search

indigo-dc / oidc-agent

oidc-agent for managing OpenID Connect tokens on the command line
MIT License
110 stars 30 forks source link

Microsoft defender warning #546

Open jaceksocha opened 11 months ago

jaceksocha commented 11 months ago

Hi!

During the installation Microsoft defender reports oidc-agent as potentially dangerous, because "unknown publisher"

MicrosoftTeams-image (4)

Is it possible to avoid this behaviour ?

marcvs commented 11 months ago

Yes I know. I have no idea how this can be changed. I guess one has to sign the package, but our windows expertise is quite low.

If you have suggestions, we're happy!

marcvs commented 11 months ago

Apparently, we can do code signing for windows, using TCS. There is an EV certificate, which requires a ubikey and all, but we will investigate this (sooner or later)