Code Monkey home page Code Monkey logo

Comments (3)

Trenly avatar Trenly commented on August 22, 2024 1

Is there some sort of automated scan / upload with Defender that y'all can do to ensure that you vet the installs you certify with the Defender team to catch and deal with false positives and/or threats?

All applications go through multiple scans when a manifest is submitted. You can read more about how WinGet ensures the security of packages in the FAQ - How do I know packages in the community repository are safe?.

Regarding false positives - they do occur, but there really isn’t anything WinGet can do about it. Fundamentally, all WinGet does is download the software from the publisher's website, and run it with the correct switches to install unattended just like if a user had run it from the command line themselves. Any false positives need to be handled between the publisher of the software and anti-malware providers themselves. There isn’t really anything that WinGet can do to help avoid a false positive.

from winget-pkgs.

cdonnellytx avatar cdonnellytx commented on August 22, 2024 1

OK, it sounds like you're already doing all you can do already. Thanks!

from winget-pkgs.

Dragon1573 avatar Dragon1573 commented on August 22, 2024

Unable to reproduce the issue.

10:28:01 D:\...\winget-pkgs  [master ≡] 1ms pwsh> sudo { winget install -e vim.vim }
已找到 Vim [vim.vim] 版本 9.1.0514
此应用程序由其所有者授权给你。
Microsoft 对第三方程序包概不负责,也不向第三方程序包授予任何许可证。
正在下载 https://github.com/vim/vim-win32-installer/releases/download/v9.1.0514/gvim_9.1.0514_x64.exe
  ██████████████████████████████  10.8 MB / 10.8 MB
已成功验证安装程序哈希
正在启动程序包安装...
已成功安装

10:28:30 D:\...\winget-pkgs  [master ≡] 20.208s pwsh> winget --info
Windows 程序包管理器(预览) v1.8.924-preview
版权所有 (C) Microsoft Corporation。保留所有权利。

Windows: Windows.Desktop v10.0.22631.3737
系统体系结构: X64
软件包: Microsoft.DesktopAppInstaller v1.23.924.0

Winget 目录
-------------------------------------------------------------------------------------------------------------------
日志                   %LOCALAPPDATA%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\DiagOutputDir
用户设置               %LOCALAPPDATA%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\settings.json
可移植链接目录(用户)   %LOCALAPPDATA%\Microsoft\WinGet\Links
可移植链接目录(计算机) C:\Program Files\WinGet\Links
可移植包根目录(用户)   D:\Applications\WinGet\Packages\Users\
可移植包根目录         D:\Applications\WinGet\Packages\Machine\
可移植包根目录 (x86)   D:\Applications\WinGet\Packages\Machine\
安装程序下载           D:\Dragon1573\Downloads

链接
----------------------------------------------------------------------------
隐私声明             https://aka.ms/winget-privacy
许可协议             https://aka.ms/winget-license
第三方声明           https://aka.ms/winget-3rdPartyNotice
主页                 https://aka.ms/winget
Windows 应用商店条款 https://www.microsoft.com/en-us/storedocs/terms-of-sale

管理员设置                                状态
------------------------------------------------
LocalManifestFiles                        已启用
BypassCertificatePinningForMicrosoftStore 已禁用
InstallerHashOverride                     已禁用
LocalArchiveMalwareScanOverride           已禁用
ProxyCommandLineOptions                   已禁用
DefaultProxy                              已禁用

image

from winget-pkgs.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.