GitHub exposes release digests and its CLI can verify release assets. This free utility is only a local drag-and-drop convenience check for people who do not want to install a CLI.
Open Release Checksum Verifier
It does not verify signatures, attestations, publication state, vulnerabilities, or GitHub account data.