Codesign your downloadable DMG

[konchog]

spctl -a -t open --context context:primary-signature -v "Sublime Text Build 3207.dmg"

returns

Sublime Text Build 3207.dmg: rejected
source=no usable signature

This means that we cannot identify that it’s a valid resource.