Windows Defender for me was late to the party when scanning source code... it detected it but little bit too late. If your IT dep ever freaks out, tell that someone on the internet was actually protected within WSL + Docker: https://news.ycombinator.com/item?id=29159990#29160902