I need to notarize a Java app that is bundled by Install4J.
At the end of the process I get: .dmg: rejected (the code is valid but does not seem to be an app)
It seems I need to sign items within .dmg according to this and this.
I am uncertain how this signing relates to that of made by install4j. Do I need to use a Code Signing Identity used by install4j or my own to pass to 's' option?