diff --git a/internal/pipeline/steps.go b/internal/pipeline/steps.go
index b7fa68e263..865700299d 100644
--- a/internal/pipeline/steps.go
+++ b/internal/pipeline/steps.go
@@ -92,6 +92,11 @@ func (s Steps) sign(signer Signer) error {
 	for _, step := range s {
 		switch step := step.(type) {
 		case *CommandStep:
+			if _, ok := step.RemainingFields["matrix"]; ok {
+				// Don't sign matrix steps... yet
+				continue
+			}
+
 			sig, err := Sign(step, signer)
 			if err != nil {
 				return fmt.Errorf("signing step with command %q: %w", step.Command, err)