Running an .exe from GitHub is a leap of faith. Here is how I keep things secure.