For both Windows and Max OSX, you will need a developer signing certificate which is used to ensure the origin of the compiled code. Similar to GPG, but verified by the OS rather than by a package man

I know it’s early days, especially for Windows and Mac, but will there be a plan for code signing the binaries produced by CI? This will be important for security and adoption.