|
| 1 | +# Microsoft anti-malware analysis |
| 2 | + |
| 3 | +As new Scala CLI are (wrongly) assumed to be PUA (potentially unwanted applications) by Microsoft Defender SmartScreen |
| 4 | +on Windows, we need to submit them for analysis to Microsoft after release. |
| 5 | + |
| 6 | +Note: the analysis may take time, and the results may not be immediately available. |
| 7 | +Sometimes it's days, sometimes it's weeks. |
| 8 | +It may even occur that the new release gets analysed while the previous one is still in the pipeline |
| 9 | +due to reasons unknown to us. |
| 10 | +As those eventually do pull through, we can't do much about it. |
| 11 | + |
| 12 | +## Submitting a file for analysis |
| 13 | + |
| 14 | +After going through the [release procedure](release-procedure.md), we need to submit the MSI installer for analysis. |
| 15 | +Download the `scala-cli-x86_64-pc-win32.msi` and upload it using this [service](https://www.microsoft.com/en-us/wdsi/filesubmission). |
| 16 | + |
| 17 | +You will need to log in using your company account authorised by the VirtusLab IT division. |
| 18 | +If you don't have one or if the one you do have doesn't have the right permissions |
| 19 | +(even though you are a maintainer of the Scala CLI repository), be sure to reach out to IT. |
| 20 | + |
| 21 | +## Submission form |
| 22 | + |
| 23 | +When reaching https://www.microsoft.com/en-us/wdsi/filesubmission, you will be presented with a form to fill out. |
| 24 | + |
| 25 | + |
| 26 | + |
| 27 | +Submit file as a `Software Developer` and click continue. |
| 28 | + |
| 29 | + |
| 30 | + |
| 31 | +Make sure to grant your team members access to the submission by adding their emails |
| 32 | +in the `Give additional user s access to the submission` section. |
| 33 | +You can find the current Scala CLI team listed in the [Scala CLI publish module definition](../../project/publish.sc) |
| 34 | +You might also want to add the `[email protected]` group email address. |
| 35 | + |
| 36 | +Select `Windows Server Antimalware` as the security product used to scan the file. |
| 37 | +Fill in `VirtusLab` as the `Company Name`. |
| 38 | + |
| 39 | + |
| 40 | + |
| 41 | +#### What do you believe this file is? |
| 42 | +Select `Incorrectly detected as PUA (potentially unwanted application)`. |
| 43 | + |
| 44 | +#### Detection name |
| 45 | +Microsoft Defender SmartScreen prevented an unrecognised app from starting. |
| 46 | + |
| 47 | +#### Definition version |
| 48 | +The version number for the Scala CLI release. |
| 49 | + |
| 50 | +#### Additional information |
| 51 | +Paste the following, fixing swapping out the version number and release link accordingly. |
| 52 | +```text |
| 53 | +This is the Scala CLI v<version number> installer for Microsoft Windows. |
| 54 | +Scala CLI is the official runner of the Scala programming language. |
| 55 | +For more information check https://github.com/VirtusLab/scala-cli/releases/tag/v<version number> |
| 56 | +``` |
| 57 | + |
| 58 | +Click continue. |
| 59 | + |
| 60 | + |
| 61 | + |
| 62 | +You might have to verify that you're a human, after which the submission should proceed. |
| 63 | + |
| 64 | + |
| 65 | + |
| 66 | +Double-check the submission details are correct, ending the process. |
0 commit comments