bazelbuild / bazelbuild/bazelisk
SentinelOne detects bazelisk as malicious on Mac
- Dominant language
- Go
- Stars
- 2.7k
- Forks
- 424
- PR merge metrics
- No merged PRs in 30d
Description
```
brew info bazelisk
==> bazelisk: stable 1.24.1 (bottled), HEAD
User-friendly launcher for Bazel
https://github.com/bazelbuild/bazelisk/
Conflicts with:
bazel (because Bazelisk replaces the bazel binary)
Installed
/opt/homebrew/Cellar/bazelisk/1.24.1 (8 files, 5.6MB) *
Poured from bottle using the formulae.brew.sh API on 2024-11-26 at 17:55:36
From: https://github.com/Homebrew/homebrew-core/blob/HEAD/Formula/b/bazelisk.rb
License: Apache-2.0
==> Dependencies
Build: go ✔
==> Options
--HEAD
Install HEAD version
==> Caveats
zsh completions have been installed to:
/opt/homebrew/share/zsh/site-functions
==> Analytics
install: 6,271 (30 days), 16,987 (90 days), 51,937 (365 days)
install-on-request: 6,203 (30 days), 16,835 (90 days), 51,339 (365 days)
build-error: 21 (30 days)
```
https://www.virustotal.com/gui/file/162113a4d7bc7834bcc520d6fcd2320290cadd184dc3bf37cbcc335f1ecad465
similar issues:
https://github.com/bazelbuild/bazelisk/issues/607
https://github.com/bazelbuild/bazelisk/issues/217
Not sure how actionable this is especially since this binary seems to be built by brew instead of this project
Contributor guide
Research direction
Start with the VirusTotal report and the related Bazelisk issues #607 and #217, then establish whether the Homebrew-built binary is within this project's scope. Done means documenting a reproducible finding and a specific actionable next step, if one exists.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- cli, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100