diff --git a/dist/cleanup/index.js b/dist/cleanup/index.js
index 2cd3c325..18ac0774 100644
--- a/dist/cleanup/index.js
+++ b/dist/cleanup/index.js
@@ -52366,6 +52366,12 @@ function verifyPackageSignature(archivePath, signatureUrl, publicKeyContent) {
             gpgHome = fs.mkdtempSync(path.join(util.getTempDir(), 'verify-signature-gpg-home-'));
         }
         catch (error) {
+            try {
+                yield io.rmRF(signaturePath);
+            }
+            catch (_a) {
+                // ignore cleanup failures
+            }
             throw new Error(`Failed to create temporary GPG home directory for signature verification: ${error.message}`);
         }
         const env = Object.assign(Object.assign({}, process.env), { GNUPGHOME: gpgHome });
diff --git a/dist/setup/index.js b/dist/setup/index.js
index e4732040..4c999d79 100644
--- a/dist/setup/index.js
+++ b/dist/setup/index.js
@@ -81146,6 +81146,12 @@ function verifyPackageSignature(archivePath, signatureUrl, publicKeyContent) {
             gpgHome = fs.mkdtempSync(path.join(util.getTempDir(), 'verify-signature-gpg-home-'));
         }
         catch (error) {
+            try {
+                yield io.rmRF(signaturePath);
+            }
+            catch (_a) {
+                // ignore cleanup failures
+            }
             throw new Error(`Failed to create temporary GPG home directory for signature verification: ${error.message}`);
         }
         const env = Object.assign(Object.assign({}, process.env), { GNUPGHOME: gpgHome });