diff --git a/scripts/bootables-sbsign b/scripts/bootables-sbsign
new file mode 100644
index 0000000..5a4ea72
--- /dev/null
+++ b/scripts/bootables-sbsign
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+signfile(){
+if ! sbverify --cert "/boot/key/MOK.crt" "$FILE" &>/dev/null; then
+sbsign --key "/boot/key/MOK.key" --cert "/boot/key/MOK.crt" --output "$FILE" "$FILE"
+}
+
+find /boot -type d | while read -r dir; do
+    signfile "$dir"
+done
\ No newline at end of file