search

indigo-dc / oidc-agent

oidc-agent for managing OpenID Connect tokens on the command line
MIT License
115 stars 30 forks source link

Microsoft defender warning #546

Open jaceksocha opened 1 year ago

jaceksocha commented 1 year ago

Hi!

During the installation Microsoft defender reports oidc-agent as potentially dangerous, because "unknown publisher"

MicrosoftTeams-image (4)

Is it possible to avoid this behaviour ?

marcvs commented 1 year ago

Yes I know. I have no idea how this can be changed. I guess one has to sign the package, but our windows expertise is quite low.

If you have suggestions, we're happy!

marcvs commented 1 year ago

Apparently, we can do code signing for windows, using TCS. There is an EV certificate, which requires a ubikey and all, but we will investigate this (sooner or later)