diff --git a/.github/workflows/sub-build-windows.yml b/.github/workflows/sub-build-windows.yml
index 2ae7e452..cd255b4a 100644
--- a/.github/workflows/sub-build-windows.yml
+++ b/.github/workflows/sub-build-windows.yml
@@ -142,7 +142,17 @@ jobs:
           /DROOT_KEY=HKCU
           Templates/installer/nsis-installer.nsi
 
-      - name: Upload artifacts
+      - name: Sign installer
+        uses: Moonshine-IDE/digicert-sign-action@v1.0
+        with:
+          bin-path: Templates/installer/${{ env.app_name }}-Setup.exe
+          sm-host: ${{ secrets.SM_HOST }}
+          sm-api-key: ${{ secrets.SM_API_KEY }}
+          sm-client-cert-file-b64: ${{ secrets.SM_CLIENT_CERT_FILE_B64 }}
+          sm-client-cert-password: ${{ secrets.SM_CLIENT_CERT_PASSWORD }}
+          sm-code-signing-cert-sha1-hash: ${{ secrets.SM_CODE_SIGNING_CERT_SHA1_HASH }}
+
+      - name: Upload installer
         uses: actions/upload-artifact@v3
         with:
           name: ${{ env.app_name }}-Setup