diff --git a/script-meta-v2.json b/script-meta-v2.json
index 2783744..5963b4a 100644
--- a/script-meta-v2.json
+++ b/script-meta-v2.json
@@ -18,12 +18,12 @@
   },
   "build.ts": {
     "script_name": "build.ts",
-    "script_length": 4591,
-    "script_sha256": "fb53a891e4b6d7dc84dd251f3c5b005d90a6bba91828856d9529cc368f3d5660",
+    "script_length": 4878,
+    "script_sha256": "d7df641b6e4fe1e3618d951c50303b4ca2c83d7ec3a8d30a25d1555562c0d71d",
     "script_full_url": "https://git.hatter.ink/hatter/ts-scripts/raw/branch/main/single-scripts/build.ts",
     "single_script_file": true,
     "publish_time": 1770564482429,
-    "update_time": 1770564793315
+    "update_time": 1770569587837
   },
   "cal-bun.ts": {
     "script_name": "cal-bun.ts",
diff --git a/single-scripts/build.ts b/single-scripts/build.ts
index 70ac1c9..5f1f15c 100755
--- a/single-scripts/build.ts
+++ b/single-scripts/build.ts
@@ -11,6 +11,7 @@ import {
 } from "https://script.hatter.ink/@35/deno-commons-mod.ts";
 import {parseArgs} from "jsr:@std/cli/parse-args";
 import {readFileToString} from "https://global.hatter.ink/script/get/@1/deno-commons-1.6.0-mod.ts";
+import {execCommandAndStdout} from "../libraries/deno-commons-mod.ts";
 
 async function main() {
     const flags = parseArgs(Deno.args, {
@@ -143,7 +144,15 @@ async function buildFile(file: string, flags: any) {
     if (flags["skip-sign"]) {
         log.warn(`Skip signature for file: ${bundleFile}`);
     } else {
-        await execCommandShell("script-sign.rs", [bundleFile]);
+        const signScriptUserPin = execCommandAndStdout("keyring.rs", [
+            "-gRU",
+            "yubikey4white:user-pin",
+        ]);
+        await execCommandShell("script-sign.rs", [
+            "--pin",
+            signScriptUserPin,
+            bundleFile,
+        ]);
     }
     await execCommandShell("chmod", ["+x", bundleFile]);
     await writeBundleSourceSha256(file, bundleFile, flags);
@@ -151,5 +160,5 @@ async function buildFile(file: string, flags: any) {
 
 await main();
 
-// @SCRIPT-SIGNATURE-V1: yk-r1.ES256.20260208T233252+08:00.MEUCIBDG/ENx5vAqlNOXA0j9
-// j8lVm77bTAIYJGQTB0WRz4VSAiEAjGRY1+99Y1srS8ohxkJ5GFhX7skwAIZTnhlBjXlVRd4=
+// @SCRIPT-SIGNATURE-V1: yk-r1.ES256.20260209T005219+08:00.MEUCIDo3pPzkGK7FiGyuEOOr
+// evz4jRLWSy5vuqZ1FynulxpkAiEAhGVuwgCzBTzwPSpV4r8aEQFJ6sjd/pZrRq3eUoG9DbE=