invalid destination for symbolic link in bundle

[vpszi]

i'm using the macos-alias package which contains a python3 symlink. i managed to sucessfully sign my app with the following configuration:

    osxSign:{
            identity: '<my-identity>',
            ignore: 'node_gyp_bins/python3',
            strictVerify: false,
          },

when i open my app on a different device i get the following error message: “My App” is damaged and can’t be opened. This file was downloaded on an unknown date.

i get a more detailed error with spctl --assess --type execute --verbose --ignore-cache --no-cache My-App.app: My-App.app: rejected (invalid destination for symbolic link in bundle)

How can i fix this issue?