diff --git a/.github/workflows/release.signed.yml b/.github/workflows/release.signed.yml
new file mode 100644
index 0000000..5abc5d6
--- /dev/null
+++ b/.github/workflows/release.signed.yml
@@ -0,0 +1,41 @@
+name: Release
+
+on: 
+  workflow_dispatch:
+  push:
+    tags:
+      - '**'
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Setup .NET
+      uses: actions/setup-dotnet@v4
+      with:
+        dotnet-version: |
+          8.0.x
+
+    - name: Materialize Signing Key
+      id: write_sign_key_file
+      uses: timheuer/base64-to-file@v1
+      with:
+        fileName: 'MyKeys.snk'
+        encodedString: ${{ secrets.SIGNING_KEY }}
+
+    - name: Restore dependencies
+      run: dotnet restore
+    - name: Build
+      run: dotnet build -c Release --no-restore
+
+    - name: Package 
+      run: dotnet pack -c Release --no-build --property:PackageOutputPath=../nupkgs
+    - name: Push to Nuget
+      run: dotnet nuget push "./nupkgs/*.nupkg" --source "https://api.nuget.org/v3/index.json" --api-key ${{ secrets.NUGETPUBLISHKEY }}
diff --git a/RBush.sln b/RBush.sln
index 026510d..9cc0c3d 100644
--- a/RBush.sln
+++ b/RBush.sln
@@ -8,7 +8,7 @@ EndProject
 Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = ".root", ".root", "{6EA781FE-7457-4266-93E4-6C2751DCB4CF}"
 	ProjectSection(SolutionItems) = preProject
 		.editorconfig = .editorconfig
-		.github\workflows\build.yml = .github\workflows\build.yml
+		.gitignore = .gitignore
 		.github\dependabot.yml = .github\dependabot.yml
 		Directory.Build.props = Directory.Build.props
 		Directory.Packages.props = Directory.Packages.props
@@ -17,6 +17,13 @@ Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = ".root", ".root", "{6EA781FE
 EndProject
 Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "RBush.Test", "RBush.Test\RBush.Test.csproj", "{C2CDDC6C-046F-44C1-86F5-9FA742133895}"
 EndProject
+Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "workflows", "workflows", "{A51C2CD9-38D1-41E6-8603-986B2A4B08EE}"
+	ProjectSection(SolutionItems) = preProject
+		.github\workflows\build.yml = .github\workflows\build.yml
+		.github\workflows\release.signed.yml = .github\workflows\release.signed.yml
+		.github\workflows\release.yml = .github\workflows\release.yml
+	EndProjectSection
+EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 		Debug|Any CPU = Debug|Any CPU
@@ -35,6 +42,9 @@ Global
 	GlobalSection(SolutionProperties) = preSolution
 		HideSolutionNode = FALSE
 	EndGlobalSection
+	GlobalSection(NestedProjects) = preSolution
+		{A51C2CD9-38D1-41E6-8603-986B2A4B08EE} = {6EA781FE-7457-4266-93E4-6C2751DCB4CF}
+	EndGlobalSection
 	GlobalSection(ExtensibilityGlobals) = postSolution
 		SolutionGuid = {94682DB2-A4CF-4B98-AA57-EBF3038CCD97}
 	EndGlobalSection
diff --git a/RBush/RBush.csproj b/RBush/RBush.csproj
index d30ea6e..82ce56b 100644
--- a/RBush/RBush.csproj
+++ b/RBush/RBush.csproj
@@ -23,14 +23,14 @@
 	<GenerateDocumentationFile>true</GenerateDocumentationFile>
   </PropertyGroup>
 
-  <ItemGroup>
-	<None Include="..\readme.md" Pack="true" PackagePath="\" />
-  </ItemGroup>
+  <PropertyGroup Label="Signing" Condition="Exists('../MyKeys.snk')">
+	<SignAssembly>true</SignAssembly>
+	<AssemblyOriginatorKeyFile>../MyKeys.snk</AssemblyOriginatorKeyFile>
+	<PackageId>RBush.Signed</PackageId>
+  </PropertyGroup>
 
   <ItemGroup>
-	<AssemblyAttribute Include="System.Runtime.CompilerServices.InternalsVisibleTo">
-	  <_Parameter1>RBush.Test</_Parameter1>
-	</AssemblyAttribute>
+	<None Include="..\readme.md" Pack="true" PackagePath="\" />
   </ItemGroup>
 
   <ItemGroup>