search

s-victor / TinyPedal

Free and Open Source telemetry overlay application for racing simulation
GNU General Public License v3.0
75 stars 8 forks source link

VirusTotal detects a Trojan in the windows.zip file #50

Closed nicon-83 closed 5 months ago

nicon-83 commented 5 months ago

Hello

VirusTotal detects a Trojan in this file https://github.com/s-victor/TinyPedal/releases/download/v2.11.1/TinyPedal-2.11.1-windows.zip

https://www.virustotal.com/gui/file/009f2779446362cd23d318f91e1ddb9bb925d2ceb748c102fceb1af06cedee93

Can you fix it please ?

s-victor commented 5 months ago

Hi, the executable files from release page since v2.10.1 were automatically and remotely built using github action, which is clean. Any virus reports for files built by github action from the release page (with matching SHA256) are false-positive.

You can find all building processing in this link: https://github.com/s-victor/TinyPedal/actions

The entire building source > uploading > releasing process is fully automated by github action, and there is no human interruption during the process. And there is also SHA256 hash sum provided in released notes, which you can use it to check if file is intact (they are also auto-generated from the above mentioned github action automation).

Alternatively, see guide run from source or build executable for windows for running or building the app from source.

s-victor commented 5 months ago

The false positive issue is added and explained in FAQ page: https://github.com/s-victor/TinyPedal/wiki/Frequently-Asked-Questions