We developed a really neat resigning of PKG installers on Linux, only to learn that the binaries to notarize macOS installers and apps (altool, see <a href="https://developer.apple.com/documentation/xcode/notarizing_macos_software_before_distribution/customizing_the_notarization_workflow?language=objc" rel="nofollow">https://developer.apple.com/documentation/xcode/notarizing_m...</a>) ONLY run on macOS.<p>This looks to be the level we reached using a variety of tools, and could simplify the workflow, but doesn't answer the notarization step (arguably only because of Apple's limitations). We basically built a valid, signed installer, unxar'd it, did slug replacements for values for each instance, compiled some postInstall scripts, packed and resigned it using the Application ID certificate.<p>Anyone know of any projects that hope to bring the notarization step across platforms?