diff --git a/.github/workflows/release_build_infisical_cli.yml b/.github/workflows/release_build_infisical_cli.yml
index d93e08ff1..2db51bb17 100644
--- a/.github/workflows/release_build_infisical_cli.yml
+++ b/.github/workflows/release_build_infisical_cli.yml
@@ -132,9 +132,10 @@ jobs:
       - name: Install deb-s3
         run: gem install deb-s3
       - name: Configure GPG Key
-        run: echo -n "$GPG_SIGNING_KEY" | base64 --decode | gpg --import
+        run: echo -n "$GPG_SIGNING_KEY" | base64 --decode | gpg --batch --passphrase "$GPG_SIGNING_KEY_PASSPHRASE" --import
         env:
           GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }}
+          GPG_SIGNING_KEY_PASSPHRASE: ${{ secrets.GPG_SIGNING_KEY_PASSPHRASE }}
       - name: Publish to CloudSmith
         run: sh cli/upload_to_cloudsmith.sh
         env:
diff --git a/cli/packages/cmd/root.go b/cli/packages/cmd/root.go
index 5096178b3..ca8d35d42 100644
--- a/cli/packages/cmd/root.go
+++ b/cli/packages/cmd/root.go
@@ -50,7 +50,7 @@ func init() {
 
 		config.INFISICAL_URL = util.AppendAPIEndpoint(config.INFISICAL_URL)
 
-		util.DisplayAptInstallationChangeBanner()
+		util.DisplayAptInstallationChangeBanner(silent)
 		if !util.IsRunningInDocker() && !silent {
 			util.CheckForUpdate()
 		}
diff --git a/cli/packages/util/check-for-update.go b/cli/packages/util/check-for-update.go
index 06c161b5d..4aae75f65 100644
--- a/cli/packages/util/check-for-update.go
+++ b/cli/packages/util/check-for-update.go
@@ -53,7 +53,11 @@ func CheckForUpdate() {
 	}
 }
 
-func DisplayAptInstallationChangeBanner() {
+func DisplayAptInstallationChangeBanner(isSilent bool) {
+	if isSilent {
+		return
+	}
+
 	if runtime.GOOS == "linux" {
 		_, err := exec.LookPath("apt-get")
 		isApt := err == nil