diff --git a/gitea-python-ci-cd.md b/gitea-python-ci-cd.md
index e4c6a24..01f9662 100644
--- a/gitea-python-ci-cd.md
+++ b/gitea-python-ci-cd.md
@@ -502,6 +502,10 @@ system Python, so the fallback handles both cases.
 
 Build: `makensis -DVERSION="${VERSION}" installer.nsi`
 
+### 6.1. Code Signing the Installer
+
+Sign the `.exe` after `makensis` but before uploading assets to avoid SmartScreen and browser download warnings. See [windows-code-signing.md](windows-code-signing.md) for signing options and CI integration examples.
+
 ## 7. Docker Build
 
 ### Multi-stage Dockerfile