search

DataDog / terraform-provider-datadog

Terraform Datadog provider
https://www.terraform.io/docs/providers/datadog/
Mozilla Public License 2.0
393 stars 373 forks source link

v3.14.0_darwin_amd64 is being marked as a virus by Google Chrome/Gmail/my antivirus #1541

Closed annedroiid closed 1 year ago

annedroiid commented 2 years ago

Hi there,

Thank you for opening an issue. Please note that we try to keep the Terraform issue tracker reserved for bug reports and feature requests. For general usage questions, please see: https://www.terraform.io/community.html.

Terraform Version

1.2.4

Affected Resource(s)

The entire provider for darwin machines for version 3.13.1 and 3.14.0

Expected Behavior

I should be able to download/use the provider without getting virus warnings

Actual Behavior

When I try to download it in Google Chrome it gives the warning that it may be dangerous

Screenshot 2022-08-23 at 17 38 26

When I try to attach it to an email in gmail it gives the warning Virus detected! along with a Help link that directs you to https://support.google.com/mail/answer/25760?hl=en-GB. If I try to send the email anyway I get a popup error stating Note: there were errors attaching your file(s)

When I tried to download it from google drive I get this pop up

Screenshot 2022-08-23 at 17 22 06

My company's anti-virus is also aggressive enough that it automatically deletes the file after it has downloaded, which means that I can't use this version because as soon as Terraform installs the provider my anti-virus automatically deletes the binary file.

Steps to Reproduce

On google chrome try to download https://github.com/DataDog/terraform-provider-datadog/releases/download/v3.14.0/terraform-provider-datadog_3.14.0_darwin_amd64.zip

Important Factoids

This issue also happens on

I can download all of the other assets in those releases with no issues, as well as download 3.12.0.

therve commented 2 years ago

Is in an issue when you let terraform download the provider for you? Any reason you're doing that manually? Thanks.

annedroiid commented 2 years ago

Yes it's a problem when terraform downloads the provider, that's how I first noticed the issue. My anti-virus automatically deletes the binary file immediately after it's downloaded and while terraform is still downloading the rest of the providers, and then terraform fails with the following

| Error: Required plugins are not installed
│ 
│ The installed provider plugins are not consistent with the packages
│ selected in the dependency lock file:
│   - registry.terraform.io/datadog/datadog: the cached package for registry.terraform.io/datadog/datadog 3.14.0 (in .terraform/providers) does not match any of the checksums recorded in the dependency lock file
│ 
│ Terraform uses external plugins to integrate with a variety of different
│ infrastructure services. To download the plugins required for this
│ configuration, run:
│   terraform init

I only tried downloading it manually after I discovered that that binary file was missing, as I thought it might be an issue with terraform and I could try manually copying the file over. That's when I discovered that Google thinks it contains a virus, and was then able to determine it was my anti-virus that was deleting the file.

annedroiid commented 2 years ago

I've found some more details in the logs, it's complaining this is the vulnerability

Osx.Exploit.CVE_2021_4034-9951522-2

https://nvd.nist.gov/vuln/detail/cve-2021-4034

therve commented 2 years ago

Seems to be a antivirus issue: https://github.com/lima-vm/lima/issues/1028.

annedroiid commented 1 year ago

Thank you, I got my company to update the anti-virus and the issue has gone away.