Binaries will be automatically signed after CLI advisory is switched to QE state.

Windows:

• Download the files from https://download.eng.bos.redhat.com/etera/openshift-pipelines-client/1/1.xx/1.1xx.y-zzzzz/signed/x86_64/
• right-click on binaries and check the signature (if the binary is unsigned the signatures tab will not be visible)

MacOS:

• create a pipeline run similar to https://gitlab.cee.redhat.com/tekton/plumbing/-/blob/master/ci/pipelineruns/verify-binaries-on-mac.yaml