diff --git a/.cruft.json b/.cruft.json
index 89b26d3..6024766 100644
--- a/.cruft.json
+++ b/.cruft.json
@@ -1,6 +1,6 @@
 {
   "template": "https://github.com/robert-koch-institut/mex-template",
-  "commit": "6c467f8809dcc640c3b7aab80e42f3af1f89b1bd",
+  "commit": "af56c8fa17144906e94518391acc9795d5f2dc89",
   "checkout": null,
   "context": {
     "cookiecutter": {
diff --git a/.github/workflows/cookiecutter.yml b/.github/workflows/cookiecutter.yml
index a06f00f..4862c11 100644
--- a/.github/workflows/cookiecutter.yml
+++ b/.github/workflows/cookiecutter.yml
@@ -52,16 +52,7 @@ jobs:
           SIGNING_PUB: ${{ secrets.SIGNING_PUB }}
         run: |
           eval "$(ssh-agent -s)"
-          install --directory ~/.ssh --mode 700
-          base64 -d <<< '${{ secrets.SIGNING_KEY }}' > ~/.ssh/mex
-          base64 -d <<< '${{ secrets.SIGNING_PUB }}' > ~/.ssh/mex.pub
-          chmod 600 ~/.ssh/*
-          ssh-add ~/.ssh/mex
-          git config --local user.email ${{ vars.MEX_BOT_EMAIL }}
-          git config --local user.name ${{ vars.MEX_BOT_USER }}
-          git config --local gpg.format ssh
-          git config --local user.signingkey ~/.ssh/mex.pub
-          git config --local commit.gpgsign true
+          pdm setup-commit-signing
 
       - name: Update template
         env:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 64032e4..a53fdb8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -63,16 +63,7 @@ jobs:
           SIGNING_PUB: ${{ secrets.SIGNING_PUB }}
         run: |
           eval "$(ssh-agent -s)"
-          install --directory ~/.ssh --mode 700
-          base64 -d <<< '${{ secrets.SIGNING_KEY }}' > ~/.ssh/mex
-          base64 -d <<< '${{ secrets.SIGNING_PUB }}' > ~/.ssh/mex.pub
-          chmod 600 ~/.ssh/*
-          ssh-add ~/.ssh/mex
-          git config --local user.email ${{ vars.MEX_BOT_EMAIL }}
-          git config --local user.name ${{ vars.MEX_BOT_USER }}
-          git config --local gpg.format ssh
-          git config --local user.signingkey ~/.ssh/mex.pub
-          git config --local commit.gpgsign true
+          pdm setup-commit-signing
 
       - name: Release new version
         id: release