diff --git a/make/release.mk b/make/release.mk
index d5eb6bf9329..33ba904cfc2 100644
--- a/make/release.mk
+++ b/make/release.mk
@@ -35,15 +35,6 @@ release-artifacts-signed: release-artifacts release-manifests-signed
 release: release-artifacts-signed
 	$(MAKE) --no-print-directory $(BINDIR)/release/metadata.json
 
-# Example of how we can generate a SHA256SUMS file and sign it using cosign
-#$(BINDIR)/SHA256SUMS: $(wildcard ...)
-#	@# The patsubst means "all dependencies, but with "$(BINDIR)/" trimmed off the beginning
-#	@# We cd into bin so that SHA256SUMS file doesn't have a prefix of `bin` on everything
-#	cd $(dir $@) && sha256sum $(patsubst $(BINDIR)/%,%,$^) > $(notdir $@)
-
-#$(BINDIR)/SHA256SUMS.sig: $(BINDIR)/SHA256SUMS $(BINDIR)/tools/cosign
-#	$(BINDIR)/tools/cosign sign-blob --key $(COSIGN_KEY) $< > $@
-
 # Takes all metadata files in $(BINDIR)/metadata and combines them into one.
 
 $(BINDIR)/release/metadata.json: $(wildcard $(BINDIR)/metadata/*.json) | $(BINDIR)/release
@@ -99,3 +90,12 @@ forcetime: | $(BINDIR)
 
 $(BINDIR)/release $(BINDIR)/metadata:
 	@mkdir -p $@
+
+# Example of how we can generate a SHA256SUMS file and sign it using cosign
+#$(BINDIR)/SHA256SUMS: $(wildcard ...)
+#	@# The patsubst means "all dependencies, but with "$(BINDIR)/" trimmed off the beginning
+#	@# We cd into bin so that SHA256SUMS file doesn't have a prefix of `bin` on everything
+#	cd $(dir $@) && sha256sum $(patsubst $(BINDIR)/%,%,$^) > $(notdir $@)
+
+#$(BINDIR)/SHA256SUMS.sig: $(BINDIR)/SHA256SUMS $(BINDIR)/tools/cosign
+#	$(BINDIR)/tools/cosign sign-blob --key $(COSIGN_KEY) $< > $@