search

andrewkroh / gvm

Go Version Manager (written in Go for cross-platform usability)
Apache License 2.0
195 stars 24 forks source link

Why does VirusTotal say that some vendors flag the .exe as Trojan.Malware? #87

Closed Robinzon100 closed 4 months ago

Robinzon100 commented 4 months ago

image

andrewkroh commented 4 months ago

False positives are a pretty common occurrence for Go programs. See https://go.dev/doc/faq#virus.

You should be able to reproduce the same false positives if you build from source, and retest your binaries. The binaries attached to releases are fully produced within Github Action runners via automation and the toolchain should be entirely reproducible if you review the GH action config and go.mod.

Here's a scan of gvm-windows-amd64.exe from v0.5.2: https://www.virustotal.com/gui/file/27ef4c679475e480346fcfd4e3d8acc254f476491eeb6c572897e8960b5ed8dc

andrewkroh commented 4 months ago

NVM had a similar issue with Crowdstrike Falcon. https://github.com/coreybutler/nvm-windows/issues/769

Robinzon100 commented 4 months ago

My apologies Andrew @andrewkroh I should have researched this more, instead of creating an issue