Windows implemented an antivirus scan which can prevent users from using most binaries by marking them as Trojan, unless they are signed with a cerficate.
It used to be necessary to pay a hefty fee and to send legal documents back and forth in order to get a certificate with a USB dongle to sign binaries. Microsoft since release Azure Trusted Signing, which makes that process a little easier.
This article will document the steps that are necessary to automatically sign your binaries with Azure Trusted Signing in Gitlab CI.