gitsign sigstore
Install gitsign with WinGet
winget install --id=Sigstore.Gitsign -e gitsign signs Git commits and tags using keyless Sigstore signing with your GitHub or OIDC identity. Signatures use X.509 certificates issued by Fulcio and can be verified against the Rekor transparency log.