Windows builds are flagged for malware about inbucket HOT 3 OPEN

All of the builds are done via a single github action, not from my personal machine, so I think the likelihood that it's a false positive is high. The builds leverage a 3rd party build & packaging tool: goreleaser

Release build config lives here, this triggers goreleaser:
https://github.com/inbucket/inbucket/blob/main/.github/workflows/release.yml

Goreleaser config lives here:
https://github.com/inbucket/inbucket/blob/main/.goreleaser.yml

Build output from the recent beta: https://github.com/inbucket/inbucket/actions/runs/4296529322/jobs/7488362079

Virustotal doesn't make it clear what file is triggering the warning, although I would expect one of the EXEs, as the compiled UI assets would be the same in the Linux release.

If we can narrow it down to a particular file, we could try building that outside of github and see if it still triggers.

Edit: I should note that the Inbucket program does not try to phone home, or do any analytics/telemetry collection.

from inbucket.

Sounds like this may be common with binaries produced by Go:

lian/msfs2020-go#14

https://go.dev/doc/faq#virus

from inbucket.

Virustotal doesn't make it clear what file is triggering the warning, although I would expect one of the EXEs, as the compiled UI assets would be the same in the Linux release.

If we can narrow it down to a particular file, we could try building that outside of github and see if it still triggers.

It's inbucket-client.exe, though I expect the Go links are probably correct.

from inbucket.