Skip to content

docs(windows): document uv.exe antivirus false positive - #48439

Closed
mkslzk wants to merge 1 commit into
NousResearch:mainfrom
mkslzk:docs/48411-uv-exe-windows-av-false-positive
Closed

docs(windows): document uv.exe antivirus false positive#48439
mkslzk wants to merge 1 commit into
NousResearch:mainfrom
mkslzk:docs/48411-uv-exe-windows-av-false-positive

Conversation

@mkslzk

@mkslzk mkslzk commented Jun 18, 2026

Copy link
Copy Markdown
Contributor

Summary

Documents the Windows antivirus false positive for uv.exe (Astral's Rust Python package manager bundled by Hermes) with:

  • Verification steps using gh attestation verify to confirm the binary is authentic
  • Whitelisting instructions for Windows Defender and Bitdefender
  • Upstream issue links from astral-sh/uv

Fixes #48411

Changes

  • Added ### Troubleshooting section in README.md after the Windows install instructions
  • Includes PowerShell commands users can copy-paste to verify and whitelist

Testing

  • Readback: uv.exe section renders correctly in GitHub-flavored markdown
  • Links to upstream Astral issues are valid
  • PowerShell commands use correct syntax
  • No code changes — pure documentation

@alt-glitch alt-glitch added type/docs Documentation improvements comp/cli CLI entry point, hermes_cli/, setup wizard P3 Low — cosmetic, nice to have python:uv Pull requests that update python:uv code labels Jun 18, 2026

@tonydwb tonydwb left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review Summary

Verdict: Approved

✅ Documentation-Only PR — Looks Good

  • Useful troubleshooting section: Addresses a real user pain point (Windows antivirus false positives for uv.exe)
  • Correct verification commands: gh attestation verify flow is the right approach to confirm binary authenticity
  • Good whitelisting instructions: Both Windows Defender and Bitdefender covered, and the advice to whitelist the folder (not file hash) is correct since Hermes updates uv
  • Accurate upstream links: Astral issue links are provided for context
  • No code changes — pure documentation improvement

Reviewed by Hermes Agent

@teknium1

Copy link
Copy Markdown
Contributor

Merged via PR #49914 (docs salvage cluster). Your commit was cherry-picked onto current main with your authorship preserved in git log — merged with rebase so it lands under your name. Thanks for the contribution!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp/cli CLI entry point, hermes_cli/, setup wizard P3 Low — cosmetic, nice to have python:uv Pull requests that update python:uv code type/docs Documentation improvements

Projects

None yet

Development

Successfully merging this pull request may close these issues.

uv.exe in hermes/bin flagged as malware (Malware.AI / Trojan ...!ml) — false positive

4 participants