ITMS-90885 “${executable}” in bundle “${bundle}” is missing a provisioning profile

I'm struggling to get past the following error from Transporter. I've tried everything I can think of and I'm not sure what else to do.

WARNING ITMS-90885: ""Cannot be used with TestFlight because the executable “${executable}” in bundle “${bundle}” is missing a provisioning profile but has an application identifier in its signature. Nested executables are expected to have provisioning profiles with application identifiers matching the identifier in the signature in order to be eligible for TestFlight.""

Setup

• I'm using electron with a main.app and nested helper apps (e.g. Main.app/Contents/Frameworks/Main Helper (Renderer).app)
• I'm trying to upload to the Mac App Store
• I'm codesign-ing the contents with Apple Distribution: ... and signing the pkg installer with 3rd Party Mac Developer Installer: ...
• I'm using osx-sign to manage the code signing for me: basically it's doing a whole bunch of this:

codesign --sign {40-char-hash} --force --timestamp --options runtime --entitlements "$CHILD_PLIST" "packages/mas-universal/{APP_NAME}.app/Contents/Frameworks/{APP_NAME} Helper (Renderer).app"