Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

okta-aws-cli_v2.0.0.exe being flagged by AV #166

Closed
grahamfw-cfa opened this issue Jan 30, 2024 · 3 comments
Closed

okta-aws-cli_v2.0.0.exe being flagged by AV #166

grahamfw-cfa opened this issue Jan 30, 2024 · 3 comments

Comments

@grahamfw-cfa
Copy link

The latest Windows version (okta-aws-cli_v2.0.0.exe) is being tagged by Windows Defender as well as a few others according to VirusTotal.

VirusTotal link: https://www.virustotal.com/gui/file/8a1d71fa628f1f081f43ff72bca3b8a8fa078cb4d52e094426b3f56f9a54a57d/detection

@monde
Copy link
Collaborator

monde commented Jan 31, 2024

We are getting registered on Chocolatey and they are telling us golang built binaries for Windows amd64 are trigging AVs, it's not just us. We are going to address this in the short term by only releasing the i386 Windows version. It is unacceptable to have the binaries we produce triggering as virus infected.

@jefftaylor-okta

@minhio
Copy link

minhio commented Feb 19, 2024

any ideas on when windows amd64 binaries will available again? (or if there are any workaround?) thanks!

@monde
Copy link
Collaborator

monde commented Feb 20, 2024

hi @minhio I'm not sure when we'll look at publishing a 64 bit version again. As i386 binary will run on amd64 we'd rather just publish that binary and not have false positive AV results causing doubt. Even though it is well known that many binaries built with golang for amd64 will trigger AV false positives.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants