V2.3.1 - issues with .exe in Virustotal

[lobl]

Parquet Viewer Version 2.3.1

Where was the parquet file created? no Parquet file involved

Sample File no Parquet file involved

Describe the bug Scanned the ParquetViewer.exe with Virustotal and it gave the following issues, see screenshot. Please check and advise whether this is really an issue or wrong positive.

Screenshots

Additional context

Note: This tool relies on the parquet-dotnet library for all the actual Parquet processing. So any issues where that library cannot process a parquet file will not be addressed by us. Please open a ticket on that library's repo to address such issues.

[mukunku]

The exe is not signed which might cause false positives in virus scanners. The source code is open to all for review so hopefully that's enough for people because official code signing certificates are really expensive.

Closing this ticket as there's nothing we can do about this.

[XVII]

Windows prevents opening non-signed files on some computers. Maybe something like Azure Trusted Signing services might be a more cost-effective option? Maybe they'd even sponsor a community project.

[mukunku]

Thanks for the idea @XVII . It seems like it's 120$/year + tax:

I'll need to think about it as it's still not cheap. But still better than buying individual certificates which are usually in the hundreds to thousands!

[XVII]

Yeh CAs are really clamping down and have made them expensive. Maybe GitHub sponsorship?

It looks like https://www.sigstore.dev/ might work one day, though I doubt trust has made it to Windows yet.

From a GPL perspective: https://www.gnu.org/licenses/gpl-faq.html#GiveUpKeys