ClamAV Malware Scanner

ClamAV Malware Scanner - Reusable Workflow

Runs the ClamAV scanner via the argus Python CLI. Equivalent to: python -m argus scan clamav

For GHES users: Use the composite action directly instead of this workflow. See: examples/github-enterprise/all-scanners.yml

uses: huntridge-labs/argus/.github/workflows/scanner-clamav.yml@1.1.0

Triggers

• Manual dispatch
• Reusable (called by other workflows)

Permissions

Scope	Access
contents	read
security-events	write
actions	read
pull-requests	write

Inputs

Input	Description	Required	Default
post_pr_comment	Whether to post PR comments boolean	No	True
enable_code_security	Whether GitHub Code Security is enabled for this repository boolean	No	False
scan_path	Path to scan (file, directory, or archive). Defaults to repository root. string	No	.
fail_on_severity	Fail the job if malware is found. ClamAV does not support severity-based filtering - any value other than "none" will... string	No	none

Jobs

clamav-scan — ClamAV Malware Scan

Runs on: ubuntu-latest · Timeout: 30 minutes · Continue on error: Yes

Steps:

1. Checkout repository — actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
2. Set up Python — actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
3. Install Argus
4. Run scan
5. Upload artifacts — actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
6. Upload SARIF — github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13
7. Comment PR with results — huntridge-labs/argus/.github/actions/comment-pr@1.1.0