diff --git a/scripts/signing-setup.sh b/scripts/signing-setup.sh
index 12500b0e..2d5c5d88 100755
--- a/scripts/signing-setup.sh
+++ b/scripts/signing-setup.sh
@@ -5,6 +5,8 @@ set -euo pipefail
 ENCRYPT_KEY="${1}"
 TEMP_KEY="$(mktemp)"
 
+trap "rm -rf ${TEMP_KEY} 2>/dev/null" INT TERM EXIT
+
 echo "${ENCRYPT_KEY:?}" > "${TEMP_KEY}"
 
 function decrypt() {