Windows Defender shows warning on Setup installer download

[Carreau]

Hi,

This was reported on the security mailing list, but I don't believe there is any actual vulnerability, it's more a concern.

It looks like windows defender is finding that the installer has a virus here are the screenshots provided by original reporter. I'll send them here.

[welcome]

Thank you for opening your first issue in this project! Engagement like this is essential for open source projects! 🤗

If you haven't done so already, check out Jupyter's Code of Conduct. Also, please try to follow the issue template as it helps other other community members to contribute more effectively.

You can meet the other Jovyans by joining our Discourse forum. There is also an intro thread there where you can stop by and say Hi! 👋

Welcome to the Jupyter community! 🎉

[mbektas]

@Carreau please refer to this document
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview

Our app is not code-signed yet. It could be possible reason.

"Microsoft Defender SmartScreen determines whether a downloaded app or app installer is potentially malicious by:

Checking downloaded files against a list of reported malicious software sites and programs known to be unsafe. If it finds a match, Microsoft Defender SmartScreen shows a warning to let the user know that the site might be malicious.

Checking downloaded files against a list of files that are well known and downloaded by many Windows users. If the file isn't on that list, Microsoft Defender SmartScreen shows a warning, advising caution."

[alexander-manley]

This is how SUSE Rancher Kubernetes Desktop has solved the electron Microsoft code-signing for their opensource project:
rancher-sandbox/rancher-desktop#405