dotnet / dotnet/efcore

Windows Defender scans (downloaded) EF Bundle as a Trojan

Open
#33,294 2 comments 0 reactions 0 assignees View on GitHub
area-external area-migrations customer-reported
Dominant language
C#
Stars
14.8k
Forks
3.4k
PR merge metrics
PR metrics pending

Description

## File a bug

I was troubleshooting why EF Bundle did not deploy in one of my teams's Azure DevOps pipelines and thought to quickly download the build artifact to see if it was a Azure DevOps issue or a bundle file issue.

After downloading (both as exe and extracting as zipped root folder), I got a notification from Windows Defender.

image

Since building local does work, this issue is certainly not critical but I find it very interesting and worth some research.

### Include your code
Build agent image:
``` yaml
pool:
vmImage: 'windows-latest'
```

Bundle task in build pipeline

``` yaml
- task: DotNetCoreCLI@2
displayName: 'Install Dotnet EF Tool'
inputs:
command: custom
custom: "tool"
arguments: "install --global dotnet-ef"

- task: DotNetCoreCLI@2
displayName: EFBundle
inputs:
command: custom
custom: 'ef '
arguments: 'migrations bundle --self-contained --project "src/Infrastructure/Infrastructure.csproj" --startup-project "src/Api/Api.csproj" -r win-x64 -o $(Build.ArtifactStagingDirectory)/SQL/Bundle.exe --verbose'
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.