diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index f9f8425..f638cdf 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -46,6 +46,8 @@ jobs:
       - run: yarn sign
         if: steps.semantic.outputs.new-release-published == 'true'
         name: Sign bundle
+        env:
+          SIGNATURE_SECRET_KEY: ${{ secrets.SIGNATURE_SECRET_KEY }}
       - uses: dswistowski/surge-sh-action@341bcbd
         name: Deploy to Surge
         if: steps.semantic.outputs.new-release-published == 'true'
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4ed358f..e9d60d5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -36,9 +36,6 @@ jobs:
       #   name: Report code coverage
       #   with:
       #     github-token: ${{ secrets.GITHUB_TOKEN }}
-      - run: yarn sign && cat ./dist/analytics.js
-        env:
-          SIGNATURE_SECRET_KEY: ${{ secrets.SIGNATURE_SECRET_KEY }}
       - uses: 8398a7/action-slack@78391c2
         name: Notify on Slack
         if: always() # Pick up events even if the job fails or is canceled.