bazelbuild / bazelbuild/bazelisk

SentinelOne detects bazelisk as malicious on Mac

Open
#644 1 comment 0 reactions 0 assignees View on GitHub
P2
Dominant language
Go
Stars
2.7k
Forks
424
PR merge metrics
No merged PRs in 30d

Description

```
brew info bazelisk
==> bazelisk: stable 1.24.1 (bottled), HEAD
User-friendly launcher for Bazel
https://github.com/bazelbuild/bazelisk/
Conflicts with:
bazel (because Bazelisk replaces the bazel binary)
Installed
/opt/homebrew/Cellar/bazelisk/1.24.1 (8 files, 5.6MB) *
Poured from bottle using the formulae.brew.sh API on 2024-11-26 at 17:55:36
From: https://github.com/Homebrew/homebrew-core/blob/HEAD/Formula/b/bazelisk.rb
License: Apache-2.0
==> Dependencies
Build: go ✔
==> Options
--HEAD
Install HEAD version
==> Caveats
zsh completions have been installed to:
/opt/homebrew/share/zsh/site-functions
==> Analytics
install: 6,271 (30 days), 16,987 (90 days), 51,937 (365 days)
install-on-request: 6,203 (30 days), 16,835 (90 days), 51,339 (365 days)
build-error: 21 (30 days)
```
https://www.virustotal.com/gui/file/162113a4d7bc7834bcc520d6fcd2320290cadd184dc3bf37cbcc335f1ecad465

similar issues:
https://github.com/bazelbuild/bazelisk/issues/607
https://github.com/bazelbuild/bazelisk/issues/217

Not sure how actionable this is especially since this binary seems to be built by brew instead of this project

Contributor guide

Open the contributing guide

Research direction

Start with the VirusTotal report and the related Bazelisk issues #607 and #217, then establish whether the Homebrew-built binary is within this project's scope. Done means documenting a reproducible finding and a specific actionable next step, if one exists.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cli, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.