diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..1155480
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,5 @@
+golang-github-42wim-sshsig (0.0~git20250502.5100632-1) unstable; urgency=low
+
+  * Initial upload to sid, required for forgejo.
+
+ -- Daniel Baumann <daniel@debian.org>  Sun, 18 May 2025 16:25:18 +0200
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000..6537618
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,26 @@
+Source: golang-github-42wim-sshsig
+Section: golang
+Priority: optional
+Maintainer: Daniel Baumann <daniel@debian.org>
+Build-Depends:
+ debhelper-compat (= 13),
+ dh-sequence-golang,
+ golang-any,
+ golang-golang-x-crypto-dev,
+Rules-Requires-Root: no
+Standards-Version: 4.7.2
+Homepage: https://github.com/42wim/sshsig
+Vcs-Browser: https://forgejo.debian.net/forgejo/golang-github-42wim-sshsig
+Vcs-Git: https://forgejo.debian.net/forgejo/golang-github-42wim-sshsig
+Testsuite: autopkgtest-pkg-go
+XS-Go-Import-Path: github.com/42wim/sshsig
+
+Package: golang-github-42wim-sshsig-dev
+Architecture: all
+Multi-Arch: foreign
+Depends:
+ golang-golang-x-crypto-dev,
+ ${misc:Depends},
+Description: create/verify armored SSH signatures (Go library)
+ sshsig is a Go library implementing signing and verifying of armored SSH
+ signatures using ssh private keys or ssh agents.
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 0000000..ab4b472
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,66 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: sshsig
+Upstream-Contact: https://github.com/42wim/sshsig/issues
+Source: https://github.com/42wim/sshsig/tags
+
+Files: *
+Copyright: Wim <wim@42.be>
+License: Apache-2.0
+
+Files: encode.go
+       sign.go
+       sign_test.go
+       sshsig.go
+       verify.go
+Copyright: 2021 The Sigstore Authors
+License: Apache-2.0
+
+Files: pem/encode.go
+Copyright: 2009 The Go Authors
+License: BSD-3-clause
+
+Files: debian/*
+Copyright: 2025 Daniel Baumann <daniel@debian.org>
+License: Apache-2.0
+
+License: Apache-2.0
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+ .
+     https://www.apache.org/licenses/LICENSE-2.0
+ .
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+ .
+ The complete text of the Apache-2.0 License
+ can be found in /usr/share/common-licenses/Apache-2.0 file.
+
+License: BSD-3-clause
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions are met:
+ .
+ * Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+ .
+ * Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+ .
+ * Neither the name of the {organization} nor the names of its
+   contributors may be used to endorse or promote products derived from
+   this software without specific prior written permission.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+ AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+ FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000..0af86df
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,4 @@
+#!/usr/bin/make -f
+
+%:
+	dh ${@} --builddirectory=_build --buildsystem=golang
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000..163aaf8
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)
diff --git a/debian/upstream/metadata b/debian/upstream/metadata
new file mode 100644
index 0000000..70ff0ed
--- /dev/null
+++ b/debian/upstream/metadata
@@ -0,0 +1,5 @@
+---
+Bug-Database: https://github.com/42wim/sshsig/issues
+Bug-Submit: https://github.com/42wim/sshsig/issues/new
+Repository: https://github.com/42wim/sshsig.git
+Repository-Browse: https://github.com/42wim/sshsig
diff --git a/debian/watch b/debian/watch
new file mode 100644
index 0000000..4ad0f87
--- /dev/null
+++ b/debian/watch
@@ -0,0 +1,2 @@
+version=4
+https://github.com/42wim/sshsig/tags .*/v?(\d.*)@ARCHIVE_EXT@