Comments (3)
Is there some sort of automated scan / upload with Defender that y'all can do to ensure that you vet the installs you certify with the Defender team to catch and deal with false positives and/or threats?
All applications go through multiple scans when a manifest is submitted. You can read more about how WinGet ensures the security of packages in the FAQ - How do I know packages in the community repository are safe?.
Regarding false positives - they do occur, but there really isn’t anything WinGet can do about it. Fundamentally, all WinGet does is download the software from the publisher's website, and run it with the correct switches to install unattended just like if a user had run it from the command line themselves. Any false positives need to be handled between the publisher of the software and anti-malware providers themselves. There isn’t really anything that WinGet can do to help avoid a false positive.
from winget-pkgs.
OK, it sounds like you're already doing all you can do already. Thanks!
from winget-pkgs.
Unable to reproduce the issue.
10:28:01 D:\...\winget-pkgs [master ≡] 1ms pwsh> sudo { winget install -e vim.vim }
已找到 Vim [vim.vim] 版本 9.1.0514
此应用程序由其所有者授权给你。
Microsoft 对第三方程序包概不负责,也不向第三方程序包授予任何许可证。
正在下载 https://github.com/vim/vim-win32-installer/releases/download/v9.1.0514/gvim_9.1.0514_x64.exe
██████████████████████████████ 10.8 MB / 10.8 MB
已成功验证安装程序哈希
正在启动程序包安装...
已成功安装
10:28:30 D:\...\winget-pkgs [master ≡] 20.208s pwsh> winget --info
Windows 程序包管理器(预览) v1.8.924-preview
版权所有 (C) Microsoft Corporation。保留所有权利。
Windows: Windows.Desktop v10.0.22631.3737
系统体系结构: X64
软件包: Microsoft.DesktopAppInstaller v1.23.924.0
Winget 目录
-------------------------------------------------------------------------------------------------------------------
日志 %LOCALAPPDATA%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\DiagOutputDir
用户设置 %LOCALAPPDATA%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\settings.json
可移植链接目录(用户) %LOCALAPPDATA%\Microsoft\WinGet\Links
可移植链接目录(计算机) C:\Program Files\WinGet\Links
可移植包根目录(用户) D:\Applications\WinGet\Packages\Users\
可移植包根目录 D:\Applications\WinGet\Packages\Machine\
可移植包根目录 (x86) D:\Applications\WinGet\Packages\Machine\
安装程序下载 D:\Dragon1573\Downloads
链接
----------------------------------------------------------------------------
隐私声明 https://aka.ms/winget-privacy
许可协议 https://aka.ms/winget-license
第三方声明 https://aka.ms/winget-3rdPartyNotice
主页 https://aka.ms/winget
Windows 应用商店条款 https://www.microsoft.com/en-us/storedocs/terms-of-sale
管理员设置 状态
------------------------------------------------
LocalManifestFiles 已启用
BypassCertificatePinningForMicrosoftStore 已禁用
InstallerHashOverride 已禁用
LocalArchiveMalwareScanOverride 已禁用
ProxyCommandLineOptions 已禁用
DefaultProxy 已禁用
from winget-pkgs.
Related Issues (20)
- [Package Issue]: SWIG.SWIG: `swig.exe <file>` always fails because `swig.exe -swiglib` is wrong HOT 4
- [Package Request]: Google Pinyin HOT 2
- [Package Request]: AB Download Manager
- [Update Request]: seerge.g-helper
- [Package Issue]: giuliosorrentino.wheelofnumfortube.avalonia HOT 6
- [Update Request]: NirSoft.NirCmd 2.87
- [Package Request]: DocFetcher HOT 1
- [Update Request]: MSI.Kombustor.4 HOT 1
- [Update Request]: SourceGit 8.26
- [Update Request]: TightVNC v2.8.85
- [Update Request]: Taiizor.SucroseWallpaperEngine HOT 2
- [Package Issue]: Graphviz.Graphviz HOT 6
- [Update Request]: VRC Creator Companion
- [Update Request]: BandicamCompany.Bandicut 3.8.4.2434
- [Update Request]: AGFEO Dashboard 2.0.12 HOT 1
- [Update Request]: Search My Files HOT 1
- [Package Request]: NirSoft.UninstallView HOT 2
- [Package Issue]: Microsoft .NET SDK: Upgrade installs the packages, but still says updates are available HOT 1
- [Update Request]: Plover 4.0.0rc2 HOT 1
- [Update Request]: KNIME HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from winget-pkgs.