diff --git a/.goreleaser.prerelease.yml b/.goreleaser.prerelease.yml
index 384979cb..1f31c902 100644
--- a/.goreleaser.prerelease.yml
+++ b/.goreleaser.prerelease.yml
@@ -3,29 +3,48 @@
 project_name: pulumi-command
 before:
   hooks:
-  - make codegen
+    - make codegen
 builds:
-- dir: provider
-  env:
-  - CGO_ENABLED=0
-  - GO111MODULE=on
-  goos:
-  - darwin
-  - windows
-  - linux
-  goarch:
-  - amd64
-  - arm64
-  ignore: []
-  main: ./cmd/pulumi-resource-command/
-  ldflags:
-  - -s
-  - -w
-  - -X github.com/pulumi/pulumi-command/provider/pkg/version.Version={{.Tag}}
-  binary: pulumi-resource-command
+  - dir: provider
+    env:
+      - CGO_ENABLED=0
+      - GO111MODULE=on
+    goos:
+      - darwin
+      - linux
+    goarch:
+      - amd64
+      - arm64
+    ignore: []
+    main: ./cmd/pulumi-resource-command/
+    ldflags:
+      - -s
+      - -w
+      - -X github.com/pulumi/pulumi-command/provider/pkg/version.Version={{.Tag}}
+    binary: pulumi-resource-command
+    id: build-provider
+  - dir: provider
+    env:
+      - CGO_ENABLED=0
+      - GO111MODULE=on
+    goos:
+      - windows
+    goarch:
+      - amd64
+      - arm64
+    ignore: []
+    main: ./cmd/pulumi-resource-command/
+    ldflags:
+      - -s
+      - -w
+      - -X github.com/pulumi/pulumi-command/provider/pkg/version.Version={{.Tag}}
+    binary: pulumi-resource-command
+    id: build-provider-sign-windows
+    hooks:
+      post: make sign-windows-exe-{{ .Arch }}
 archives:
-- name_template: "{{ .Binary }}-{{ .Tag }}-{{ .Os }}-{{ .Arch }}"
-  id: archive
+  - name_template: "{{ .Binary }}-{{ .Tag }}-{{ .Os }}-{{ .Arch }}"
+    id: archive
 snapshot:
   name_template: "{{ .Tag }}-SNAPSHOT"
 changelog:
@@ -33,9 +52,9 @@ changelog:
 release:
   disable: true
 blobs:
-- provider: s3
-  region: us-west-2
-  bucket: get.pulumi.com
-  folder: releases/plugins/
-  ids:
-  - archive
+  - provider: s3
+    region: us-west-2
+    bucket: get.pulumi.com
+    folder: releases/plugins/
+    ids:
+      - archive
diff --git a/.goreleaser.yml b/.goreleaser.yml
index 9c60064c..79134f22 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -3,29 +3,48 @@
 project_name: pulumi-command
 before:
   hooks:
-  - make codegen
+    - make codegen
 builds:
-- dir: provider
-  env:
-  - CGO_ENABLED=0
-  - GO111MODULE=on
-  goos:
-  - darwin
-  - windows
-  - linux
-  goarch:
-  - amd64
-  - arm64
-  ignore: []
-  main: ./cmd/pulumi-resource-command/
-  ldflags:
-  - -s
-  - -w
-  - -X github.com/pulumi/pulumi-command/provider/pkg/version.Version={{.Tag}}
-  binary: pulumi-resource-command
+  - dir: provider
+    env:
+      - CGO_ENABLED=0
+      - GO111MODULE=on
+    goos:
+      - darwin
+      - linux
+    goarch:
+      - amd64
+      - arm64
+    ignore: []
+    main: ./cmd/pulumi-resource-command/
+    ldflags:
+      - -s
+      - -w
+      - -X github.com/pulumi/pulumi-command/provider/pkg/version.Version={{.Tag}}
+    binary: pulumi-resource-command
+    id: build-provider
+  - dir: provider
+    env:
+      - CGO_ENABLED=0
+      - GO111MODULE=on
+    goos:
+      - windows
+    goarch:
+      - amd64
+      - arm64
+    ignore: []
+    main: ./cmd/pulumi-resource-command/
+    ldflags:
+      - -s
+      - -w
+      - -X github.com/pulumi/pulumi-command/provider/pkg/version.Version={{.Tag}}
+    binary: pulumi-resource-command
+    id: build-provider-sign-windows
+    hooks:
+      post: make sign-windows-exe-{{ .Arch }}
 archives:
-- name_template: "{{ .Binary }}-{{ .Tag }}-{{ .Os }}-{{ .Arch }}"
-  id: archive
+  - name_template: "{{ .Binary }}-{{ .Tag }}-{{ .Os }}-{{ .Arch }}"
+    id: archive
 snapshot:
   name_template: "{{ .Tag }}-SNAPSHOT"
 changelog:
@@ -33,9 +52,9 @@ changelog:
 release:
   disable: false
 blobs:
-- provider: s3
-  region: us-west-2
-  bucket: get.pulumi.com
-  folder: releases/plugins/
-  ids:
-  - archive
+  - provider: s3
+    region: us-west-2
+    bucket: get.pulumi.com
+    folder: releases/plugins/
+    ids:
+      - archive