How to Sign Your Python .exe With Sigstore (No Certificate Required)


The problem: You built an open-source app. Users download your .exe. How do they know it's actually from you and hasn't been tampered with?

Traditional solution: Buy a code signing certificate. Cost: $200-400/year.

Better solution: Sigstore. Free, open source,...