appleboy / CodeGPT

A CLI written in Go language that writes git commit messages or do a code review brief for you using ChatGPT AI (gpt-4o, gpt-4-turbo, gpt-3.5-turbo model) and automatically installs a git prepare-commit-msg hook.
MIT License
1.22k stars 109 forks source link

Chocolatey package: CodeGPT #125

Closed doggy8088 closed 6 months ago

doggy8088 commented 11 months ago

Chocolatey is software management automation for Windows that wraps installers, executables, zips, and scripts into compiled packages.

I made a Chocolatey package for this project: https://community.chocolatey.org/packages/codegpt

The package hasn't been approved by a moderator yet. So it might wait for a couple days to release. After it been released, I will check for new version of this repo daily by CI/CD and release to the Chocolatey repository automatically.

doggy8088 commented 11 months ago

The windows executable been detected 2 security vendors and no sandboxes flagged this file as malicious. So, it's always in the pending state now. 😢

https://www.virustotal.com/gui/file/ed1b6e46249b81e4a4c567933b182dca09e2e7aaf842fe6f68730229c5e26287/detection/f-ed1b6e46249b81e4a4c567933b182dca09e2e7aaf842fe6f68730229c5e26287-1698507277

appleboy commented 11 months ago

@doggy8088 I have no idea how to fix it.

doggy8088 commented 11 months ago

I'm in the moderation queue of the chocolatey right now. It could (may be) release my package soon. I'm in the second page of the 299 packages at this moment.

doggy8088 commented 10 months ago

Good news! The very first chocolatey package already been approved TODAY.

I already pushed 0.7.0 to the Chocolatey repository. It should approved much quicker than first one.

appleboy commented 10 months ago

@doggy8088 Thanks. For Windows users, it is a great blessing.

doggy8088 commented 10 months ago

https://www.virustotal.com/gui/file/701555ac291d14add3961f3fcb3bdebe2deec62315dc2b872730d5373b747509/detection

There are more Security vendors reported this CodeGPT-0.7.0-windows-amd64.exe file marked as Malicious. That's too bad. 😞

image

doggy8088 commented 10 months ago

0.7.0 Approved and Released. 🎉

https://community.chocolatey.org/packages/codegpt/0.7.0

doggy8088 commented 6 months ago

@appleboy My package is about to removal. 🫤

In cases where actual malware is found, the packages are subject to removal. Software sometimes has false positives. Moderators do not necessarily validate the safety of the underlying software, only that a package retrieves software from the official distribution point and/or validate embedded software against official distribution point (where distribution rights allow redistribution).

https://community.chocolatey.org/packages/codegpt#virus

appleboy commented 6 months ago

This morning, I released version 0.10.0. Does this version still have the same issue?

doggy8088 commented 6 months ago

Do you do anything different from 0.8.0 to 0.9.0?

appleboy commented 6 months ago

@doggy8088 Just support Groq API. You can reference https://github.com/appleboy/CodeGPT/releases

appleboy commented 6 months ago

@doggy8088 I also bump the go dependency for security issues.

doggy8088 commented 6 months ago

What's the function calling feature for?

appleboy commented 6 months ago

@doggy8088 Just update the model list from OpenAI Docs that support function calling.

doggy8088 commented 6 months ago

I scanned you latest version: CodeGPT-0.10.0-windows-amd64.exe

It still detected as a Malware. That's really annoying! >"<

https://www.virustotal.com/gui/file/2cbffca515103c765b28b0b8fe90783f9ca26ea119e821378d598258d3bf25ac

appleboy commented 6 months ago

@doggy8088 Can you re-submit or re-run the scan process?

doggy8088 commented 6 months ago

@appleboy Did you change anything? I re-scan again.

https://www.virustotal.com/gui/file/2cbffca515103c765b28b0b8fe90783f9ca26ea119e821378d598258d3bf25ac?nocache=1

image

doggy8088 commented 6 months ago

The codegpt 0.10.0 has been approved. 🎉

https://community.chocolatey.org/packages/codegpt#versionhistory

I think the false-positive issue still remains. The issue will be happen from time to time.