diff --git a/script/publish-repo.sh b/script/publish-repo.sh
index 1743a7b..395d8c2 100755
--- a/script/publish-repo.sh
+++ b/script/publish-repo.sh
@@ -9,7 +9,10 @@ REMOTE_DIR="/var/www/rpm/fedora/${FEDORA_VERSION}/x86_64"
 # sign each rpm with the imported gpg key
 for rpm in "${RPM_DIR}"/*.rpm; do
     echo "signing ${rpm}..."
-    rpm --addsign "${rpm}"
+    if ! rpm --addsign "${rpm}" 2>&1; then
+        echo "failed to sign ${rpm}" >&2
+        exit 1
+    fi
 done
 
 install --directory --mode 700 ~/.ssh