New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Since go 1.23, Windows Defender detects the built binaries as a Trojan #851

Open

kachick opened this issue Oct 16, 2024 · 2 comments

Owner

kachick commented Oct 16, 2024 •

edited

Loading

Bad

Appeared #442 again since merging #847

Found 2 patterns

Trojan:Win32/Wacatac.B!ml
Trojan:Win32/Sabsik.FL.A!ml

Options I can imagine

Replace Windows with something
Sign the binary - Microsoft defender false positives of Go binaries on windows microsoft/go#1255 (comment) => https://github.com/mtrojnar/osslsigncode?
Downgrade golang
Replace golang with something - Appeared in rust project Windows Defender false positive detects WezTerm\strip-ansi-escapes.exe as a Trojan:Win32/Malgent!MSR #618
Manually ignore each alert # Possible for dotfiles. However much frastrated

The text was updated successfully, but these errors were encountered:

kachick added the bug label

kachick added this to 🛸

github-project-automation bot moved this to 🙋‍♂ in 🛸

kachick mentioned this issue

シェルスクリプトの管理が辛いから、堅めでどこでも動かしやすくて足回りが重たくない言語で書き換えたい #183

Closed

Owner Author

kachick commented Oct 16, 2024

👀

https://github.com/search?q=signtool+lang%3Ayaml+owner%3Amicrosoft+path%3A.github%2Fworkflows&type=code

Owner Author

kachick commented Oct 16, 2024

No token is needed? https://github.com/microsoft/msstore-cli/blob/c9ebfb7f06e26cbe670a73fd163c008da94bbbea/.github/workflows/build.yml#L132-L134

kachick removed the bug label

kachick mentioned this issue

Nightly build for windows provisioner #417

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment