diff --git a/.travis.yml b/.travis.yml
index b167328..cc32fe1 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -7,8 +7,13 @@ cache:
 install: true
 script: "./mvnw clean install"
 after_success:
-- "./travis-coveralls-report.sh"
-- '[[ $TRAVIS_BRANCH == "master" ]] && ./travis-deploy.sh'
+- "./travis-ci/travis-coveralls-report.sh"
+- "./travis-ci/travis-deploy.sh"
 env:
   global:
-    secure: jKTenQ9C2eoL+kchzdekj375h4naZ0776hVkuZxcejT2m/dMIKP4X4WXYzIY1U1cPcCgHRk5IgZ3qUCQ74+pGDGjut7uYKmZOu1rZ8m1jvt0jbrmDs4N5mL0EiXKkju6jPKcEK5kgM2QEN0y2aEnDVwNTfdIQaAGcpA0Ib1M15Vlizvso5COnBhRzK7ZXs4DRGIvDbEOHW715pM+xHvNGQPaBxCaT+ofHRROQ+O+g9SGkSM5aHtRFhq3Mw0k1OIxRkF/m8D0O6O8gg7HlRZAMY7SXfccvz+egMPzFam4GjfYzdPfHzMBY46BOB1Mn0Y4V2nS6hYrl4EQRgdlibPbynRZzl4xZIWciOW9jXWC/7sbDApAov7UQzLmdxxvQbE6M9O8YfMnB4GDNjnpa9eqqVPOLr5/beQJ6YRfOz+KT50CiHm7eWPJb9Ye6jbMAXBknl3CqIwkK+z4/gENwH2aPoTnYqWlSdCoSNOVlKz18HcIGVDBMf2N27nSUOdqxPQE7XSlu5GhEG2FSRg0mzvs8n2fqf/qszaHn1b+1pKshgomBU2KyyF/OEXvSXaZxj2GpybwxDTcTKLDkfuWT1nWNXg5ftDWX4e+iPQAbj/l/m2pmbQ0zLsg6MzffYG7vFPkA1rvL9qBbaIDJEEnest8cFe//76B7jSE/1jT/9zc7vE=
+	# CI_DEPLOY_PASSWORD for oss sonatype
+  - secure: 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
+	# CI_DEPLOY_GPG_KEYNAME
+  - secure: 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
+	# CI_DEPLOY_GPG_PASSPHRASE
+  - secure: bcg75qSvg9X1k/ILDj6vuZ36H0eEA9xhvfIbaZ+BBJqfdIpZJheB6c/MD+sAbeU2gYgH6afbmOHct/PG5BnL/C7WHyASKEDT1Qe0svVfDDME0YyZYj7nPWdu8QjtefsuP7YTddeW0pDz58fNIz/V1JvsIend4zUqL9FrRQ0hkLGUgqrpgh/0X6MGVTC0JBOIhd2iylkkL+M2CV/KunIzF0ZbII9oWu0AnHeh+iVbZ3iR4BaSRUNuxmwLadXyb8fGP1ku+JwpEmseqwCbBABDwKfFbh3N9m3udZaBU5ukmfaeBu3qb7l9j9MSjhiFxT66K64QI1NGrMZ58jQLousjIKV2AtTc4MFbQJnxO4uQISgss6e6V4U81SZ1qAv1KL9v+FIkC/Amo8YFjuWspJKJXaGe0w0QXveB6bo87sSmdRJFwdN94tSBn2KYkeaFADiFh/ZyWStpfYJgzW6ejBnfz863SkNjUX9vCtKcx264Ss+IAatomxUxr1DBQhDvATstURIDCdPeWgRxxwxKXAwR/0tlEhs2PTeNScxlf3ZynkA2AYOTh0I5ZFDz8BZDaYPIUsxbQbiRqN9MaStYCey9KRjd3u+1cF4kqUFHv47mDHr0QXec5dA2qWbQaow9M43FNKnE8y1sKha27O6HO0zOgsxB5K1oK/F2gl6K33H6Cys=
diff --git a/builder/pom.xml b/builder/pom.xml
index cb1c4a2..e534c30 100644
--- a/builder/pom.xml
+++ b/builder/pom.xml
@@ -24,9 +24,9 @@
     </issueManagement>
 
     <scm>
-        <connection>scm:git:git@github.com:kemitix/kemitix-checkstyle-ruleset.git</connection>
+        <url>https://github.com/kemitix/kemitix-checkstyle-ruleset</url>
+        <connection>scm:git:git://github.com/kemitix/kemitix-checkstyle-ruleset.git</connection>
         <developerConnection>scm:git:git@github.com:kemitix/kemitix-checkstyle-ruleset.git</developerConnection>
-        <url>git@github.com:kemitix/kemitix-checkstyle-ruleset.git</url>
     </scm>
 
     <url>https://github.com/kemitix/kemitix-checkstyle-ruleset</url>
diff --git a/travis-ci/codesigning.asc.enc b/travis-ci/codesigning.asc.enc
new file mode 100644
index 0000000..abd0821
Binary files /dev/null and b/travis-ci/codesigning.asc.enc differ
diff --git a/travis-coveralls-report.sh b/travis-ci/travis-coveralls-report.sh
old mode 100755
new mode 100644
similarity index 100%
rename from travis-coveralls-report.sh
rename to travis-ci/travis-coveralls-report.sh
diff --git a/travis-ci/travis-deploy.sh b/travis-ci/travis-deploy.sh
new file mode 100644
index 0000000..ace1cc0
--- /dev/null
+++ b/travis-ci/travis-deploy.sh
@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+if [ "$TRAVIS_BRANCH" = 'master' ] && [ "$TRAVIS_PULL_REQUEST" == 'false' ]; then
+	openssl aes-256-cbc -K $encrypted_efec3258f55d_key -iv $encrypted_efec3258f55d_iv \
+		-in travis-ci/codesigning.asc.enc -out travis-ci/codesigning.asc -d
+	gpg --fast-import travis-ci/codesigning.asc
+	./mvnw --projects plugin,ruleset --settings travis-settings.xml -Dskip-Tests=true -P release -B deploy
+fi
+
diff --git a/travis-settings.xml b/travis-ci/travis-settings.xml
similarity index 51%
rename from travis-settings.xml
rename to travis-ci/travis-settings.xml
index 9242a97..e2d8c63 100644
--- a/travis-settings.xml
+++ b/travis-ci/travis-settings.xml
@@ -12,4 +12,17 @@
             <password>${env.CI_DEPLOY_PASSWORD}</password>
         </server>
     </servers>
+    <profiles>
+        <profile>
+            <id>gpg-sign</id>
+            <activation>
+                <activeByDefault>true</activeByDefault>
+            </activation>
+            <properties>
+                <gpg.executable>gpg</gpg.executable>
+                <gpg.keyname>${env.CI_DEPLOY_GPG_KEYNAME}</gpg.keyname>
+                <gpg.passphrase>${env.CI_DEPLOY_GPG_PASSPHRASE}</gpg.passphrase>
+            </properties>
+        </profile>
+    </profiles>
 </settings>
diff --git a/travis-deploy.sh b/travis-deploy.sh
deleted file mode 100755
index 2ab4d1b..0000000
--- a/travis-deploy.sh
+++ /dev/null
@@ -1,3 +0,0 @@
-#!/usr/bin/env bash
-
-./mvnw --projects plugin,ruleset --settings travis-settings.xml -Dskip-Tests=true -P release -B deploy