Comments (4)
Thx You all
I was only astonished, because it was the fist version I've got this finding.
so I'll 1st upgrade to 2.2.40 (from 2.0.17) and if everything is fine (normally i can expect this ... because you make a great Job in Conan 2 development ... 🥇 ) I'll create the executable and zip file by my self.
so from my perspective, the issue can be closed.
from conan.
Hi @Weruminger
Thanks for reporting.
This seems a known issue. The conan.exe self-contained executable inside the folder is created with pyinstaller
, a tool that bundles the app with the Python interpreter. This tool creates binaries with some signature inside.
This pyinstaller
tool has been used in the past to create some malicious applications, so some antivirus mark all created applications with pyinstaller
as malicious.
We will investigate this again just in case, there will be some other options:
- You can install from PyPI (the most common approach) with
pip install conan
- Creating the self contained executable from source yourself is straightforward, you can run the
python pyinstaller.py
script in the root of the repo, and it will create that executable
from conan.
Hi @Weruminger,
Thanks a lot for reporting. I have been checking and I think that could be due to heuristic analysis by antivirus software, which might identify certain patterns in the file as suspicious even if the file is actually safe.
The only file that changes in checksum, for example, between 2.4.0 and 2.4.1 in the zip would be conan.exe (which is expected) although they get very different reports in virustotal:
2.4.1: https://www.virustotal.com/gui/file/3f2bbe5e28aadf60a62b6d1cd048d2784a4b5c56a03fcacb611e7ff0c5edcca5
2.4.0: https://www.virustotal.com/gui/file/9ff576a9c8e205b8a3f5934bb5d50d1d962167f63757a0f8ee35b8741938b444
I also re-generated the zip file for 2.4.1 in the CI and got other different results, so I think the issue could be caused by some kind of algorithm that tries to predict potential issues.
from conan.
Thx You all I was only astonished, because it was the fist version I've got this finding. so I'll 1st upgrade to 2.2.40 (from 2.0.17) and if everything is fine (normally i can expect this ... because you make a great Job in Conan 2 development ... 🥇 ) I'll create the executable and zip file by my self.
so from my perspective, the issue can be closed.
Thank you so much for reporting and you kind words, closing this issue then.
from conan.
Related Issues (20)
- [question] runtime_deploy copying deps with run=False trait HOT 3
- [question] How to build locally with msys2 HOT 3
- [feature] Better error message when profile defines a tool_require loop by mistake HOT 1
- [bug] conan should not change ownership of files while extracting conan_package.tgz HOT 3
- [question] Undefined zlib references when building Qt
- [question] How to erase values from one profile to the other HOT 3
- [bug] required tool paths gets overridden when using host profiles HOT 3
- [question] CMake no depencency include directories in VS solution HOT 6
- [question] Support for gcc 14 in Conan 1 HOT 3
- [question] How can I distinguish release and debug versions when I upload pacakges to jfrog artifactory automatically HOT 6
- [bug] Conflict when running install(RUNTIME_DEPENDENCY_SET my_app_deps ...) HOT 6
- [bug] apply_conandata_patches: Massive patch fail to apply with "No such file or directory" HOT 3
- [question] how to correctly expose transitive dependencies HOT 3
- [question] requirements defined from a file and lockfiles HOT 3
- [bug] Changing info.settings.compiler erases other compiler options HOT 6
- [bug] BazelDeps generator produces invalid absolute glob HOT 1
- [question] test_requires in lockfile/SBOM HOT 1
- [question] How to install runtime dependencies alongside conan ones? HOT 3
- [question] header-only lib component HOT 2
- Conan2: how to set package root folder while creating a package HOT 10
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from conan.