diff --git a/pkg/binfmt/Makefile b/pkg/binfmt/Makefile
index c306d5e93..c9ce6d9ab 100644
--- a/pkg/binfmt/Makefile
+++ b/pkg/binfmt/Makefile
@@ -23,6 +23,12 @@ push: tag
 	rm -f hash
 	docker rmi $(IMAGE):build || true
 
+sign: tag
+	DOCKER_CONTENT_TRUST=1 docker pull linuxkit/$(IMAGE):$(shell cat hash) || \
+		DOCKER_CONTENT_TRUST=1 docker push linuxkit/$(IMAGE):$(shell cat hash)
+	rm -f hash
+	docker rmi $(IMAGE):build || true
+
 clean:
 	rm -f hash
 	docker rmi $(IMAGE):build || true
diff --git a/pkg/rngd/Makefile b/pkg/rngd/Makefile
index f6d908d83..9f703133b 100644
--- a/pkg/rngd/Makefile
+++ b/pkg/rngd/Makefile
@@ -19,6 +19,12 @@ push: tag
 	rm -f hash
 	docker rmi $(IMAGE):build || true
 
+sign: tag
+	DOCKER_CONTENT_TRUST=1 docker pull linuxkit/$(IMAGE):$(shell cat hash) || \
+		DOCKER_CONTENT_TRUST=1 docker push linuxkit/$(IMAGE):$(shell cat hash)
+	rm -f hash
+	docker rmi $(IMAGE):build || true
+
 clean:
 	rm -f hash
 	docker rmi $(IMAGE):build || true
diff --git a/tools/c-compile/Makefile b/tools/c-compile/Makefile
index 2a143821f..979030fbe 100644
--- a/tools/c-compile/Makefile
+++ b/tools/c-compile/Makefile
@@ -23,6 +23,12 @@ tag: hash
 	docker rmi $(IMAGE):build
 	rm -f hash
 
+sign: tag
+	DOCKER_CONTENT_TRUST=1 docker pull linuxkit/$(IMAGE):$(shell cat hash) || \
+		DOCKER_CONTENT_TRUST=1 docker push linuxkit/$(IMAGE):$(shell cat hash)
+	rm -f hash
+	docker rmi $(IMAGE):build || true
+
 clean:
 	rm -f hash
 
diff --git a/tools/go-compile/Makefile b/tools/go-compile/Makefile
index 3ca4406fb..5d7822285 100644
--- a/tools/go-compile/Makefile
+++ b/tools/go-compile/Makefile
@@ -23,6 +23,12 @@ tag: hash
 	docker rmi $(IMAGE):build
 	rm -f hash
 
+sign: tag
+	DOCKER_CONTENT_TRUST=1 docker pull linuxkit/$(IMAGE):$(shell cat hash) || \
+		DOCKER_CONTENT_TRUST=1 docker push linuxkit/$(IMAGE):$(shell cat hash)
+	rm -f hash
+	docker rmi $(IMAGE):build || true
+
 clean:
 	rm -f hash
 
diff --git a/tools/tini/Makefile b/tools/tini/Makefile
index adacde647..ea5059185 100644
--- a/tools/tini/Makefile
+++ b/tools/tini/Makefile
@@ -19,6 +19,12 @@ push: tag
 	rm -f hash
 	docker rmi $(IMAGE):build || true
 
+sign: tag
+	DOCKER_CONTENT_TRUST=1 docker pull linuxkit/$(IMAGE):$(shell cat hash) || \
+		DOCKER_CONTENT_TRUST=1 docker push linuxkit/$(IMAGE):$(shell cat hash)
+	rm -f hash
+	docker rmi $(IMAGE):build || true
+
 clean:
 	rm -f hash
 	docker rmi $(IMAGE):build || true
diff --git a/tools/toybox-media/Makefile b/tools/toybox-media/Makefile
index c50f62ee4..d79af0ac8 100644
--- a/tools/toybox-media/Makefile
+++ b/tools/toybox-media/Makefile
@@ -19,6 +19,12 @@ push: tag
 	rm -f hash
 	docker rmi $(IMAGE):build || true
 
+sign: tag
+	DOCKER_CONTENT_TRUST=1 docker pull linuxkit/$(IMAGE):$(shell cat hash) || \
+		DOCKER_CONTENT_TRUST=1 docker push linuxkit/$(IMAGE):$(shell cat hash)
+	rm -f hash
+	docker rmi $(IMAGE):build || true
+
 clean:
 	rm -f hash
 	docker rmi $(IMAGE):build || true