diff --git a/.github/workflows/release-sha256.yml b/.github/workflows/release-sha256.yml
new file mode 100644
index 0000000..acd559d
--- /dev/null
+++ b/.github/workflows/release-sha256.yml
@@ -0,0 +1,23 @@
+name: Add SHA256 to Release
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  attach-sha256:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Download Source Code
+        uses: actions/checkout@v4
+
+      - name: Generate SHA256
+        run: |
+          sha256sum setup_harden_debian_ubuntu.sh > setup_harden_debian_ubuntu.sh.sha256
+
+      - name: Upload SHA256 to Release
+        uses: softprops/action-gh-release@v1
+        with:
+          files: setup_harden_debian_ubuntu.sh.sha256
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}