User Profile

I just want to make sure I am doing this right, as currently there's no real way of knowing except running spctl, codesign and stapler validate.I see in multiple locations that if I have a dmg I should sign outwards and only notarize the dmg. Is this correct? Is it because the gatekeeper checks at time of opening the dmg, and when moving it the quarantine flag is cleared?I'm asking because - out of habit - after installing the app I ran my verifications and of course they failed as the app is not notarized.Thanks,Kaj

I'm not sure how the status page shows notarization as green.I am testing a new project, notarization used to take 2-3 minutes, it took 37 minutes last night, because of error 239.Obviously I have a valid UUID, it was returned by Apple.Before error 239 happened intermittedly for a few minutes after submission, figured it was a concurrency issue on Apple's side as it always was found after a few minutes, and because of that we don't error out our build pipeline on that error.Now I've been staring at the same notarization for over an hour, throwing error 239 and I don't know if I should truly treat is an error now or continues polling or if the system indeed lost the UUID somehow.It's extremely inconvenient, at least some notification on the status dash seems justified.