-
Notifications
You must be signed in to change notification settings - Fork 78
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Updates to include a mirror of the ClamAV CVD database #37
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Besides the minor things I spotted (and some are opinions!), I think there's room for two things:
- Setting up Dependabot
- Setting up GitHub Action workflow to build this container image
I can help you with both as I have ready-to-use templates and examples of both.
WDYT?
app.post('/', async (req, res) => { | ||
// Sanity check required values. | ||
if (!req.body || req.body.kind !== 'storage#object') { | ||
handleErrorResponse(res, 200, `${req.body} is not a GCS Storage Object`); | ||
return; | ||
switch (req.body.kind) { | ||
case 'storage#object': | ||
await handleGcsObject(req, res); | ||
break; | ||
case 'schedule#cvd_update': | ||
await handleCvdUpdate(req, res); | ||
break; | ||
default: | ||
handleErrorResponse( | ||
res, | ||
200, | ||
`${JSON.stringify(req.body)} is not supported` + | ||
'(kind must be storage#object or schedule#cvd_update'); | ||
break; | ||
} | ||
}); |
Check failure
Code scanning / CodeQL
Missing rate limiting
This requires that config.json is used to specify the configuration, that a separate bucket is used to store a mirror of the CVD database and that this bucket is pre-populated before deployment
This requires that config.json is used to specify the configuration, that a separate bucket is used to store a mirror of the CVD database and that this bucket is pre-populated before deployment
This reverts commit 567c479.
This reverts commit 6286f4d.
Major update to v2.0 to fix #35
This version maintains a ClamAV database mirror to prevent issues with the ClamAV DN