diff --git a/.github/carson.yml b/.github/carson.yml
index 169ec94a8477..b423b95b0515 100644
--- a/.github/carson.yml
+++ b/.github/carson.yml
@@ -5,6 +5,7 @@ subscribers:
   - auto-labeler
   - conflicts-notifier
   - pr-title-linter
+  - signed-commits
 settings:
   auto-labeler:
     sync_labels: true
@@ -34,3 +35,6 @@ settings:
       - pattern: '^(\[\d+\.\d+\]\s{1})?(feat|fix|chore|docs|perf|refactor|style|test|config|revert)(\([\-.@:`a-zA-Z0-9]+\))?!?:\s{1}\S.+\S|Prep for \d\.\d\.\d release|\d\.\d\.\d (Ready|Merge) code$'
         description: 'PR title must include the type (feat, fix, chore, docs, perf, refactor, style, test, config, revert) of the commit per Conventional Commits specification. See https://www.conventionalcommits.org/en/v1.0.0/ for the discussion.'
         level: error
+  signed-commits:
+    name: 'Carson / signed-commits'
+    treat_unsigned_as: failure
diff --git a/.github/workflows/label-signing.yml b/.github/workflows/label-signing.yml
deleted file mode 100644
index 609e84a0a23e..000000000000
--- a/.github/workflows/label-signing.yml
+++ /dev/null
@@ -1,32 +0,0 @@
-name: Check Signed PR
-on:
-  pull_request:
-    branches:
-      - 'develop'
-      - '4.*'
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-  pull-requests: write
-
-jobs:
-  build:
-    name: Check Signed Commit
-    runs-on: ubuntu-24.04
-    steps:
-      - name: Checkout
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-
-      - name: Check signed commits in PR
-        uses: 1Password/check-signed-commits-action@ed2885f3ed2577a4f5d3c3fe895432a557d23d52 # v1.2.0
-        with:
-          comment: |
-            You must GPG-sign your work, certifying that you either wrote the work or otherwise have the right to pass it on to an open-source project. See Developer's Certificate of Origin. See [signing][1].
-
-            **Note that all your commits must be signed.** If you have an unsigned commit, you can sign the previous commits by referring to [gpg-signing-old-commits][2].
-            [1]: https://github.com/codeigniter4/CodeIgniter4/blob/develop/contributing/pull_request.md#signing
-            [2]: https://github.com/codeigniter4/CodeIgniter4/blob/develop/contributing/workflow.md#gpg-signing-old-commits