widdix/attachmentAV Malware Scanner
Antivirus for GitHub. Scan files, artifacts, or release assets using the attachmentAV Virus and Malware Scan API.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| local-file-path | Path to local file in the repository to scan - supports up to 100MB (mutually exclusive with artifact-id and release-asset-id) | no | — |
| artifact-id | GitHub Actions artifact ID to scan (mutually exclusive with local-file-path and release-asset-id) | no | — |
| release-asset-id | GitHub release asset ID to scan (mutually exclusive with local-file-path and artifact-id) | no | — |
| api-endpoint | attachmentAV API endpoint | no | https://eu.developer.attachmentav.com |
| api-key | attachmentAV API key (use secrets) | yes | — |
| token | GitHub token or personal access token (PAT) - required for artifacts, local files >10MB and releases of private repositories (forwarded to attachmentAV for download authentication) | no | — |
| timeout | Timeout in seconds for async polling. Max 1 hour, min 1 second. | no | 300 |
| polling-interval | Polling interval in seconds for async scans. Max 1 hour, min 1 second. | no | 5 |
| fail-on-infected | Whether to fail the action if malware is detected | no | true |
Outputs
| name | description |
|---|---|
| status | Scan result status (clean/infected/no) |
| finding | Malware type, not set if status is 'clean' |
| file-size | Size of scanned file in bytes, not set if scanning failed |
| real-file-type | Detected file type, not set if scanning failed |