eho/register-referentie
1
0
Fork 0
Code Issues 10 Pull Requests 1 Actions 1 Packages Projects Releases 1 Wiki Activity

build(infra): run ClamAV in compose and on the cluster (closes #191) #193

Merged
not merged 5 commits from build/191-clamav into main 2026-10-02 07:53:17 +00:00
Conversation 0 Commits 5 Files Changed 10
+193 -3
5 Commits
Author SHA1 Message Date
notandClaude Opus 5.5 f93b4a4426 docs(arch): ADR-0036 — check %PDF- after the scan, not before (refs #191, refs #190)
CI / lint (pull_request) Successful in 2m0s
Details
CI / k8s (pull_request) Successful in 10s
Details
CI / build (pull_request) Successful in 1m14s
Details
CI / unit (pull_request) Successful in 1m18s
Details
CI / docs (pull_request) Successful in 43s
Details
CI / frontend (pull_request) Successful in 2m22s
Details
CI / mutation (pull_request) Successful in 4m57s
Details
CI / verify-stack (pull_request) Skipped
Details 
clamd matches EICAR only at the start of a file, so a type check in front of
the scan would report malware as merely not-a-PDF.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-10-02 09:29:56 +02:00
notandClaude Opus 5.5 d698267fba build(infra): run clamd in the local compose stack too (refs #191)
CI / k8s (pull_request) Successful in 8s
Details
CI / build (pull_request) Successful in 1m41s
Details
CI / lint (pull_request) Successful in 1m53s
Details
CI / docs (pull_request) Successful in 55s
Details
CI / unit (pull_request) Successful in 1m22s
Details
CI / frontend (pull_request) Successful in 2m31s
Details
CI / verify-stack (pull_request) Canceled after 0s
Details
CI / mutation (pull_request) Canceled after 8m0s
Details 
make local waits on the same WAIT_SVCS, so without it the local stack never
turns healthy.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-10-02 09:23:50 +02:00
notandClaude Opus 5.5 f541254de7 docs(arch): ADR-0036 — scan uploads with ClamAV in the domain, fail closed (refs #191, refs #190)
CI / k8s (pull_request) Successful in 8s
Details
CI / build (pull_request) Successful in 1m42s
Details
CI / lint (pull_request) Successful in 1m56s
Details
CI / docs (pull_request) Successful in 53s
Details
CI / unit (pull_request) Successful in 1m21s
Details
CI / frontend (pull_request) Successful in 2m22s
Details
CI / mutation (pull_request) Successful in 4m47s
Details
CI / verify-stack (pull_request) Skipped
Details 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-10-02 09:02:57 +02:00
notandClaude Opus 5.5 39bc6ee0c5 build(infra): run clamd in compose and the Helm chart (refs #191) 
Official clamav/clamav:1.4.6 with signatures on a volume, ConcurrentDatabaseReload
off to cap memory, health-gated in WAIT_SVCS. verify-clamav is green: EICAR is
FOUND, a clean stream is OK.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-10-02 09:02:57 +02:00
notandClaude Opus 5.5 3e9bda9031 test(infra): clamd detects EICAR and passes a clean stream over INSTREAM (refs #191) 
Red: no clamav service exists yet, so verify-clamav finds no container.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-10-02 09:01:01 +02:00