vxcontrol/pentagi
1
0
Fork 0
mirror of https://github.com/vxcontrol/pentagi.git synced 2026-07-20 12:37:04 -04:00
Code Issues 45 Packages Projects Releases 9 Wiki Activity

[GH-ISSUE #249] [Bug]: Installer labeled as malware #87

New Issue
Open
opened 2026-06-06 22:09:03 -04:00 by yindo · 2 comments
yindo commented 2026-06-06 22:09:03 -04:00
Owner
Copy Link
Copy Source

Originally created by @thapr0digy on GitHub (Apr 9, 2026).
Original GitHub issue: https://github.com/vxcontrol/pentagi/issues/249

Originally assigned to: @asdek on GitHub.

Affected Component

Other (please specify in the description)

Describe the bug

The installer is identified as malware by Mac.

Steps to Reproduce

Run the installer on MacOS

System Configuration

MacOS with latest installer version

Logs and Artifacts

No response

Screenshots or Recordings

No response

Verification

  • I have checked that this issue hasn't been already reported
  • I have provided all relevant configuration files (with sensitive data removed)
  • I have included relevant logs and error messages
  • I am running the latest version of PentAGI
Originally created by @thapr0digy on GitHub (Apr 9, 2026). Original GitHub issue: https://github.com/vxcontrol/pentagi/issues/249 Originally assigned to: @asdek on GitHub. ### Affected Component Other (please specify in the description) ### Describe the bug The installer is identified as malware by Mac. ### Steps to Reproduce Run the installer on MacOS ### System Configuration MacOS with latest installer version ### Logs and Artifacts _No response_ ### Screenshots or Recordings _No response_ ### Verification - [x] I have checked that this issue hasn't been already reported - [x] I have provided all relevant configuration files (with sensitive data removed) - [x] I have included relevant logs and error messages - [x] I am running the latest version of PentAGI
yindo added the bug label 2026-06-06 22:09:03 -04:00
yindo commented 2026-06-06 22:09:04 -04:00
Author
Owner
Copy Link
Copy Source

@asdek commented on GitHub (Apr 10, 2026):

hey @thapr0digy

thank you for reporting this issue. I'm not sure why macOS is flagging the installer as malware. I contacted Apple on March 24th regarding this matter, but unfortunately haven't received a response yet.

the installer files are properly signed with our certificate. Additionally, VirusTotal scans show zero detections across all antivirus engines:

I suspect the issue might be related to the fact that the installer executable embeds two additional binaries (jaeger-clickhouse-linux-amd64 and jaeger-clickhouse-linux-arm64) which are used as plugins for running Jaeger with ClickHouse DB. you can find these binaries here: https://github.com/vxcontrol/pentagi/tree/main/observability/jaeger/bin
however, this is just speculation at this point...

unfortunately, until we receive a response from Apple, there's not much we can do. we could try registering a new developer account and re-signing the files, but I believe the result would likely be the same given the executable content remains identical.

I'll update this issue once we hear back from Apple.

<!-- gh-comment-id:4225673408 --> @asdek commented on GitHub (Apr 10, 2026): hey @thapr0digy thank you for reporting this issue. I'm not sure why macOS is flagging the installer as malware. I contacted Apple on March 24th regarding this matter, but unfortunately haven't received a response yet. the installer files are properly signed with our certificate. Additionally, VirusTotal scans show **zero detections** across all antivirus engines: - **arm64**: https://www.virustotal.com/gui/file/93e663a0e7c444aca712810252d58f107bd79873b80b90d806e26a015867c749/detection - **amd64**: https://www.virustotal.com/gui/file/e60aec8626efd2c19cc674b8418088952ef83556a1c3b800a5540f77368c6834/detection I suspect the issue might be related to the fact that the installer executable embeds two additional binaries (`jaeger-clickhouse-linux-amd64` and `jaeger-clickhouse-linux-arm64`) which are used as plugins for running Jaeger with ClickHouse DB. you can find these binaries here: https://github.com/vxcontrol/pentagi/tree/main/observability/jaeger/bin however, this is just speculation at this point... unfortunately, until we receive a response from Apple, there's not much we can do. we could try registering a new developer account and re-signing the files, but I believe the result would likely be the same given the executable content remains identical. I'll update this issue once we hear back from Apple.
yindo commented 2026-06-06 22:09:04 -04:00
Author
Owner
Copy Link
Copy Source

@thapr0digy commented on GitHub (Apr 13, 2026):

Sounds good and thanks. I wanted to make sure it wasn't something else.

<!-- gh-comment-id:4239190909 --> @thapr0digy commented on GitHub (Apr 13, 2026): Sounds good and thanks. I wanted to make sure it wasn't something else.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
enhancement
help wanted
pull-request
Mirrored from GitHub Pull Request
 question
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: vxcontrol/pentagi#87
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?