Provider and current status
Git Workbench is preparing an application to the SignPath Foundation Open Source Code Signing program. The proposed arrangement is: “Free code signing provided by SignPath.io, certificate by SignPath Foundation.” This is a planned signing policy, not a claim that the project has been accepted or that signing is active.
As of November 4, 2026, no Git Workbench release is signed through SignPath. The current Windows installer is unsigned, as are the macOS DMG and ZIP. Linux packages are unsigned and publish SHA-512 checksums. The policy will be updated when Foundation approval and the release workflow integration are complete.
Learn about the SignPath Foundation and its open source signing conditions.
Planned signing scope and verification
If approved, signing will be limited to Git Workbench’s own Windows installer and application binaries, built from the public GitWorkbench/workbench source repository by its release workflow. Third-party applications and unrelated binaries are outside the signing scope. Each signing request will be reviewed and approved by a project approver.
After signed releases are available, verify a Windows file by opening its Properties and checking the Digital Signatures tab for the SignPath Foundation publisher. Until that signature appears on a release, verify downloads using the checksums or provenance information published with that release.
See the public release workflow and the official GitHub releases.
Project team and signing roles
Committers and reviewers: Naowas Morshed Eimon (@naowas).
Approver: Naowas Morshed Eimon (@naowas). Every signing request will require this approver’s review before submission.
The repository access list and GitWorkbench organization owners identify the project’s current authorized maintainer.
Privacy
Git Workbench’s desktop app uses connected services only when users choose those features. Details about local repository data, connected Git providers, optional AI requests, update checks, and this website’s analytics are in the Git Workbench privacy policy.