diff --git a/allowed_signers b/allowed_signers
index 8872f95..9621989 100644
--- a/allowed_signers
+++ b/allowed_signers
@@ -25,6 +25,7 @@ pawel@cow.fi sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29t
 dani@cow.fi sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAII3+5YSWDEOkRCSt3lApr0NOPwcRdpopccj+g1lavvMsAAAABHNzaDo= dani@cow.fi commit signing
 anxo@cow.fi sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIOwSAAnp6YJWaiQUDyBeSOsgl4Vn5Cw/lmdIuiyu8UmoAAAAD3NzaDpnaXQtc2lnbmluZw== git-signing:anxo@cow.fi
 haris@cow.fi sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIGcKZE2b+eSDOEB6F7tEZsT4B+MYIjGIy36zxUUEvMzwAAAABHNzaDo= haris@cow.fi commit signing
+diego@cow.fi sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIA9I3XkDDnidKhLpp3SqmUGfltwT6gYBaa6R+E9f/b3ZAAAABHNzaDo= diego@cow.fi commit signing
 
 # cow-protocol CI bot — non-sk software key
 gh_111@cow.fi ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFHJQvdfBMMNNDCsq8LJS2/yCxYKbFiw6Jkcjym8CvZw