-
Notifications
You must be signed in to change notification settings - Fork 4.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
New version: qBittorrent.qBittorrent version 4.3.9 #34731
Conversation
/AzurePipelines run |
Azure Pipelines successfully started running 1 pipeline(s). |
Hello @gregoryka, The application included in this pull request failed to pass the Installers Scan test. This test is designed to ensure that the application installs on all environments without warnings. For more details on this error, see Binary validation errors. Please check to ensure the installer URL is correct and update the URL and the Hash if a change is made. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Flagged as PUA or Malware: #34731 (comment)
At the moment, there's not much you can do to solve this.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Kind of weird considering VirusTotal says the files are ok x64 x86 Would maybe be nice to know which one flagged, but nothing much I can do, unfortunately.
I wrote about VirusTotal a while ago, but the pipelines doesn't seem to utilize it according to #373 (comment). What the pipelines does right now is do static analysis, and dynamic analysis (run on various anti-virus software) on the installers in the package.
You can reproduce the VirusTotal situation above, by uploading an installer which has a very low download counts (i.e. internal builds for Microsoft Teams) to VirusTotal, and in that report's details, you will see that First Submission
is from 2021-11-13 (today) instead of 6+ months ago.
Your report for both of those URLs doesn't show the statistics for Microsoft Defender as it seems to be a known issue for a lot of people using first-party anti-virus software from Microsoft: qbittorrent/qBittorrent#15674, qbittorrent/qBittorrent#15667, qbittorrent/qBittorrent#15134.
winget validate --manifest <path>
?winget install --manifest <path>
?Note:
<path>
is the name of the directory containing the manifest you're submitting.Microsoft Reviewers: Open in CodeFlow