[GH-ISSUE #269] Windows executable flagged by scanners #208

New issue

Closed

opened 2026-05-07 00:21:35 +02:00 by BreizhHardware · 4 comments

BreizhHardware commented

2026-05-07 00:21:35 +02:00

Owner

Originally created by @binwiederhier on GitHub (May 25, 2022).
Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/269

Originally created by @binwiederhier on GitHub (May 25, 2022). Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/269

BreizhHardware

2026-05-07 00:21:35 +02:00

closed this issue
added the
in-progress 🏃

🪲 bug

server
labels

BreizhHardware commented

2026-05-07 00:21:36 +02:00

Author

Owner

@Curid commented on GitHub (May 25, 2022):

Time for the yearly $500 Microsoft tax.

https://docs.microsoft.com/en-us/windows-hardware/drivers/dashboard/get-a-code-signing-certificate

@Curid commented on GitHub (May 25, 2022): Time for the yearly $500 Microsoft tax. https://docs.microsoft.com/en-us/windows-hardware/drivers/dashboard/get-a-code-signing-certificate

BreizhHardware commented

2026-05-07 00:21:36 +02:00

Author

Owner

@binwiederhier commented on GitHub (May 30, 2022):

Apparently it is common for Go binaries to be flagged by virus scanners, so common that they dedicated a FAQ item to it: https://go.dev/doc/faq#virus

There's also a 5 months young Reddit post about it: https://www.reddit.com/r/golang/comments/rism9x/why_does_windows_defender_still_flag_gobinaries/

The bottom line is: There's nothing you can do about it. I manually re-read the code of subscribe.go, and it's injecting the environment variables from the remote message, NOT the command. So those scanners are all wrong.

@binwiederhier commented on GitHub (May 30, 2022): Apparently it is common for Go binaries to be flagged by virus scanners, so common that they dedicated a FAQ item to it: https://go.dev/doc/faq#virus There's also a 5 months young Reddit post about it: https://www.reddit.com/r/golang/comments/rism9x/why_does_windows_defender_still_flag_gobinaries/ The bottom line is: There's nothing you can do about it. I manually re-read the code of subscribe.go, and it's injecting the environment variables from the remote message, NOT the command. So those scanners are all wrong.

BreizhHardware commented

2026-05-07 00:21:36 +02:00

Author

Owner

@binwiederhier commented on GitHub (May 30, 2022):

The scoop project has asked for binaries to be built from a pipeline to prove that they match the source. I wanted to do that anyway in #36 so I'm doing that.

@binwiederhier commented on GitHub (May 30, 2022): The scoop project has asked for binaries to be built from a pipeline to prove that they match the source. I wanted to do that anyway in #36 so I'm doing that.

BreizhHardware commented

2026-05-07 00:21:36 +02:00

Author

Owner

@binwiederhier commented on GitHub (Jun 3, 2022):

I commented on https://github.com/ScoopInstaller/Main/pull/3594 and I'm now awaiting their response. There is nothing really I can do about the executable being flagged by scanners. I'm going to close this ticket for now. If anyone has any great ideas let me know.

@binwiederhier commented on GitHub (Jun 3, 2022): I commented on https://github.com/ScoopInstaller/Main/pull/3594 and I'm now awaiting their response. There is nothing really I can do about the executable being flagged by scanners. I'm going to close this ticket for now. If anyone has any great ideas let me know.