Since go 1.23, Windows Defender detects the built binaries as a Trojan

[kachick]

Bad

Appeared https://github.com/kachick/dotfiles/issues/442 again since merging https://github.com/kachick/dotfiles/pull/847

Found 2 patterns

• Trojan:Win32/Wacatac.B!ml
• Trojan:Win32/Sabsik.FL.A!ml

Options I can imagine

• Replace Windows with something
• Sign the binary - https://github.com/microsoft/go/issues/1255#issuecomment-2197738659 => https://github.com/mtrojnar/osslsigncode?
• Downgrade golang
• Replace golang with something - Appeared in rust project https://github.com/kachick/dotfiles/issues/618
• Manually ignore each alert # Possible for dotfiles. However much frastrated

[kachick]

👀

https://github.com/search?q=signtool+lang%3Ayaml+owner%3Amicrosoft+path%3A.github%2Fworkflows&type=code

[kachick]

No token is needed? https://github.com/microsoft/msstore-cli/blob/c9ebfb7f06e26cbe670a73fd163c008da94bbbea/.github/workflows/build.yml#L132-L134