Request: Publish Chocolatey Package

[UebelAndre]

Would it be possible to publish releases of this to chocolatey?

https://chocolatey.org/packages?q=bazelisk

[digitalcoyote]

I'd be willing to create/maintain a package. I have an AU repo that would watch this repository's releases and automatically pack/publish for chocolatey.

Is that executable an installer?

[UebelAndre]

The .exe in the releases page is an executable, as far as I can recall (not on my windows machine right now).

[digitalcoyote]

I got a package together, but it flagged the malware scanners when I was testing it. Chocolatey won't approve any packages that don't pass their malware scans. If someone wants to try to publish it anyway, I have the update/install and nuspec files pretty much ready for an AU repo. I'm going to do some more testing to make sure I'm pulling the file I think I am.

[UebelAndre]

Can you make a new issue containing the logs of the scan once you have some confidence that the issue is in bazelisk?

[digitalcoyote]

Virus total came back without a single hit on the release url. Im going to scan my VM. Something seems like it's not right.

https://www.virustotal.com/gui/file/eed3dd5ee2433275eab79f999276a7cc5d082a0360c439cb370183eaa94fc293/detection

Apparently providing it with the URL of a files doesn't scan the file... I reran it by manually uploading and it got several hits.

[digitalcoyote]

For anyone else reading this, if you review the results, it basically says the bazelisk behaves exactly like it's supposed to.

If I can't get it to pass the scanners, I may try talking to chocolatey reviewers to see if they'd make an exception based on that report.

[UebelAndre]

Seems related to #168 btw

[digitalcoyote]

Got word back, they said to include a note about it in the description so the reviewer can check it out. They said users can use that to decide if they want to install it or not.

https://chocolatey.org/packages/bazelisk

[UebelAndre]

Maybe with #168 closed the chocolatey package won't have this issue either?

[digitalcoyote]

I'll double check it, but I'm guessing it won't have an issue.

[UebelAndre]

Any updates on the published package? Will it work by simply running choco install bazelisk if the security exception has been fixed?

[digitalcoyote]

It's approved. When they approved it, it immediately queued up the next version and I didn't notice it had been approved.

…

On Sat, Oct 17, 2020, 12:44 PM UebelAndre ***@***.***> wrote: Any updates on the published package? Will it work by simply running choco install bazelisk if the security exception has been fixed? — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#161 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEAWF7O6KHNX26JFDR36CBDSLHJYBANCNFSM4Q4S7LXA> .

[UebelAndre]

Awesome! Thanks for doing that @digitalcoyote!!! 🎉 🙏 🎉

Greatly appreciated 😄