try to implement code signing from sigstore

Author: 13xforever

.github/workflows/publish-release.yml

@@ -37,6 +37,7 @@ jobs:
       artifact_name: 'ps3-disc-dumper_vX.Y.Z.zip'
     permissions:
       contents: write
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - name: 'Replace full version with custom input value'
@@ -83,6 +84,12 @@ jobs:
           -p:VersionPrefix=${{ env.version_short }}
           -p:Version=${{ env.version_full }}
           ${{ matrix.command_extra }}
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
+      - uses: sigstore/[email protected]
+        with:
+          inputs: 'distrib/ps3-disc-dumper.*'
       - name: 'Make artifact'
         shell: pwsh
         run: |