diff --git a/.ci/create-pkg.sh b/.ci/create-pkg.sh
index f4448f5..fd30f60 100755
--- a/.ci/create-pkg.sh
+++ b/.ci/create-pkg.sh
@@ -6,8 +6,12 @@ export VERSION="${CIRRUS_TAG:-0}"
 
 mkdir -p .ci/pkg/
 cp .build/arm64-apple-macosx/release/tart .ci/pkg/tart
+codesign --sign "Developer ID Application: Cirrus Labs, Inc. (9M2P8L4D89)" \
+  --options=runtime --deep \
+  --entitlements Resources/tart-prod.entitlements --force \
+  .ci/pkg/tart
 cp Resources/embedded.provisionprofile .ci/pkg/embedded.provisionprofile
-pkgbuild --root .ci/pkg/ --identifier com.github.cirruslabs.tart --version $VERSION \
+pkgbuild --root .ci/pkg/ --identifier com.github.cirruslabs.tart-app --version $VERSION \
   --scripts .ci/pkg/scripts \
   --install-location "/Library/Application Support/Tart" \
   --sign "Developer ID Installer: Cirrus Labs, Inc. (9M2P8L4D89)" \
diff --git a/.goreleaser.yml b/.goreleaser.yml
index 730770c..9119fb7 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -4,6 +4,7 @@ before:
   hooks:
     - .ci/set-version.sh
     - swift build -c release --product tart
+    - ./.ci/create-pkg.sh
 
 builds:
   - builder: prebuilt
@@ -29,6 +30,8 @@ archives:
 
 release:
   prerelease: auto
+  extra_files:
+    - glob: ./.ci/Tart-{{ .Tag }}.pkg
 
 brews:
   - name: tart