v3.14.0_darwin_amd64 is being marked as a virus by Google Chrome/Gmail/my antivirus

[annedroiid]

Hi there,

Thank you for opening an issue. Please note that we try to keep the Terraform issue tracker reserved for bug reports and feature requests. For general usage questions, please see: https://www.terraform.io/community.html.

Terraform Version

1.2.4

Affected Resource(s)

The entire provider for darwin machines for version 3.13.1 and 3.14.0

Expected Behavior

I should be able to download/use the provider without getting virus warnings

Actual Behavior

When I try to download it in Google Chrome it gives the warning that it may be dangerous

When I try to attach it to an email in gmail it gives the warning Virus detected! along with a Help link that directs you to https://support.google.com/mail/answer/25760?hl=en-GB. If I try to send the email anyway I get a popup error stating Note: there were errors attaching your file(s)

When I tried to download it from google drive I get this pop up

My company's anti-virus is also aggressive enough that it automatically deletes the file after it has downloaded, which means that I can't use this version because as soon as Terraform installs the provider my anti-virus automatically deletes the binary file.

Steps to Reproduce

On google chrome try to download https://github.com/DataDog/terraform-provider-datadog/releases/download/v3.14.0/terraform-provider-datadog_3.14.0_darwin_amd64.zip

Important Factoids

This issue also happens on

• Release 3.14.0
  • terraform-provider-datadog_3.14.0_darwin_arm64.zip
• Release 3.13.1
  • terraform-provider-datadog_3.13.1_darwin_amd64.zip
  • terraform-provider-datadog_3.13.1_darwin_arm64.zip

I can download all of the other assets in those releases with no issues, as well as download 3.12.0.

[therve]

Is in an issue when you let terraform download the provider for you? Any reason you're doing that manually? Thanks.

[annedroiid]

Yes it's a problem when terraform downloads the provider, that's how I first noticed the issue. My anti-virus automatically deletes the binary file immediately after it's downloaded and while terraform is still downloading the rest of the providers, and then terraform fails with the following

| Error: Required plugins are not installed
│ 
│ The installed provider plugins are not consistent with the packages
│ selected in the dependency lock file:
│   - registry.terraform.io/datadog/datadog: the cached package for registry.terraform.io/datadog/datadog 3.14.0 (in .terraform/providers) does not match any of the checksums recorded in the dependency lock file
│ 
│ Terraform uses external plugins to integrate with a variety of different
│ infrastructure services. To download the plugins required for this
│ configuration, run:
│   terraform init

I only tried downloading it manually after I discovered that that binary file was missing, as I thought it might be an issue with terraform and I could try manually copying the file over. That's when I discovered that Google thinks it contains a virus, and was then able to determine it was my anti-virus that was deleting the file.

[annedroiid]

I've found some more details in the logs, it's complaining this is the vulnerability

Osx.Exploit.CVE_2021_4034-9951522-2

https://nvd.nist.gov/vuln/detail/cve-2021-4034

[therve]

Seems to be a antivirus issue: https://github.com/lima-vm/lima/issues/1028.

[annedroiid]

Thank you, I got my company to update the anti-virus and the issue has gone away.