diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8d8920b266..8d66a1149f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -120,6 +120,43 @@ jobs:
           path: ./bin/release
           if-no-files-found: error
 
+  binaries:
+    if: ${{ github.event_name != 'pull_request' }}
+    runs-on: ubuntu-latest
+    needs: binary
+    steps:
+      -
+        name: Download artifacts
+        uses: actions/download-artifact@v4
+        with:
+          run-id: '${{ github.run_id }}'
+          path: ./dist
+          merge-multiple: true
+      -
+        name: List artifacts
+        run: |
+          tree -nh ./dist
+      -
+        name: Upload regrouped artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: binaries
+          path: ./dist
+
+  sign-binaries:
+    if: ${{ github.event_name != 'pull_request' }}
+    needs: binaries
+    permissions:
+      id-token: write
+      contents: write
+    uses: docker/desktop-action-private/.github/workflows/sign.yml@9768291eea5de03b2bdbc572ef6c775fa85b2a5c #v2.0.5
+    with:
+      artifacts-name: binaries
+      filter-win: docker-compose-windows*.exe
+      filter-mac: docker-compose-darwin*
+      sign-action-ref: v2.0.5
+    secrets: inherit
+
   test:
     runs-on: ubuntu-latest
     steps:
@@ -147,6 +184,7 @@ jobs:
         with:
           paths: bin/coverage/unit/report.xml       
         if: always()
+
   e2e:
     runs-on: ubuntu-latest
     name: e2e (${{ matrix.mode }}, ${{ matrix.channel }})