diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 596c481..d8a289e 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -30,7 +30,7 @@ build:
   after_script:
     - wget $icon_server/checkmark/$CI_COMMIT_REF_NAME/$CI_COMMIT_SHA/$CI_JOB_NAME/$CI_JOB_STATUS/${CI_JOB_URL#*/*/*/}
     - mkdir -p artifacts
-    - cp ./src/*.hex artifacts
+    - cp ./src/*.hex ./src/*sha256sum artifacts
   artifacts:
     paths:
       - artifacts
\ No newline at end of file
diff --git a/src/Makefile b/src/Makefile
index b3a429d..26ee22c 100644
--- a/src/Makefile
+++ b/src/Makefile
@@ -3,16 +3,17 @@ include build.mk
 GIT=$(shell git describe)
 FIRMWARE=nitrokey-storage-$(GIT).hex
 FIRMWARE_CLEAN=nitrokey-storage-$(GIT)-reproducible.hex
+HASHFN=sha256sum
 
-all: $(FIRMWARE_CLEAN) $(FIRMWARE) firmware_info firmware.lss sha256sum
+all: $(FIRMWARE_CLEAN) $(FIRMWARE) firmware_info firmware.lss $(HASHFN)
 	-rm firmware.hex firmware-extended.hex
-	ls -lh *hex *sha256sum
-	@cat sha256sum
+	ls -lh *hex *sha256sum $(HASHFN)
+	@cat $(HASHFN)
 
 #%.sha256sum: %
 #	sha256sum $< > $@
 
-sha256sum: $(FIRMWARE_CLEAN) $(FIRMWARE)
+$(HASHFN): $(FIRMWARE_CLEAN) $(FIRMWARE)
 	sha256sum $^ > $@
 
 $(FIRMWARE): firmware-extended.hex
@@ -20,7 +21,7 @@ $(FIRMWARE): firmware-extended.hex
 
 .PHONY: clean_artifacts
 clean_artifacts:
-	-rm *sha256sum *hex
+	-rm *sha256sum *hex $(HASHFN)
 
 .PHONY: clean
 clean: