Recent Releases of hugoalh/scan-virus-ghaction

hugoalh/scan-virus-ghaction - 0.20.1

ã€°ī¸ Changes

  • Fix all of the discoverable and compatible ClamAV custom assets were always registered no matter the selection (@hugoalh)(#96, 4a2f23d7ce1a2dd2d4f48ab1f7f81a5f3389313b)
  • Fix YARA custom assets accept compiled rules while it should not (@hugoalh)(N/A)
  • Update unofficial assets to Git commit hash 91f6d3e6e2ea8a64935a8257fdecc6b52797e1eb (@hugoalh)(N/A)

- PowerShell
Published by hugoalh over 2 years ago

hugoalh/scan-virus-ghaction - 0.20.0

đŸ”Ļ Spotlights

  • Ability to use custom assets via mapped directory/volume
  • More fine-grained ignores for ignore matrix of paths, sessions, symbols, and/or tools

đŸ’Ĩ Break Changes

  • Change mechanism, strategy and syntax of ignores: (@hugoalh)(N/A)
    • Ability to ignore matrix of paths, sessions, symbols, and/or tools
    • Ability to ignore paths with Git commit meta
    • Replace input ignores by inputs ignores_pre and ignores_post
    • Use PowerShell script block as syntax instead of markup languages
  • Change target GitHub Actions Runner from >= v2.303.0 to >= v2.308.0 (@hugoalh)(N/A)
  • Inputs which accept list of values is now require to separate each value per line instead of customable list delimiter (@hugoalh)(N/A)
  • Remove input targets and replace by the GitHub Actions Runner current working directory (@hugoalh)(N/A)
  • Remove support of network and remote targets (@hugoalh)(N/A)
    • To scan any of network and/or remote targets, user must prepare those before this action
  • Rename inputs: (@hugoalh)(N/A)
    • clamav_unofficialassets to clamav_unofficialassets_use
    • yara_unofficialassets to yara_unofficialassets_use

ã€°ī¸ Changes

  • Add inputs clamav_customassets_directory, clamav_customassets_use, yara_customassets_directory, and yara_customassets_use for usage of custom assets (@hugoalh)(N/A)
  • Fix summary preview rarely broken cause by characters escapes (@hugoalh)(N/A)
  • Fix 200+ of error messages related to undefined identifier on YARA unofficial assets (@hugoalh)(N/A)
  • Improve efficiency and performance (@hugoalh)(N/A)
  • Improve issues message and list (@hugoalh)(N/A)
  • Remove input log_elements and replace by debugger (@hugoalh)(N/A)
  • Remove inputs input_listdelimiter and input_tablemarkup as no longer necessary (@hugoalh)(N/A)
  • Resolve overflow issues in the statistics (@hugoalh)(N/A)
  • Softwares version table is now persistence and no longer need to recalculate and/or regenerate (@hugoalh)(N/A)
  • Update image and it's softwares (@hugoalh)(N/A)
  • Update unofficial assets to Git commit hash da7c303cf684d041735edd044d3480a182698afc (@hugoalh)(N/A)

- PowerShell
Published by hugoalh over 2 years ago

hugoalh/scan-virus-ghaction - 0.16.1

  • CHANGE: Updated unofficial assets

- PowerShell
Published by hugoalh almost 3 years ago

hugoalh/scan-virus-ghaction - 0.16.0

  • CHANGE: Elements no longer list in the log unless enabled debug mode
  • CHANGE: Found list no longer on annotations to prevent get truncated (#76)
  • CHANGE: Improved allocation
  • CHANGE: Improved device resources usage by implemented conditional modules importer
  • CHANGE: Improved table display in the log to reduce rows usage, especially on found list
  • CHANGE: Updated unofficial assets

- PowerShell
Published by hugoalh almost 3 years ago

hugoalh/scan-virus-ghaction - 0.15.1

  • CHANGE: Updated Docker image
  • CHANGE: Updated unofficial assets

- PowerShell
Published by hugoalh almost 3 years ago

hugoalh/scan-virus-ghaction - 0.15.0

  • ADD: Added outputs finish and found for better conditional requests
  • CHANGE: Updated unofficial assets

- PowerShell
Published by hugoalh almost 3 years ago

hugoalh/scan-virus-ghaction - 0.14.1

  • CHANGE: Fixed statistics table would display different results in the log and summary
  • CHANGE: Updated unofficial assets

- PowerShell
Published by hugoalh almost 3 years ago

hugoalh/scan-virus-ghaction - 0.14.0

  • ADD: Now provide editions of each tool:
    • ClamAV: "hugoalh/scan-virus-ghaction/clamav@<Version>"
    • YARA: "hugoalh/scan-virus-ghaction/yara@<Version>"
  • CHANGE: Changed behaviour: When YARA is enabled, all of the YARA unofficial assets are in use if not specified in input yara_unofficialassets (previously no YARA unofficial assets are in use if not specified in input yara_unofficialassets)
  • CHANGE: Fixed "Reach the Git commits count limit" used too many lines
  • CHANGE: Updated unofficial assets

- PowerShell
Published by hugoalh almost 3 years ago

hugoalh/scan-virus-ghaction - 0.13.2

  • CHANGE: Fixed found tables in the summary with not ignored (red circle) and ignored (yellow circle) status were separated
  • CHANGE: Updated unofficial assets

- PowerShell
Published by hugoalh about 3 years ago

hugoalh/scan-virus-ghaction - 0.13.1

  • CHANGE: Improved statistics table
  • CHANGE: Tweaked ClamAV configs to have a better performance
  • CHANGE: Updated unofficial assets
  • REMOVE: Removed deprecated unofficial assets

- PowerShell
Published by hugoalh about 3 years ago

hugoalh/scan-virus-ghaction - 0.13.0

  • ADD: Added input git_lfs
  • CHANGE: No longer checkout Git LFS files by default, use input git_lfs to control this behaviour
  • CHANGE: Updated unofficial assets

- PowerShell
Published by hugoalh about 3 years ago

hugoalh/scan-virus-ghaction - 0.12.0

  • ADD: Added input log_elements
  • CHANGE: Addressed issues on Git integration:
    • Fixed freezed, hanging, overflow, out of RAM, and/or timeout when getting Git commits meta
    • Improved logics for getting Git commits meta
    • Improved logics for Git ignores filter
    • Reduced duration on getting Git commits meta
  • CHANGE: Fixed overflow issues on large files and repository

- PowerShell
Published by hugoalh about 3 years ago

hugoalh/scan-virus-ghaction - 0.11.1

  • CHANGE: Fixed parser issues with markups CSVM or CSVS
  • CHANGE: Updated unofficial assets

- PowerShell
Published by hugoalh about 3 years ago

hugoalh/scan-virus-ghaction - 0.11.0

  • ADD: Added inputs:
    • summary_found
    • summary_statistics
  • ADD: Added count for remote targets
  • ADD: Added support for step summary
  • CHANGE: Fixed annotation of table syntax error was not shown in the annotation list
  • CHANGE: Fixed overflow issues on large repository (partly)

- PowerShell
Published by hugoalh about 3 years ago

hugoalh/scan-virus-ghaction - 0.10.1

  • CHANGE: Fixed display issues:
    • A long path can cause other properties in the same table not displaying
    • Wrapped lines are all offset

- PowerShell
Published by hugoalh about 3 years ago

hugoalh/scan-virus-ghaction - 0.10.0

  • MAJOR: Refactored assets stock
  • MAJOR: Refactored codes structure
  • ADD: Added ability to disable update ClamAV via FreshClam
  • ADD: Added ability to ignore based on multiple paths, sessions, symbols, and/or tools in mixed combinations
  • ADD: Added ability to ignore Git commits based on multiple properties in mixed combinations
  • ADD: Added ability to limit scan count of the Git commits
  • ADD: Added inputs:
    • input_listdelimiter
    • input_tablemarkup
    • git_ignores
    • git_limit
    • clamav_update
  • ADD: Added target GitHub Actions Runner version requirement, currently >= v2.303.0
  • CHANGE: ClamAV is now forced to invoke in daemon and multi-scan mode to keep in efficiency and well performance
  • CHANGE: Fixed annotations maybe have weird display
  • CHANGE: Fixed ClamAV unofficial assets maybe have import issues
  • CHANGE: Fixed Git can cause unexpected issues
  • CHANGE: Fixed Git LFS can cause unexpected issues
  • CHANGE: Fixed Git sessions duplication issues
  • CHANGE: Fixed scan result duplication issues
  • CHANGE: Fixed some of the YARA rules duplication issues
  • CHANGE: Improved annotations:
    • Sessions which found issues by any of tools are now show a detail error list, instead of one line fuzzy message
    • Sessions which found issues by any of tools and ignored are now show a detail warning list, instead of omit
  • CHANGE: Input targets for local target no longer allow to define value as ./ > â„šī¸ Note: This change only affected workflows which especially defined targets: "./", otherwise this change is not affected.
  • CHANGE: Merged found issues lists per tool per session into one per session for easier tracking
  • CHANGE: Renamed inputs:
    • git_deep to git_integrate
    • git_reversesession to git_reverse
    • yara_rulesfilter_list to yara_unofficialassets
  • CHANGE: Replaced these inputs with input clamav_unofficialassets:
    • clamav_signaturesignore_presets
    • clamav_unofficialsignatures
  • CHANGE: Replaced these inputs with input ignores:
    • clamav_filesfilter_list
    • clamav_signaturesignore_custom
    • yara_filesfilter_list
  • CHANGE: Updated dependencies:
    • Operating system from Debian v11.5 to Debian v11.7
    • ClamAV from v0.103.7 to v1.0.1
    • PowerShell from v7.2.6 (GitHub Release) to v7.3.4 (Microsoft Debian Package Repository)
    • hugoalh.GitHubActionsToolkit from v1.1.1 to v1.5.0
    • YARA from v4.0.5 to v4.2.3
  • CHANGE: YARA is now forced to invoke in no warning mode
  • REMOVE: Removed inputs:
    • clamav_daemon
    • clamav_filesfilter_mode
    • clamav_multiscan
    • clamav_reloadpersession
    • clamav_subcursive
    • yara_filesfilter_mode
    • yara_rulesfilter_mode
    • yara_toolwarning
  • REMOVE: Removed whitelist filter mode
  • REMOVE: Removed YARA rules vendors:
    • blacktop
    • deadbits
    • yara-community

- PowerShell
Published by hugoalh about 3 years ago

hugoalh/scan-virus-ghaction - 0.6.4

  • CHANGE: Updated assets and packages:
    • ClamAV unofficial signatures
    • YARA rules

🐛 Known Issues

📋 Notice: No need to report these issues as these are already known, and will fix in the upcoming release.

  • Annotations maybe have weird display
  • ClamAV unofficial signatures maybe have import issues
  • Git LFS can cause unexpected errors
  • Git sessions maybe duplicated
  • Scan result maybe have duplicated lines
  • Some YARA rules maybe have duplicated and/or undefined or unrecognized namespace (3rd party issues)

- PowerShell
Published by hugoalh over 3 years ago

hugoalh/scan-virus-ghaction - 0.6.3

  • CHANGE: Updated assets, dependencies and packages:
    • ClamAV unofficial signatures
    • Debian (image OS) from v11.3 (?) to v11.5
    • PowerShell from v7.2.4 to v7.2.6
    • YARA rules
  • REMOVE: Removed automatically update on the Debian packages

🐛 Known Issues

📋 Notice: No need to report these issues as these are already known, and will fix in the upcoming release.

  • Annotations maybe have weird display
  • ClamAV unofficial signatures maybe have import issues
  • Git LFS can cause unexpected errors
  • Git sessions maybe duplicated
  • Scan result maybe have duplicated lines
  • Some YARA rules maybe have duplicated and/or undefined or unrecognized namespace (3rd party issues)

- PowerShell
Published by hugoalh over 3 years ago

hugoalh/scan-virus-ghaction - 0.6.2 - 🚨 Emergency Patch

🚨 Emergency Patch

Please upgrade to v0.6.2 or above (if any) as soon as possible!

Affected Versions

  • v0.6.1
  • v0.6.0

Impacts

  • Action's will execute until timeout (for GitHub host) or infinity (for self host) due to an issue from Debian apt-get.

  • CHANGE: Fixed Debian apt-get awaiting client interaction
  • CHANGE: Fixed import issues related to ClamAV unofficial signatures
  • CHANGE: Fixed issues related to Git LFS
  • CHANGE: Updated image dependency PowerShell from v7.2.3 to v7.2.4

- PowerShell
Published by hugoalh about 4 years ago

hugoalh/scan-virus-ghaction - 0.6.1

  • ADD: Added ability to ignore ClamAV signatures
  • ADD: Added ability to use ClamAV on demand scanner
  • ADD: Added ability to use ClamAV unofficial signatures
  • ADD: Added new inputs:
    • clamav_daemon
    • clamav_reloadpersession
    • clamav_signaturesignore_custom
    • clamav_signaturesignore_presets
    • clamav_subcursive
    • clamav_unofficialsignatures
  • CHANGE: Fixed ClamAV bytecode issues
  • CHANGE: Fixed elements list's flags will display disabled anti virus tools
  • CHANGE: Fixed statistic will count on the disabled anti virus tools
  • CHANGE: Improved display on elements list, inputs list, and issues list
  • CHANGE: Improved performance
  • CHANGE: Updated image dependency PowerShell from v7.2.2 to v7.2.3

- PowerShell
Published by hugoalh about 4 years ago

hugoalh/scan-virus-ghaction - 0.6.0

đŸ”Ļ Spotlight

Files Filter & Rules Filter

It is now possible to specify directories and/or files to scan per anti virus tool via inputs clamav_filesfilter_list, clamav_filesfilter_mode, yara_filesfilter_list, and yara_filesfilter_mode.

YARA Is Here!

YARA is now included in the anti virus tool list, but this tool is disable by default; To enable it, use:

yml yara_enable: "true"


  • ADD: Added ability to filter files to scan or not per anti virus tool
  • ADD: Added ability to filter rules to skip or not for YARA
  • ADD: Added new anti virus tool YARA
  • ADD: Added new inputs:
    • git_reversesession
    • clamav_enable
    • clamav_filesfilter_list
    • clamav_filesfilter_mode
    • clamav_multiscan
    • yara_enable
    • yara_filesfilter_list
    • yara_filesfilter_mode
    • yara_rulesfilter_list
    • yara_rulesfilter_mode
    • yara_toolwarning
  • CHANGE: Action will be more aggressively terminate when error is occurred
  • CHANGE: Changed image build steps to match the change of operating system
  • CHANGE: Changed image operating system from Linux Alpine to Linux Debian (11: Bullseye)
  • CHANGE: Clean files no longer log after the session's elements list
  • CHANGE: Improved display of elements lists, inputs import, lists, sessions, statistic, and tables
  • CHANGE: Improved invoke external programs system
  • CHANGE: Renamed inputs to avoid confusion (old inputs are removed):
    • deep to git_deep
    • target to targets
  • REMOVE: Removed cache system and replaced by native one
  • REMOVE: Removed input cache

- PowerShell
Published by hugoalh about 4 years ago

hugoalh/scan-virus-ghaction - 0.5.0

  • ADD: Added ability to scan files faster than before for per sessions
  • ADD: Added ability to scan files from local and network (replaced integration)
  • ADD: Added new inputs:
    • cache
    • deep
    • target
  • CHANGE: Fixed software outdated issues
  • CHANGE: Improved log readability
  • CHANGE: Improved log streaming
  • CHANGE: Improved scan reports
  • CHANGE: Updated image dependencies:
    • Linux Alpine from v3.15.0 to v3.15.4
    • PowerShell from v7.2.1 to v7.2.2
  • REMOVE: Removed ability to not log some of the results (mostly temporary)
  • REMOVE: Removed inputs:
    • integrate (replaced by inputs deep and target)
    • list_elements
    • list_elementshashes
    • list_miscellaneousresults
    • list_scanresults

- PowerShell
Published by hugoalh about 4 years ago

hugoalh/scan-virus-ghaction - 0.4.2

  • CHANGE: Improved internal service (module host)

- PowerShell
Published by hugoalh over 4 years ago

hugoalh/scan-virus-ghaction - 0.4.1

  • CHANGE: Action's annotations no longer replace the default title
  • CHANGE: Fixed issues when current session has only 1 element
  • CHANGE: Improved list log readability

- PowerShell
Published by hugoalh over 4 years ago

hugoalh/scan-virus-ghaction - 0.4.0

  • ADD: Added new input integrate to integrate with service
  • ADD: Added NPM integration
  • CHANGE: Fixed Git-Checkout maybe cause error or fatal randomly
  • CHANGE: Improved internal service
  • CHANGE: Input list_elementshashes now require type of boolean instead of type of string
  • CHANGE: Updated image dependency PowerShell from v7.2.0 to v7.2.1
  • REMOVE: Removed input gitdepth (replaced by input integrate with value "git")

- PowerShell
Published by hugoalh over 4 years ago

hugoalh/scan-virus-ghaction - 0.3.2

  • CHANGE: Improved the way to setup hosted image build

- PowerShell
Published by hugoalh over 4 years ago

hugoalh/scan-virus-ghaction - 0.3.1

  • CHANGE: Improved the Git commits list warning message
  • CHANGE: Improved the way to setup hosted image build in order to decrease setup time

- PowerShell
Published by hugoalh over 4 years ago

hugoalh/scan-virus-ghaction - 0.3.0

  • CHANGE: Changed the way to setup this action, from one-time image build (i.e.: Build hugoalh/scan-virus-ghaction@<Tag/Version>) to hosted image build (host by GitHub Packages)(i.e.: Pull ghcr.io/hugoalh/scan-virus-ghaction:<Tag/Version>) in order to decrease setup time
  • CHANGE: Fixed missing steps information
  • CHANGE: Renamed input list_hashes to list_elementshashes to avoid confusion

- PowerShell
Published by hugoalh over 4 years ago

hugoalh/scan-virus-ghaction - 0.2.0

  • ADD: Added new inputs:
    • list_elements
    • list_hashes
    • list_miscellaneousresults
    • list_scanresults
  • CHANGE: Improved log system to prevent significantly increase the log size

- PowerShell
Published by hugoalh over 4 years ago

hugoalh/scan-virus-ghaction - 0.1.0

Initial pre-release.

- PowerShell
Published by hugoalh over 4 years ago