It's a pain in the ass and you'd need to pay $100 for an Apple developer account in order to sign the build (unless you have an account already). I've tried publishing a DMG without notarization/signing but upon download it can't even be opened
But I may be wrong here, I'm new to Mac application builds