Reference/!finalize
From NSIS Wiki
Jump to navigationJump to search
!finalize
command
This option will execute 'command' using a call to system() after the output EXE has been generated. You can typically use it to sign (Authenticode) your installer. If 'command' contains a '%1' it will be replaced by the executable filename.
!finalize 'sign.bat "%1" "Product Installer" http://example.com'