Lesson learned: Last step of ci/cd, verify binary artifact on virus total api before shipping.