Chrome flags a private GitHub Actions artifact download as dangerous

[inspector-34jyou]

🏷️ Discussion Type

Question

💬 Feature/Topic Area

Other

Discussion Details

Hello GitHub Community,

I am building a Windows desktop application using GitHub Actions in a private repository.

The workflow builds a Windows executable using Python and PyInstaller, then uploads a ZIP artifact.

When I try to download the artifact through Google Chrome, Chrome blocks the ZIP with the warning "This file is dangerous."

The original ZIP and EXE checksums have been verified, and a Microsoft Defender scan of the original executable reported zero detections.

However, the EXE is unsigned, and I understand that these checks do not guarantee the file is safe.

I would like to ask:

1. Has anyone experienced similar Chrome warnings when downloading GitHub Actions artifacts?
2. Is there an official GitHub support channel for investigating this issue?
3. Is there a recommended way to request a review of the warning for artifacts stored in private repositories?

I do not want to disable browser security protections or bypass the warning.

Thank you for your guidance.