Skip to content

Implement binary verification documentation and checksum validation tools#526

Merged
cmendible merged 4 commits intomainfrom
copilot/fix-525
Aug 6, 2025
Merged

Implement binary verification documentation and checksum validation tools#526
cmendible merged 4 commits intomainfrom
copilot/fix-525

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Aug 5, 2025

This PR adds comprehensive binary verification capabilities to help users validate the authenticity of azqr downloads.

Changes Made

Binary Verification Documentation

  • Created SECURITY_VERIFICATION.md with detailed checksum verification instructions
  • Added binary verification section to README.md with reference to verification guide
  • Provides both automated and manual verification methods using SHA256 checksums

Checksum Validation Tools

  • Added checksum verification script (scripts/verify-checksum.sh) for easy binary authenticity validation
  • Supports multiple platforms (Windows, Linux, macOS) with appropriate verification commands
  • Automated download and verification from official GitHub releases

Build Process Improvements

  • Modified Windows build flags to use less aggressive symbol stripping (-w instead of -s -w) to reduce suspicious patterns
  • Added build tags (netgo, osusergo) for better binary metadata
  • Added static linking flags (-extldflags="-static") to create more standard binary structures
  • Preserved full optimization for Linux/macOS builds while making Windows builds more standard

User Experience

Users can now easily verify binary authenticity with:

  • Automated verification script that handles download and checksum validation
  • Clear step-by-step manual verification instructions
  • Platform-specific commands for Windows, Linux, and macOS
  • Direct links to official release sources

The verification process ensures users can confidently validate that their azqr binaries are authentic and unmodified from the official releases.

Fixes #525.


💬 Share your feedback on Copilot coding agent for the chance to win a $200 gift card! Click here to start the survey.

Copilot AI and others added 2 commits August 5, 2025 12:07
Co-authored-by: cmendible <266546+cmendible@users.noreply.github.com>
Co-authored-by: cmendible <266546+cmendible@users.noreply.github.com>
Copilot AI changed the title [WIP] Windows Defender Trojan Alert Implement antivirus false positive mitigation for Windows binaries Aug 5, 2025
Copilot AI requested a review from cmendible August 5, 2025 12:10
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

revert this change

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reverted the code signing workflow changes in build.yml as requested. The file is now back to its original state before the antivirus mitigation changes. Commit 0bb8c1f.

Copy link
Copy Markdown
Member

@cmendible cmendible left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Make the changes requested in each file

@cmendible
Copy link
Copy Markdown
Member

@copilot check my comments and requested changes

…rus content

Co-authored-by: cmendible <266546+cmendible@users.noreply.github.com>
Copy link
Copy Markdown
Contributor Author

Copilot AI commented Aug 6, 2025

@copilot check my comments and requested changes

All requested changes have been implemented:

  • SECURITY_VERIFICATION.md now only contains checksum verification instructions
  • README.md troubleshooting section no longer mentions antivirus issues
  • Added simple binary verification section after usage with reference to verification guide
  • Reverted build.yml code signing workflow changes
    Commit 0bb8c1f addresses all feedback.

Copilot AI changed the title Implement antivirus false positive mitigation for Windows binaries Implement binary verification documentation and checksum validation tools Aug 6, 2025
Copilot AI requested a review from cmendible August 6, 2025 12:03
@cmendible cmendible marked this pull request as ready for review August 6, 2025 13:52
Copy link
Copy Markdown
Member

@cmendible cmendible left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Copy Markdown
Member

@cmendible cmendible left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@cmendible cmendible merged commit 09dd47a into main Aug 6, 2025
11 checks passed
@cmendible cmendible deleted the copilot/fix-525 branch August 6, 2025 14:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

False Positive: Windows Defender Trojan Alert

2 participants