You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
[FEATURE]: Authenticode-signed Windows installer (.exe or .msi) #8087
I have verified this feature I'm about to request hasn't been suggested before.
Describe the enhancement you want to request
Hey! Really cool project — I’m testing the Windows desktop release and ran into an issue on managed Windows machines.
The current Windows .exe isn’t Authenticode-signed, so Microsoft Defender / ASR blocks it and ends up quarantining or deleting it (even if temporarily allowed). The .exe.sig is great for integrity, but unfortunately Windows doesn’t use GPG signatures for trust.
Any chance of:
a code-signed Windows installer (.exe or .msi), or
a portable ZIP build for Windows?
Either would make it much easier to run in enterprise / Intune-managed environments. Happy to test if helpful!
This issue might be a duplicate of existing issues. Please check:
Windows Defender falsely flags new releases as trojans #3415: Windows Defender falsely flags new releases as trojans - This is a tracked issue that specifically mentions code-signing Windows artifacts (Authenticode; timestamped) as a solution to reduce AV false positives and address the exact concerns you've raised about Defender/ASR blocking in enterprise environments.
Feel free to ignore if none of these address your specific case.
Activity
github-actions commentedon Jan 12, 2026
This issue might be a duplicate of existing issues. Please check:
Feel free to ignore if none of these address your specific case.
rekram1-node commentedon Jan 12, 2026
Yeah we need that
Jawuilp commentedon Jan 13, 2026
Yes, and quickly
JaredEzz commentedon Jan 22, 2026
Very quickly please
github-actions commentedon Mar 26, 2026
To stay organized issues are automatically closed after 90 days of no activity. If the issue is still relevant please open a new one.
Hona commentedon Mar 29, 2026
As of OpenCode v1.3.4 across the CLI + Desktop apps, we have full code signing - so there should be no more warnings.
Please let me know otherwise