diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index ca8c75a7ed6..60f9adbe24f 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -84,13 +84,15 @@ jobs:
           NETWORK: ${{matrix.network}}
       - uses: actions/upload-artifact@v4
         with:
-          path: bash-completion-*.tar.xz
+          path: |
+            bash-completion-*.tar.xz
+            sha256sums.txt
         if: matrix.dist == 'alpine'
       - name: Upload release assets
         run: |
           set -x
           gh release upload ${{steps.release.outputs.tag_name}} \
-            bash-completion-$(cat version.txt).tar.xz
+            bash-completion-$(cat version.txt).tar.xz sha256sums.txt
         env:
           GH_TOKEN: ${{github.token}}
         if: steps.release.outputs.release_created
diff --git a/.gitignore b/.gitignore
index ab43e5e51d8..42af4e34c79 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,6 +9,7 @@ pytestdebug.log
 /bash-completion-config.cmake
 /bash-completion.pc
 /bash_completion.sh
+/sha256sums.txt
 
 # Files generated by autotools
 Makefile
diff --git a/test/docker/entrypoint.sh b/test/docker/entrypoint.sh
index c64778213af..88ba5ad671f 100755
--- a/test/docker/entrypoint.sh
+++ b/test/docker/entrypoint.sh
@@ -20,3 +20,4 @@ make -j
 xvfb-run make distcheck \
     PYTESTFLAGS="${PYTESTFLAGS---verbose -p no:cacheprovider --numprocesses=auto --dist=loadfile}"
 cp -p bash-completion-*.tar.* "$oldpwd/"
+sha256sum bash-completion-*.tar.* >"$oldpwd/sha256sums.txt"