Since go 1.23, Windows Defender detects the built binaries as a Trojan

[kachick]

Bad

Appeared #442 again since merging #847

Found 2 patterns

• Trojan:Win32/Wacatac.B!ml
• Trojan:Win32/Sabsik.FL.A!ml

Options I can imagine

• Replace Windows with something
• Sign the binary - Microsoft defender false positives of Go binaries on windows microsoft/go#1255 (comment) => https://github.com/mtrojnar/osslsigncode?
• Downgrade golang
• Replace golang with something - Appeared in rust project Windows Defender false positive detects WezTerm\strip-ansi-escapes.exe as a Trojan:Win32/Malgent!MSR #618
• Manually ignore each alert # Possible for dotfiles. However much frastrated

[kachick]

👀

https://github.com/search?q=signtool+lang%3Ayaml+owner%3Amicrosoft+path%3A.github%2Fworkflows&type=code

[kachick]

No token is needed? https://github.com/microsoft/msstore-cli/blob/c9ebfb7f06e26cbe670a73fd163c008da94bbbea/.github/workflows/build.yml#L132-L134

[kachick]

It looks not appeared now. So I may reopen and address this problem in future.