Code Signing

Code signing uses asymmetric cryptography to attach a digital signature to software artifacts, proving they were produced by a known publisher and have not been modified since signing. Operating systems and package managers verify signatures before execution or installation, blocking tampered or unsigned software.

Code signing is required for macOS/Windows apps and is increasingly enforced in container registries.