LGTM

Can someone please try this on OSX @chochreiner. I also signed the dmg but I'm not sure that this works with the current certificate (even quite sure that it doesn't).
https://builds.jabref.org/cert/

Standard response (double click):

By right click -> open:

With the signed version:

So it seems to work but gives of course the standard warning for Applications from outside the App Store.

hmm
for me, there is no difference between the app from the master and the cert branch
Which certificate are you currently using?

Which settings do you have for installing applications? For me it is set to "Allow apps downloaded from Mac App Store and identified developers".

I think if you use one of the other two settings there will be no differences between the builds...

For me its: "App Store and identified developers" (on MacOS Sierra)

Ok.. Now I am confused. Just checked on MacOS Sierra from a colleague and there is no difference between the builds. Maybe it is something about the OS (I am using OS X El Capitan) or I have changed something else which interferes, f.e. disabled SIP to get Spaces back, but this shouldn't make a difference. I can check next week on OS X Mavericks or later today on Mac OS X Snow Leopard.. but I think the latter has no signing...

Maybe we need an extra certificate issued or registered with the App Store for MacOSX? Needs to be investigated later. For now it works for Windows at least.