@Engineer Thank you for the clarification. Yes, we are using our own plugin to present a custom installation step.

@Engineer Yes, we have included OpenJDK as a plugin. I would like to inform you that the OpenJDK files are code-signed prior to notarization.

Hi @Engineer We are using a GUI-based packaging tool called "Packages" to create the .pkg file. I extracted the signed pkg file to check distribution.xml, here are the contents from the file: <?xml version="1.0" encoding="UTF-8"?> <installer-gui-script authoringTool="Packages" authoringToolVersion="1.2.10" authoringToolBuild="732" minSpecVersion="1.0"> <options hostArchitectures="x86_64"/> <!--+==========================+ | Presentation | +==========================+--> <title>DISTRIBUTION_TITLE</title> <background file="background" uti="public.png" scaling="proportional" alignment="bottomleft"/> <background-darkAqua file="background" uti="public.png" scaling="proportional" alignment="bottomleft"/> <!--+==========================+ | Installer | +==========================+--> <choices-outline> <line choice="installer_choice_1"/> </choices-outline> <choice id="installer_choice_1" title="app title" description=""> <pkg-ref id="app_bundle_id"/> </choice> <!--+==========================+ | Package References | +==========================+--> <pkg-ref id="app_bundle_id" version="22.11.0" auth="Root" installKBytes="563402">#app.pkg</pkg-ref> <pkg-ref id="app_bundle_id"> <must-close> <app id="app_bundle_id"/> </must-close> </pkg-ref> </installer-gui-script> ``` ```

@DTS Engineer Thanks for your detailed response. As you mentioned, we haven't encountered any issues with notarization, and it was accepted. We do have pre- and post-install scripts. Do you know if this warning is purely informational and not a security concern? Would you recommend an alternative approach to replace the pre-install script?

@ssmith_c Thanks for your response. We tried the "assess command with install as type," and it returned the result as "accepted." Yes, we have included pre- and post-install scripts in our package.