I saw a few posts above suggesting using altool, and after a little bit of trial and error, this seemed to work for me:
xcrun altool -t osx -f "/path/to/app.dmg" --primary-bundle-id --output-format xml --notarize-app -u apple-id-goes-here -p "app-specific-password"
...then take the RequestUUID and you can check the status using:
xcrun altool --notarization-info RequestUUID-goes-here -u apple-id-goes-here -p "app-specific-password"
...this once that's done you can staple:
xcrun stapler staple "/path/to/app.dmg"
Hope this helps others who are running into the same issue!
Topic:
Code Signing
SubTopic:
Notarization
Tags: