diff --git a/.github/workflows/maven-verify.yml b/.github/workflows/maven-verify.yml
index ca83795..2a499f6 100644
--- a/.github/workflows/maven-verify.yml
+++ b/.github/workflows/maven-verify.yml
@@ -152,6 +152,12 @@ on:
         default: false
         type: boolean
 
+      install-gpg:
+        description: Ensure all build images have GnuPG installed
+        required: false
+        default: false
+        type: boolean
+
 # allow single build per branch or PR
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -262,6 +268,23 @@ jobs:
         run: |
           brew install mercurial
 
+      - name: Install GnuPG
+        if: >
+          inputs.install-gpg &&
+          steps.should-run.conclusion == 'success' &&
+          matrix.os == 'windows-latest'
+        run: |
+          $env:PATH = "C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\ProgramData\chocolatey\bin"
+          [Environment]::SetEnvironmentVariable("Path", $env:PATH, "Machine")
+          choco install --yes gpg4win
+          echo "C:\Program Files (x86)\Gpg4win\..\GnuPG\bin" >> $env:GITHUB_PATH
+
+      - name: Check GnuPG
+        if: >
+          inputs.install-gpg &&
+          steps.should-run.conclusion == 'success'
+        run: gpg --version
+
       - name: Show free disk space
         if: steps.should-run.conclusion == 'success'
         run: df -h