A code-signed binary is included in the ZIP archive available here.
All contents are signed using PGP as well, so they can be verified using the following command line (replace gpg for gpg2 depending on your version):
gpg --verify signature.asc premake4.exe premake4.pdb *.patch README.txt
The SHA1 hash of the ZIP archive is c1d8b11f3fe8aa6b21db7d8cf311295973289497.
Hope it helps someone.
// Oliver