Hi!
You can use gpg command to do verify the software, take a look here:
https://electrum.readthedocs.io/en/latest/gpg-check.html

Greetings!
Diego