Just this month we moved the installer creation step of our build pipeline to an on-premise mac mini in order to let install4j handle the signing & notarization (for windows, linux and mac).