diff --git a/.circleci/.maven.xml b/.circleci/.maven.xml
new file mode 100644
index 0000000..1228b6a
--- /dev/null
+++ b/.circleci/.maven.xml
@@ -0,0 +1,9 @@
+<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0">
+    <servers>
+        <server>
+            <id>rso</id>
+            <username>${env.SONATYPE_USERNAME}</username>
+            <password>${env.SONATYPE_PASSWORD}</password>
+        </server>
+    </servers>
+</settings>
diff --git a/.circleci/config.yml b/.circleci/config.yml
index 00e25cf..51b446a 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,5 +1,8 @@
 version: 2.1
 
+orbs:
+  circleci-maven-release-orb: sonatype-nexus-community/circleci-maven-release-orb@0.0.15
+
 jobs:
   build:
     machine:
@@ -38,8 +41,20 @@ jobs:
       - store_test_results:
           path: test-results
 
+  release:
+    machine:
+      image: ubuntu-2004:202008-01
+    steps:
+      - checkout
+      - circleci-maven-release-orb/run-maven-release:
+          mvn-release-perform-command: 'mvn --batch-mode release:perform -DdryRun=true -s my-settings.xml'
+          ssh-fingerprints: 'my:ss:hf:in:ge:rp:ri:nt...'
+
 workflows:
   version: 2
   workflow:
     jobs:
       - build
+  release:
+    jobs:
+      - release
diff --git a/pom.xml b/pom.xml
index 6b6e9f4..249e2e4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -38,6 +38,7 @@
 
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+        <gpg.passphrase>${env.GPG_PASSPHRASE}</gpg.passphrase>
 
         <compiler.source.level>9</compiler.source.level>
         <compiler.target.level>9</compiler.target.level>
@@ -66,6 +67,20 @@
                     <artifactId>maven-javadoc-plugin</artifactId>
                     <version>3.2.0</version>
                 </plugin>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-source-plugin</artifactId>
+                    <version>3.2.1</version>
+                </plugin>
+                <plugin>
+                    <artifactId>maven-release-plugin</artifactId>
+                    <version>3.0.0-M1</version>
+                </plugin>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-gpg-plugin</artifactId>
+                    <version>1.6</version>
+                </plugin>
             </plugins>
         </pluginManagement>
 
@@ -81,6 +96,12 @@
                     <target>${compiler.target.level}</target>
                 </configuration>
             </plugin>
+            <plugin>
+                <artifactId>maven-release-plugin</artifactId>
+                <configuration>
+                    <releaseProfiles>gpg-sign</releaseProfiles>
+                </configuration>
+            </plugin>
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-javadoc-plugin</artifactId>
@@ -112,4 +133,39 @@
             </plugin>
         </plugins>
     </build>
+
+    <profiles>
+        <profile>
+            <id>gpg-sign</id>
+            <!--
+            only sign during deploy phase
+            -->
+            <build>
+                <plugins>
+                    <plugin>
+                        <artifactId>maven-gpg-plugin</artifactId>
+                        <version>1.6</version>
+                        <executions>
+                            <execution>
+                                <id>sign-artifacts</id>
+                                <phase>verify</phase>
+                                <goals>
+                                    <goal>sign</goal>
+                                </goals>
+                                <configuration>
+                                    <gpgArguments>
+                                        <arg>--pinentry-mode</arg>
+                                        <arg>loopback</arg>
+                                    </gpgArguments>
+                                </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+            <properties>
+                <gpg.passphrase>${env.GPG_PASSPHRASE}</gpg.passphrase>
+            </properties>
+        </profile>
+    </profiles>
 </project>