I have run into this when distributing go binaries to enterprises. We also found that many of the malware vendors share their heuristic-detected signatures with

I have run into this when distributing go binaries to enterprises. We also found that many of the malware vendors share their heuristic-detected signatures with each other so once one decides your binary is malware things really go downhill. We signed the exe with a standard code signing cert and the problems went away. These days we use an EV code signing cert that have to have their private key in an HSM.