Suspicious Virus Alert On Windows: Operation did not complete successfully because the file contains a virus or potentially unwanted software.

[arravo-github]

I got this error while trying to install goose today. Windows Defender flagged the installation as a virus/threat. Does anyone have any insight?

[amandaguthrie]

I got the same error today, it was v3.19.2 installed a while ago through go install.

Minimal defender info:
Detected: Trojan:Win32/Wacatac.B!ml
Affected items: file: %USERPROFILE%\go\bin\goose.exe

Installed 3.21.1 downloaded directly from GitHub releases, verified checksum once downloaded, and Windows Defender hasn't flagged it yet.

[mfridman]

Yikes, sorry about that. We use GoReleaser to distribute pre-built binaries. It's possible there's additional configuration we need to enable. Possibly signing with a key.

Can others confirm the latest version is working without issues?

We did recently update to the latest version and action.