cache: 'npm'
+    - run: npm install
+    - run: npm run lint
+    - run: npm run sign:ff
+      env:
+        WEB_EXT_API_KEY: ${{ secrets.JWT_ISSUER }}
+        WEB_EXT_API_SECRET: ${{ secrets.JWT_SECRET }}
+
+
+
diff --git a/package.json b/package.json
index 78ed1b6..17b5f8a 100644
--- a/package.json
+++ b/package.json
@@ -5,6 +5,7 @@
   "main": "index.js",
   "scripts": {
     "build:ff": "web-ext build --ignore-files *.gif --overwrite-dest",
+    "sign:ff": "web-ext sign",
     "test": "echo \"Error: no test specified\" && exit 1",
     "lint": "eslint src/**/*.js && web-ext lint",
     "lint_fix": "eslint --fix src/**/*.js"