diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index e9ced78..6751844 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -41,7 +41,10 @@ jobs:
       - run: |
           go version
           go get
-      - run: make build
+
+      - run: |
+          make build
+          make sha256sum
 
       - name: Extract short commit SHA
         id: short-sha
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 91295a7..81fffd7 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -23,10 +23,14 @@ jobs:
           go version
           go get
 
-      - run: make build
+      - run: |
+          make build
+          make sha256sum
 
       - working-directory: ./example/echo-server
-        run: make build
+        run: |
+          make build
+          make sha256sum
 
       - name: Create release
         env:
diff --git a/Makefile b/Makefile
index 487ba27..3ade0b2 100644
--- a/Makefile
+++ b/Makefile
@@ -15,12 +15,11 @@ build_%_arm64: GOARCH = arm64
 
 COMMIT = $(shell git rev-parse --short HEAD || true)
 TAG = $(shell git describe --tags --abbrev=0 HEAD 2>/dev/null || true)
-BINPATH = bin/$(TARGET)_$(GOOS)_$(GOARCH)$(EXT)
+BINDIR = bin
+BINPATH = $(BINDIR)/$(TARGET)_$(GOOS)_$(GOARCH)$(EXT)
 
 build_%:
-	export GOOS=$(GOOS) GOARCH=$(GOARCH)
-
-	go build -o $(BINPATH) \
+	GOOS=$(GOOS) GOARCH=$(GOARCH) go build -o $(BINPATH) \
 		-ldflags "-X main.buildCommit=$(COMMIT) -X main.buildVersion=$(TAG)" \
 		-gcflags "./...=-m" \
 		-gcflags "./pkg/http2=" \
@@ -28,6 +27,9 @@ build_%:
 
 	chmod +x $(BINPATH)
 
+sha256sum:
+	cd $(BINDIR) && sha256sum $(TARGET)_* > $(TARGET).sha256sum
+
 PKG_LIST = $(shell go list ./... | grep -v github.com/wi1dcard/fingerproxy/pkg/http2)
 test:
 	@go test -v $(PKG_LIST)
diff --git a/example/echo-server/Makefile b/example/echo-server/Makefile
index d18a1c0..5876ed7 100644
--- a/example/echo-server/Makefile
+++ b/example/echo-server/Makefile
@@ -13,11 +13,13 @@ build_%_amd64: GOARCH = amd64
 build_%_arm: GOARCH = arm
 build_%_arm64: GOARCH = arm64
 
-BINPATH = bin/$(TARGET)_$(GOOS)_$(GOARCH)$(EXT)
+BINDIR = bin
+BINPATH = $(BINDIR)/$(TARGET)_$(GOOS)_$(GOARCH)$(EXT)
 
 build_%:
-	export GOOS=$(GOOS) GOARCH=$(GOARCH)
-
-	go build -o $(BINPATH) .
+	GOOS=$(GOOS) GOARCH=$(GOARCH) go build -o $(BINPATH) .
 
 	chmod +x $(BINPATH)
+
+sha256sum:
+	cd $(BINDIR) && sha256sum $(TARGET)_* > $(TARGET).sha256sum