Skip to content

Commit fb04bc3

Browse files
authored
Add a doc on Windows anti-malware submission procedure (#2546)
1 parent 4b9df1c commit fb04bc3

7 files changed

+68
-2
lines changed
110 KB
Loading
73.5 KB
Loading
93.4 KB
Loading
18.7 KB
Loading
40.3 KB
Loading

.github/release/release-procedure.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,8 +34,8 @@
3434
git push origin v1 -f
3535
```
3636
- [ ] Submit Scala CLI MSI installer `scala-cli-x86_64-pc-win32.msi` for malware analysis. The Msi file must be uploaded
37-
using this [service](https://www.microsoft.com/en-us/wdsi/filesubmission). If you have any questions, please contact
38-
with [lwronski](https://github.com/lwronski).
37+
using this [service](https://www.microsoft.com/en-us/wdsi/filesubmission). For more information on this process, refer
38+
[here](windows-antimalware-analysis.md).
3939
- [ ] Unmark release as `pre-release`.
4040
- [ ] Announce the new release
4141
- [ ] announce on Twitter
Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
# Microsoft anti-malware analysis
2+
3+
As new Scala CLI are (wrongly) assumed to be PUA (potentially unwanted applications) by Microsoft Defender SmartScreen
4+
on Windows, we need to submit them for analysis to Microsoft after release.
5+
6+
Note: the analysis may take time, and the results may not be immediately available.
7+
Sometimes it's days, sometimes it's weeks.
8+
It may even occur that the new release gets analysed while the previous one is still in the pipeline
9+
due to reasons unknown to us.
10+
As those eventually do pull through, we can't do much about it.
11+
12+
## Submitting a file for analysis
13+
14+
After going through the [release procedure](release-procedure.md), we need to submit the MSI installer for analysis.
15+
Download the `scala-cli-x86_64-pc-win32.msi` and upload it using this [service](https://www.microsoft.com/en-us/wdsi/filesubmission).
16+
17+
You will need to log in using your company account authorised by the VirtusLab IT division.
18+
If you don't have one or if the one you do have doesn't have the right permissions
19+
(even though you are a maintainer of the Scala CLI repository), be sure to reach out to IT.
20+
21+
## Submission form
22+
23+
When reaching https://www.microsoft.com/en-us/wdsi/filesubmission, you will be presented with a form to fill out.
24+
25+
![image](img/submit-for-malware-analysis-1.png)
26+
27+
Submit file as a `Software Developer` and click continue.
28+
29+
![image](img/submit-for-malware-analysis-2.png)
30+
31+
Make sure to grant your team members access to the submission by adding their emails
32+
in the `Give additional user s access to the submission` section.
33+
You can find the current Scala CLI team listed in the [Scala CLI publish module definition](../../project/publish.sc)
34+
You might also want to add the `[email protected]` group email address.
35+
36+
Select `Windows Server Antimalware` as the security product used to scan the file.
37+
Fill in `VirtusLab` as the `Company Name`.
38+
39+
![image](img/submit-for-malware-analysis-3.png)
40+
41+
#### What do you believe this file is?
42+
Select `Incorrectly detected as PUA (potentially unwanted application)`.
43+
44+
#### Detection name
45+
Microsoft Defender SmartScreen prevented an unrecognised app from starting.
46+
47+
#### Definition version
48+
The version number for the Scala CLI release.
49+
50+
#### Additional information
51+
Paste the following, fixing swapping out the version number and release link accordingly.
52+
```text
53+
This is the Scala CLI v<version number> installer for Microsoft Windows.
54+
Scala CLI is the official runner of the Scala programming language.
55+
For more information check https://github.com/VirtusLab/scala-cli/releases/tag/v<version number>
56+
```
57+
58+
Click continue.
59+
60+
![image](img/submit-for-malware-analysis-4.png)
61+
62+
You might have to verify that you're a human, after which the submission should proceed.
63+
64+
![image](img/submit-for-malware-analysis-5.png)
65+
66+
Double-check the submission details are correct, ending the process.

0 commit comments

Comments
 (0)