Since Python 3.11.0, CPython has provided two verifiable digital signatures for all CPython artifacts: PGP and Sigstore.
See All 58 Episodes of "Newest Python PEPs"