ZXP file becomes corrupted if the extension folder contains .git folder

OS: Windows 10

ZXPSignCMD: 4.1.1

Photoshop: 21.0.3

Recently, My team started developing an extension. For obvious reasons, I pushed it to git (Bitbucket). What I noticed that if I sign the extension folder while keeping the .git folder inside it, the zxp file becomes corrupted. I cannot install it anymore.

I tried aescript Extension Manager. Then I tried the cmd tool ExManCmd. The result stays the same. In the ExManCmd result I get 402 error which indicates Failed signature verification.

If I remove the .git folder and then sign it, I can install the zxp. While this is a workaround for the issue, but it's a bit inconvenient as all members have to keep it in mind to remove the .git folder before generating the zxp file.

Any proper solution?