MerginMaps / MerginMaps/mobile

Windows Defender SmartScreen warning displayed when installing Mergin Maps for Windows

Open
#4,523 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement Windows 🪟
Dominant language
C++
Stars
388
Forks
87
Avg merge
2d 7h
Merged PRs (30d)
20

Description

**Description**
---------------------------

When a user downloads and attempts to install the Mergin Maps Windows application, Microsoft Defender SmartScreen displays a security warning stating that the application is from an "Unknown publisher" and that running it may put the PC at risk. This warning appears every time the installer is launched and may prevent users from installing the application, as less technical users are likely to click "Don't run" instead of "Run anyway."

**Steps to Reproduce**
----------------------------

1. Download the Mergin Maps Windows installer
2. Open the downloaded .exe file.
3. Observe the Windows Defender SmartScreen dialog.

**Actual Result**
---------------------------
Microsoft Defender SmartScreen displays a warning dialog with the message: "Microsoft Defender SmartScreen prevented an unrecognised app from starting. Running this app might put your PC at risk." The Publisher is listed as Unknown publisher. The user must click "Run anyway" to proceed with the installation.

**Expected Result**
-----------------------------
The Windows installer is signed with a valid, trusted code signing certificate. Microsoft Defender SmartScreen does not display a security warning and the application launches directly after the user confirms the installation via the standard UAC prompt.

**Attachments**
----------------------------
_Screenshot of the SmartScreen warning dialog._

Image

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Begin by locating the Windows installer packaging and release entry point that produces the downloaded .exe. Verify how code signing is applied and confirm completion by installing it and checking that SmartScreen no longer reports an unknown publisher.

Written by the indexing model from the issue text.

Assessment

Domain
release, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.