[Bug]: Installer labeled as malware

[thapr0digy]

Affected Component

Other (please specify in the description)

Describe the bug

The installer is identified as malware by Mac.

Steps to Reproduce

Run the installer on MacOS

System Configuration

MacOS with latest installer version

Logs and Artifacts

No response

Screenshots or Recordings

No response

Verification

• I have checked that this issue hasn't been already reported
• I have provided all relevant configuration files (with sensitive data removed)
• I have included relevant logs and error messages
• I am running the latest version of PentAGI

[asdek]

hey @thapr0digy

thank you for reporting this issue. I'm not sure why macOS is flagging the installer as malware. I contacted Apple on March 24th regarding this matter, but unfortunately haven't received a response yet.

the installer files are properly signed with our certificate. Additionally, VirusTotal scans show zero detections across all antivirus engines:

• arm64: https://www.virustotal.com/gui/file/93e663a0e7c444aca712810252d58f107bd79873b80b90d806e26a015867c749/detection
• amd64: https://www.virustotal.com/gui/file/e60aec8626efd2c19cc674b8418088952ef83556a1c3b800a5540f77368c6834/detection

I suspect the issue might be related to the fact that the installer executable embeds two additional binaries (jaeger-clickhouse-linux-amd64 and jaeger-clickhouse-linux-arm64) which are used as plugins for running Jaeger with ClickHouse DB. you can find these binaries here: https://github.com/vxcontrol/pentagi/tree/main/observability/jaeger/bin
however, this is just speculation at this point...

unfortunately, until we receive a response from Apple, there's not much we can do. we could try registering a new developer account and re-signing the files, but I believe the result would likely be the same given the executable content remains identical.

I'll update this issue once we hear back from Apple.

[thapr0digy]

Sounds good and thanks. I wanted to make sure it wasn't something else.