Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is there a virus in the pre-built binaries? #43

Closed
Lehnemann opened this issue May 16, 2023 · 2 comments
Closed

Is there a virus in the pre-built binaries? #43

Lehnemann opened this issue May 16, 2023 · 2 comments
Labels
question Further information is requested

Comments

@Lehnemann
Copy link

I don't know much about your code but Bitdefender warns me and I throw the exe file in virustotal.com and It said this to me...
image

Is it a false positive?

@KnugiHK
Copy link
Owner

KnugiHK commented May 17, 2023

TLDR: It is probably a false positive.

I compile the program with Nuitka in GitHub Action environment. A Python program packed/compiled into a binary is often easily detected as a virus. I checked some issues on Nuitka. Compiling the thing right without being falsely detected is behind their paywall.

I also checked the result from VirusTotal, no detection on Linux and MacOS binaries. Most of the threat detected in Windows's binary is "Lazy", and the sandbox analysis seems fine to me, with no evidence of the binary getting infected by any viruses.

Compilation is handled automatically within a GitHub Actions workflow. To safeguard against binary tampering post-download, I've implemented SHA256 checksum generation directly after compilation. The resulting hash is displayed in the workflow logs for verification (see bf06795), which will be retained for 90 days. This added security feature will be active from the next release onwards.

Anyway, when in doubt, you can always review the code (which I always encourage people to do so before using someone else's software) and install the exporter with pip install ..

@KnugiHK KnugiHK added the question Further information is requested label May 17, 2023
@KnugiHK KnugiHK pinned this issue May 17, 2023
@Lehnemann
Copy link
Author

Thanks.

@KnugiHK KnugiHK changed the title Is there a virus in the Hot Fix 2023/05/17 release? Is there a virus in the pre-built binaries? Sep 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants