Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Build our own Gaphor bootloader #3059

Merged
merged 6 commits into from
Jan 28, 2024
Merged

Build our own Gaphor bootloader #3059

merged 6 commits into from
Jan 28, 2024

Conversation

danyeaw
Copy link
Member

@danyeaw danyeaw commented Jan 27, 2024

The PyInstaller bootloader is often flagged by virus scanners as a virus or trojan. This PR builds our own bootloader on CI on Windows which should have a different virus scanner signature than ones pre-built.

PR Checklist

Please check if your PR fulfills the following requirements:

PR Type

What kind of change does this PR introduce?

  • Bug fix
  • Feature
  • Chore (refactoring, formatting, local variables, other cleanup)
  • Documentation content changes

What is the current behavior?

Avast, Windows Defender, AVG, Google Smartscanner, and others were detecting that Gaphor was a Trojan.

Issue Number: N/A

What is the new behavior?

All detect as clean.

Does this PR introduce a breaking change?

  • Yes
  • No

Other information

@danyeaw danyeaw force-pushed the build-pyinstaller-bootloader branch 2 times, most recently from 5edf8e4 to f99b00d Compare January 27, 2024 15:12
Fix virus scanner false positives by building our own bootloader.
@danyeaw danyeaw force-pushed the build-pyinstaller-bootloader branch from f99b00d to 1bc70ca Compare January 27, 2024 15:26
@danyeaw danyeaw added the bug An issue in the application label Jan 27, 2024
Copy link
Member Author

@danyeaw danyeaw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@amolenaar, your tweaks look great to me, thanks for the teamwork 👍

@danyeaw
Copy link
Member Author

danyeaw commented Jan 27, 2024

Unfortunately, this didn't really improve the virus scanner performance, 5 of 64 reporting it as malicious: https://www.virustotal.com/gui/file/72abf7595357d36edb62d1288bd1bf4f2fb18971aa03ca3770ba61f9d11e7c19?nocache=1

@amolenaar
Copy link
Member

It also shows detections in other libraries (cairo, harfbuzz).

@amolenaar
Copy link
Member

Shall we merge this? I know it does not fix Gaphor flagged for viruses, but it feels good to be in control of this part of the delivery process 😄 .

Maybe we should do the same for macOS.

@amolenaar amolenaar changed the title Fix virus scanner false positives Build our own Gaphor bootloader Jan 28, 2024
@danyeaw danyeaw merged commit 08e4cf3 into main Jan 28, 2024
18 checks passed
@danyeaw danyeaw deleted the build-pyinstaller-bootloader branch January 28, 2024 22:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug An issue in the application
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants