diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 5cc2588..c4df827 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -61,7 +61,7 @@ jobs:
 
       - name: GPG sign binary
         id: gpg_signing
-        run: venv/bin/python3 gpg_sign.py "nightly-gpg-sign-test" --artifact artichoke/target/release/artichoke
+        run: venv/bin/python3 src/gpg_sign.py "nightly-gpg-sign-test" --artifact artichoke/target/release/artichoke
 
       - name: Verify GPG signature
         run: gpg --batch --verify "${{ steps.gpg_signing.outputs.signature }}" artichoke/target/release/artichoke
@@ -100,7 +100,7 @@ jobs:
         id: apple_codesigning
         if: runner.os == 'macOS'
         run: |
-          venv/bin/python3 macos_sign_and_notarize.py "nightly-apple-codesign-test" \
+          venv/bin/python3 src/macos_sign_and_notarize.py "nightly-apple-codesign-test" \
             --binary "artichoke/target/release/artichoke" \
             --binary "artichoke/target/release/airb" \
             --resource artichoke/LICENSE \
diff --git a/.github/workflows/nightly.yaml b/.github/workflows/nightly.yaml
index 92e4c87..0c58452 100644
--- a/.github/workflows/nightly.yaml
+++ b/.github/workflows/nightly.yaml
@@ -253,7 +253,7 @@ jobs:
         id: apple_codesigning
         if: runner.os == 'macOS'
         run: |
-          ./venv/bin/python3 macos_sign_and_notarize.py "artichoke-nightly-${{ matrix.target }}" \
+          ./venv/bin/python3 src/macos_sign_and_notarize.py "artichoke-nightly-${{ matrix.target }}" \
             --binary "artichoke/target/${{ matrix.target }}/release/artichoke" \
             --binary "artichoke/target/${{ matrix.target }}/release/airb" \
             --resource artichoke/LICENSE \
@@ -269,7 +269,7 @@ jobs:
         id: apple_codesigning_gpg
         if: runner.os == 'macOS'
         run: |
-          python3 gpg_sign.py "artichoke-nightly-${{ matrix.target }}" \
+          python3 src/gpg_sign.py "artichoke-nightly-${{ matrix.target }}" \
             --artifact "${{ steps.apple_codesigning.outputs.asset }}"
 
       - name: Upload release archive
@@ -323,7 +323,7 @@ jobs:
 
       - name: GPG sign archive
         id: gpg_signing
-        run: python3 gpg_sign.py "artichoke-nightly-${{ matrix.target }}" --artifact "${{ steps.build.outputs.asset }}"
+        run: python3 src/gpg_sign.py "artichoke-nightly-${{ matrix.target }}" --artifact "${{ steps.build.outputs.asset }}"
 
       - name: Upload release archive
         uses: ncipollo/release-action@2c591bcc8ecdcd2db72b97d6147f871fcd833ba5 # v1.14.0
@@ -451,7 +451,7 @@ jobs:
 
       - name: GPG sign archive
         id: gpg_signing
-        run: python3 gpg_sign.py "artichoke-nightly-${{ matrix.archive }}" --artifact "${{ steps.build.outputs.asset }}"
+        run: python3 src/gpg_sign.py "artichoke-nightly-${{ matrix.archive }}" --artifact "${{ steps.build.outputs.asset }}"
 
       - name: Upload release archive
         uses: ncipollo/release-action@2c591bcc8ecdcd2db72b97d6147f871fcd833ba5 # v1.14.0
diff --git a/gpg_sign.py b/src/gpg_sign.py
similarity index 100%
rename from gpg_sign.py
rename to src/gpg_sign.py
diff --git a/macos_sign_and_notarize.py b/src/macos_sign_and_notarize.py
similarity index 100%
rename from macos_sign_and_notarize.py
rename to src/macos_sign_and_notarize.py