diff --git a/.github/workflows/test-sigs.sh b/.github/workflows/test-sigs.sh
index 5ad63b0..3636ff5 100755
--- a/.github/workflows/test-sigs.sh
+++ b/.github/workflows/test-sigs.sh
@@ -21,3 +21,7 @@ done
 unset key
 gpg --verify "${METADATA_FILE}.sig"
 
+for f in ghcup-*.json ghcup-*.yaml hls-metadata-*.json ; do
+	gpg --verify "${f}.sig"
+done
+