From 754ae1e0d79491f400c2b7321e19ff5c8249fe9b Mon Sep 17 00:00:00 2001 From: David Boike Date: Thu, 20 Mar 2025 08:28:15 -0500 Subject: [PATCH] Rerun scan --- .github/workflows/virus-scan.yml | 60 ++++++++++++++++++++++++++------ 1 file changed, 49 insertions(+), 11 deletions(-) diff --git a/.github/workflows/virus-scan.yml b/.github/workflows/virus-scan.yml index da3c9bd427..d78e794515 100644 --- a/.github/workflows/virus-scan.yml +++ b/.github/workflows/virus-scan.yml @@ -1,17 +1,55 @@ name: Virus scan on: - release: - types: [published] + pull_request: jobs: virus-scan: runs-on: ubuntu-latest steps: - - name: Scan release for viruses - uses: Particular/virus-scan-action@main - with: - owner: ${{ github.repository_owner }} - repo: ${{ github.event.repository.name }} - tag: ${{ github.event.release.name }} - github-access-token: ${{ secrets.GITHUB_TOKEN }} - slack-token: ${{ secrets.SLACK_TOKEN }} - slack-channel: ${{ vars.VIRUS_REPORTING_SLACK_CHANNEL }} + - id: install + name: Install ClamAV + shell: bash + run: | + sudo apt-get update && sudo apt-get install clamav + clamVersion=$(clamscan --version) + echo $clamVersion + echo "CLAMAV_VERSION=$clamVersion" >> $GITHUB_ENV + - id: update + name: Update virus signature database + shell: bash + run: | + sudo systemctl stop clamav-freshclam + sudo freshclam + sudo systemctl start clamav-freshclam + - name: Get release + uses: actions/github-script@v7 + with: + github-token: ${{ secrets.GITHUB_TOKEN }} + script: | + const fs = require('fs'); + + await io.mkdirP('github-release-assets'); + + let release = await github.rest.repos.getReleaseByTag({ + owner: 'Particular', + repo: 'ServiceControl', + tag: '5.9.1' + }); + + core.exportVariable('RELEASE_ID', release.data.id); + core.exportVariable('RELEASE_BODY', release.data.body); + core.exportVariable('RELEASE_HTML_URL', release.data.html_url); + + for (const assetInfo of release.data.assets) { + let asset = await github.request(assetInfo.browser_download_url); + await fs.writeFile('github-release-assets/' + assetInfo.name, Buffer.from(asset.data), () => {}); + } + + let zipball = await github.request(release.data.zipball_url); + await fs.writeFile('github-release-assets/source.zip', Buffer.from(zipball.data), () => {}); + + let tarball = await github.request(release.data.tarball_url); + await fs.writeFile('github-release-assets/source.tar.gz', Buffer.from(tarball.data), () => {}); + + - name: Run ClamAV + shell: bash + run: sudo clamscan --infected github-release-assets/