diff --git a/action.yml b/action.yml
index 0e79264e44..07999f145f 100644
--- a/action.yml
+++ b/action.yml
@@ -246,10 +246,32 @@ runs:
     - name: Sign
       shell: bash
       if: ${{ inputs.armbian_pgp_password != '' }}
+      env:
+        ARMBIAN_PGP_PASSWORD: ${{ inputs.armbian_pgp_password }}
       run: |
-        printf '%s' "${{ inputs.armbian_pgp_password }}" | \
-        gpg --passphrase-fd 0 --armor --detach-sign --pinentry-mode loopback --batch --yes \
-        build/output/images/*.img*.xz
+        set -euo pipefail
+
+        # Sign whatever the build actually produced. The glob used to be
+        # *.img*.xz, which is only the classic compressed raw image: an
+        # image-output-iso build emits a .iso and image-output-qcow2 emits an
+        # uncompressed .img.qcow2, so the glob matched nothing, gpg received the
+        # literal pattern and the job died with "can't open ... No such file".
+        mapfile -t images < <(find build/output/images -maxdepth 1 -type f \
+          \( -name '*.img*.xz' -o -name '*.iso' -o -name '*.qcow2' \) | sort)
+
+        if [[ ${#images[@]} -eq 0 ]]; then
+          echo "::error::Sign: no image artifacts found in build/output/images"
+          ls -la build/output/images || true
+          exit 1
+        fi
+
+        # One gpg call per file: --detach-sign takes a single input, and this
+        # way each artifact gets its own .asc.
+        for image in "${images[@]}"; do
+          echo "Signing $(basename "${image}")"
+          printf '%s' "${ARMBIAN_PGP_PASSWORD}" | \
+            gpg --passphrase-fd 0 --armor --detach-sign --pinentry-mode loopback --batch --yes "${image}"
+        done
 
     - name: "Generate release assets manifest"
       shell: bash