diff --git a/scripts/verify-authenticode.ps1 b/scripts/verify-authenticode.ps1
index 676ef5d579..69394d8205 100644
--- a/scripts/verify-authenticode.ps1
+++ b/scripts/verify-authenticode.ps1
@@ -102,3 +102,8 @@ foreach ($relativePath in $Files) {
 }
 
 Write-Host "Authenticode verification passed."
+
+# signtool exits non-zero for the untrusted test-cert root even when we accept
+# it above, leaving $LASTEXITCODE = 1. The GitHub Actions pwsh wrapper exits
+# with that lingering code, so reset it to report success explicitly.
+exit 0