Recent Releases of hugoalh/scan-virus-ghaction
hugoalh/scan-virus-ghaction - 0.20.1
ã°ī¸ Changes
- Fix all of the discoverable and compatible ClamAV custom assets were always registered no matter the selection (@hugoalh)(#96, 4a2f23d7ce1a2dd2d4f48ab1f7f81a5f3389313b)
- Fix YARA custom assets accept compiled rules while it should not (@hugoalh)(N/A)
- Update unofficial assets to Git commit hash 91f6d3e6e2ea8a64935a8257fdecc6b52797e1eb (@hugoalh)(N/A)
- PowerShell
Published by hugoalh over 2 years ago
hugoalh/scan-virus-ghaction - 0.20.0
đĻ Spotlights
- Ability to use custom assets via mapped directory/volume
- More fine-grained ignores for ignore matrix of paths, sessions, symbols, and/or tools
đĨ Break Changes
- Change mechanism, strategy and syntax of ignores: (@hugoalh)(N/A)
- Ability to ignore matrix of paths, sessions, symbols, and/or tools
- Ability to ignore paths with Git commit meta
- Replace input
ignoresby inputsignores_preandignores_post - Use PowerShell script block as syntax instead of markup languages
- Change target GitHub Actions Runner from >= v2.303.0 to >= v2.308.0 (@hugoalh)(N/A)
- Inputs which accept list of values is now require to separate each value per line instead of customable list delimiter (@hugoalh)(N/A)
- Remove input
targetsand replace by the GitHub Actions Runner current working directory (@hugoalh)(N/A) - Remove support of network and remote targets (@hugoalh)(N/A)
- To scan any of network and/or remote targets, user must prepare those before this action
- Rename inputs: (@hugoalh)(N/A)
clamav_unofficialassetstoclamav_unofficialassets_useyara_unofficialassetstoyara_unofficialassets_use
ã°ī¸ Changes
- Add inputs
clamav_customassets_directory,clamav_customassets_use,yara_customassets_directory, andyara_customassets_usefor usage of custom assets (@hugoalh)(N/A) - Fix summary preview rarely broken cause by characters escapes (@hugoalh)(N/A)
- Fix 200+ of error messages related to undefined identifier on YARA unofficial assets (@hugoalh)(N/A)
- Improve efficiency and performance (@hugoalh)(N/A)
- Improve issues message and list (@hugoalh)(N/A)
- Remove input
log_elementsand replace by debugger (@hugoalh)(N/A) - Remove inputs
input_listdelimiterandinput_tablemarkupas no longer necessary (@hugoalh)(N/A) - Resolve overflow issues in the statistics (@hugoalh)(N/A)
- Softwares version table is now persistence and no longer need to recalculate and/or regenerate (@hugoalh)(N/A)
- Update image and it's softwares (@hugoalh)(N/A)
- Update unofficial assets to Git commit hash da7c303cf684d041735edd044d3480a182698afc (@hugoalh)(N/A)
- PowerShell
Published by hugoalh over 2 years ago
hugoalh/scan-virus-ghaction - 0.16.1
- CHANGE: Updated unofficial assets
- PowerShell
Published by hugoalh almost 3 years ago
hugoalh/scan-virus-ghaction - 0.16.0
- CHANGE: Elements no longer list in the log unless enabled debug mode
- CHANGE: Found list no longer on annotations to prevent get truncated (#76)
- CHANGE: Improved allocation
- CHANGE: Improved device resources usage by implemented conditional modules importer
- CHANGE: Improved table display in the log to reduce rows usage, especially on found list
- CHANGE: Updated unofficial assets
- PowerShell
Published by hugoalh almost 3 years ago
hugoalh/scan-virus-ghaction - 0.15.1
- CHANGE: Updated Docker image
- CHANGE: Updated unofficial assets
- PowerShell
Published by hugoalh almost 3 years ago
hugoalh/scan-virus-ghaction - 0.15.0
- ADD: Added outputs
finishandfoundfor better conditional requests - CHANGE: Updated unofficial assets
- PowerShell
Published by hugoalh almost 3 years ago
hugoalh/scan-virus-ghaction - 0.14.1
- CHANGE: Fixed statistics table would display different results in the log and summary
- CHANGE: Updated unofficial assets
- PowerShell
Published by hugoalh almost 3 years ago
hugoalh/scan-virus-ghaction - 0.14.0
- ADD: Now provide editions of each tool:
- ClamAV:
"hugoalh/scan-virus-ghaction/clamav@<Version>" - YARA:
"hugoalh/scan-virus-ghaction/yara@<Version>"
- ClamAV:
- CHANGE: Changed behaviour: When YARA is enabled, all of the YARA unofficial assets are in use if not specified in input
yara_unofficialassets(previously no YARA unofficial assets are in use if not specified in inputyara_unofficialassets) - CHANGE: Fixed "Reach the Git commits count limit" used too many lines
- CHANGE: Updated unofficial assets
- PowerShell
Published by hugoalh almost 3 years ago
hugoalh/scan-virus-ghaction - 0.13.2
- CHANGE: Fixed found tables in the summary with not ignored (red circle) and ignored (yellow circle) status were separated
- CHANGE: Updated unofficial assets
- PowerShell
Published by hugoalh about 3 years ago
hugoalh/scan-virus-ghaction - 0.13.1
- CHANGE: Improved statistics table
- CHANGE: Tweaked ClamAV configs to have a better performance
- CHANGE: Updated unofficial assets
- REMOVE: Removed deprecated unofficial assets
- PowerShell
Published by hugoalh about 3 years ago
hugoalh/scan-virus-ghaction - 0.13.0
- ADD: Added input
git_lfs - CHANGE: No longer checkout Git LFS files by default, use input
git_lfsto control this behaviour - CHANGE: Updated unofficial assets
- PowerShell
Published by hugoalh about 3 years ago
hugoalh/scan-virus-ghaction - 0.12.0
- ADD: Added input
log_elements - CHANGE: Addressed issues on Git integration:
- Fixed freezed, hanging, overflow, out of RAM, and/or timeout when getting Git commits meta
- Improved logics for getting Git commits meta
- Improved logics for Git ignores filter
- Reduced duration on getting Git commits meta
- CHANGE: Fixed overflow issues on large files and repository
- PowerShell
Published by hugoalh about 3 years ago
hugoalh/scan-virus-ghaction - 0.11.1
- CHANGE: Fixed parser issues with markups CSVM or CSVS
- CHANGE: Updated unofficial assets
- PowerShell
Published by hugoalh about 3 years ago
hugoalh/scan-virus-ghaction - 0.11.0
- ADD: Added inputs:
summary_foundsummary_statistics
- ADD: Added count for remote targets
- ADD: Added support for step summary
- CHANGE: Fixed annotation of table syntax error was not shown in the annotation list
- CHANGE: Fixed overflow issues on large repository (partly)
- PowerShell
Published by hugoalh about 3 years ago
hugoalh/scan-virus-ghaction - 0.10.1
- CHANGE: Fixed display issues:
- A long path can cause other properties in the same table not displaying
- Wrapped lines are all offset
- PowerShell
Published by hugoalh about 3 years ago
hugoalh/scan-virus-ghaction - 0.10.0
- MAJOR: Refactored assets stock
- MAJOR: Refactored codes structure
- ADD: Added ability to disable update ClamAV via FreshClam
- ADD: Added ability to ignore based on multiple paths, sessions, symbols, and/or tools in mixed combinations
- ADD: Added ability to ignore Git commits based on multiple properties in mixed combinations
- ADD: Added ability to limit scan count of the Git commits
- ADD: Added inputs:
input_listdelimiterinput_tablemarkupgit_ignoresgit_limitclamav_update
- ADD: Added target GitHub Actions Runner version requirement, currently >= v2.303.0
- CHANGE: ClamAV is now forced to invoke in daemon and multi-scan mode to keep in efficiency and well performance
- CHANGE: Fixed annotations maybe have weird display
- CHANGE: Fixed ClamAV unofficial assets maybe have import issues
- CHANGE: Fixed Git can cause unexpected issues
- CHANGE: Fixed Git LFS can cause unexpected issues
- CHANGE: Fixed Git sessions duplication issues
- CHANGE: Fixed scan result duplication issues
- CHANGE: Fixed some of the YARA rules duplication issues
- CHANGE: Improved annotations:
- Sessions which found issues by any of tools are now show a detail error list, instead of one line fuzzy message
- Sessions which found issues by any of tools and ignored are now show a detail warning list, instead of omit
- CHANGE: Input
targetsfor local target no longer allow to define value as./> âšī¸ Note: This change only affected workflows which especially definedtargets: "./", otherwise this change is not affected. - CHANGE: Merged found issues lists per tool per session into one per session for easier tracking
- CHANGE: Renamed inputs:
git_deeptogit_integrategit_reversesessiontogit_reverseyara_rulesfilter_listtoyara_unofficialassets
- CHANGE: Replaced these inputs with input
clamav_unofficialassets:clamav_signaturesignore_presetsclamav_unofficialsignatures
- CHANGE: Replaced these inputs with input
ignores:clamav_filesfilter_listclamav_signaturesignore_customyara_filesfilter_list
- CHANGE: Updated dependencies:
- Operating system from Debian v11.5 to Debian v11.7
- ClamAV from v0.103.7 to v1.0.1
- PowerShell from v7.2.6 (GitHub Release) to v7.3.4 (Microsoft Debian Package Repository)
hugoalh.GitHubActionsToolkitfrom v1.1.1 to v1.5.0- YARA from v4.0.5 to v4.2.3
- CHANGE: YARA is now forced to invoke in no warning mode
- REMOVE: Removed inputs:
clamav_daemonclamav_filesfilter_modeclamav_multiscanclamav_reloadpersessionclamav_subcursiveyara_filesfilter_modeyara_rulesfilter_modeyara_toolwarning
- REMOVE: Removed whitelist filter mode
- REMOVE: Removed YARA rules vendors:
blacktopdeadbitsyara-community
- PowerShell
Published by hugoalh about 3 years ago
hugoalh/scan-virus-ghaction - 0.6.4
- CHANGE: Updated assets and packages:
- ClamAV unofficial signatures
- YARA rules
đ Known Issues
đ Notice: No need to report these issues as these are already known, and will fix in the upcoming release.
- Annotations maybe have weird display
- ClamAV unofficial signatures maybe have import issues
- Git LFS can cause unexpected errors
- Git sessions maybe duplicated
- Scan result maybe have duplicated lines
- Some YARA rules maybe have duplicated and/or undefined or unrecognized namespace (3rd party issues)
- PowerShell
Published by hugoalh over 3 years ago
hugoalh/scan-virus-ghaction - 0.6.3
- CHANGE: Updated assets, dependencies and packages:
- ClamAV unofficial signatures
- Debian (image OS) from v11.3 (?) to v11.5
- PowerShell from v7.2.4 to v7.2.6
- YARA rules
- REMOVE: Removed automatically update on the Debian packages
đ Known Issues
đ Notice: No need to report these issues as these are already known, and will fix in the upcoming release.
- Annotations maybe have weird display
- ClamAV unofficial signatures maybe have import issues
- Git LFS can cause unexpected errors
- Git sessions maybe duplicated
- Scan result maybe have duplicated lines
- Some YARA rules maybe have duplicated and/or undefined or unrecognized namespace (3rd party issues)
- PowerShell
Published by hugoalh over 3 years ago
hugoalh/scan-virus-ghaction - 0.6.2 - đ¨ Emergency Patch
đ¨ Emergency Patch
Please upgrade to v0.6.2 or above (if any) as soon as possible!
Affected Versions
- v0.6.1
- v0.6.0
Impacts
- Action's will execute until timeout (for GitHub host) or infinity (for self host) due to an issue from Debian
apt-get.
- CHANGE: Fixed Debian
apt-getawaiting client interaction - CHANGE: Fixed import issues related to ClamAV unofficial signatures
- CHANGE: Fixed issues related to Git LFS
- CHANGE: Updated image dependency PowerShell from v7.2.3 to v7.2.4
- PowerShell
Published by hugoalh about 4 years ago
hugoalh/scan-virus-ghaction - 0.6.1
- ADD: Added ability to ignore ClamAV signatures
- ADD: Added ability to use ClamAV on demand scanner
- ADD: Added ability to use ClamAV unofficial signatures
- ADD: Added new inputs:
clamav_daemonclamav_reloadpersessionclamav_signaturesignore_customclamav_signaturesignore_presetsclamav_subcursiveclamav_unofficialsignatures
- CHANGE: Fixed ClamAV bytecode issues
- CHANGE: Fixed elements list's flags will display disabled anti virus tools
- CHANGE: Fixed statistic will count on the disabled anti virus tools
- CHANGE: Improved display on elements list, inputs list, and issues list
- CHANGE: Improved performance
- CHANGE: Updated image dependency PowerShell from v7.2.2 to v7.2.3
- PowerShell
Published by hugoalh about 4 years ago
hugoalh/scan-virus-ghaction - 0.6.0
đĻ Spotlight
Files Filter & Rules Filter
It is now possible to specify directories and/or files to scan per anti virus tool via inputs clamav_filesfilter_list, clamav_filesfilter_mode, yara_filesfilter_list, and yara_filesfilter_mode.
YARA Is Here!
YARA is now included in the anti virus tool list, but this tool is disable by default; To enable it, use:
yml
yara_enable: "true"
- ADD: Added ability to filter files to scan or not per anti virus tool
- ADD: Added ability to filter rules to skip or not for YARA
- ADD: Added new anti virus tool YARA
- ADD: Added new inputs:
git_reversesessionclamav_enableclamav_filesfilter_listclamav_filesfilter_modeclamav_multiscanyara_enableyara_filesfilter_listyara_filesfilter_modeyara_rulesfilter_listyara_rulesfilter_modeyara_toolwarning
- CHANGE: Action will be more aggressively terminate when error is occurred
- CHANGE: Changed image build steps to match the change of operating system
- CHANGE: Changed image operating system from Linux Alpine to Linux Debian (11: Bullseye)
- CHANGE: Clean files no longer log after the session's elements list
- CHANGE: Improved display of elements lists, inputs import, lists, sessions, statistic, and tables
- CHANGE: Improved invoke external programs system
- CHANGE: Renamed inputs to avoid confusion (old inputs are removed):
deeptogit_deeptargettotargets
- REMOVE: Removed cache system and replaced by native one
- REMOVE: Removed input
cache
- PowerShell
Published by hugoalh about 4 years ago
hugoalh/scan-virus-ghaction - 0.5.0
- ADD: Added ability to scan files faster than before for per sessions
- ADD: Added ability to scan files from local and network (replaced integration)
- ADD: Added new inputs:
cachedeeptarget
- CHANGE: Fixed software outdated issues
- CHANGE: Improved log readability
- CHANGE: Improved log streaming
- CHANGE: Improved scan reports
- CHANGE: Updated image dependencies:
- Linux Alpine from v3.15.0 to v3.15.4
- PowerShell from v7.2.1 to v7.2.2
- REMOVE: Removed ability to not log some of the results (mostly temporary)
- REMOVE: Removed inputs:
integrate(replaced by inputsdeepandtarget)list_elementslist_elementshasheslist_miscellaneousresultslist_scanresults
- PowerShell
Published by hugoalh about 4 years ago
hugoalh/scan-virus-ghaction - 0.4.2
- CHANGE: Improved internal service (module host)
- PowerShell
Published by hugoalh over 4 years ago
hugoalh/scan-virus-ghaction - 0.4.1
- CHANGE: Action's annotations no longer replace the default title
- CHANGE: Fixed issues when current session has only 1 element
- CHANGE: Improved list log readability
- PowerShell
Published by hugoalh over 4 years ago
hugoalh/scan-virus-ghaction - 0.4.0
- ADD: Added new input
integrateto integrate with service - ADD: Added NPM integration
- CHANGE: Fixed Git-Checkout maybe cause error or fatal randomly
- CHANGE: Improved internal service
- CHANGE: Input
list_elementshashesnow require type of boolean instead of type of string - CHANGE: Updated image dependency PowerShell from v7.2.0 to v7.2.1
- REMOVE: Removed input
gitdepth(replaced by inputintegratewith value"git")
- PowerShell
Published by hugoalh over 4 years ago
hugoalh/scan-virus-ghaction - 0.3.2
- CHANGE: Improved the way to setup hosted image build
- PowerShell
Published by hugoalh over 4 years ago
hugoalh/scan-virus-ghaction - 0.3.1
- CHANGE: Improved the Git commits list warning message
- CHANGE: Improved the way to setup hosted image build in order to decrease setup time
- PowerShell
Published by hugoalh over 4 years ago
hugoalh/scan-virus-ghaction - 0.3.0
- CHANGE: Changed the way to setup this action, from one-time image build (i.e.:
Build hugoalh/scan-virus-ghaction@<Tag/Version>) to hosted image build (host by GitHub Packages)(i.e.:Pull ghcr.io/hugoalh/scan-virus-ghaction:<Tag/Version>) in order to decrease setup time - CHANGE: Fixed missing steps information
- CHANGE: Renamed input
list_hashestolist_elementshashesto avoid confusion
- PowerShell
Published by hugoalh over 4 years ago
hugoalh/scan-virus-ghaction - 0.2.0
- ADD: Added new inputs:
list_elementslist_hasheslist_miscellaneousresultslist_scanresults
- CHANGE: Improved log system to prevent significantly increase the log size
- PowerShell
Published by hugoalh over 4 years ago
hugoalh/scan-virus-ghaction - 0.1.0
Initial pre-release.
- PowerShell
Published by hugoalh over 4 years ago