diff --git a/bucket/gitsign.json b/bucket/gitsign.json
new file mode 100644
index 0000000000..0467cf5ce0
--- /dev/null
+++ b/bucket/gitsign.json
@@ -0,0 +1,25 @@
+{
+    "version": "0.1.0",
+    "description": "Keyless Git signing with Sigstore!",
+    "homepage": "https://github.com/sigstore/gitsign",
+    "license": "Apache-2.0",
+    "architecture": {
+        "64bit": {
+            "url": "https://github.com/sigstore/gitsign/releases/download/v0.1.0/gitsign_0.1.0_windows_amd64.exe#/gitsign.exe",
+            "hash": "5cda4d7c12999894eafd89658d75e9894b53428651cc9119277fdd91252f4726"
+        }
+    },
+    "bin": "gitsign.exe",
+    "checkver": "github",
+    "autoupdate": {
+        "architecture": {
+            "64bit": {
+                "url": "https://github.com/sigstore/gitsign/releases/download/v$version/gitsign_$version_windows_amd64.exe#/gitsign.exe"
+            }
+        },
+        "hash": {
+            "url": "$baseurl/checksums.txt",
+            "regex": "(?im)^$sha256\\s+$basename$"
+        }
+    }
+}