Question: Can we configure ServerlessClamscan to ignore files?

[Artotim]

I’m using Serverless ClamScan to scan files in a bucket that stores user data. In some cases, my server generates and stores files in a user’s folder. These files need to be available to the user immediately, and since they originate from my server, I don’t need them to be scanned.

Is there a way to configure Serverless ClamScan to ignore these files?

I considered adding a "CLEAN" tag when uploading the file to make it available instantly. However, will the file still be scanned in this case? Is there a better approach to bypass scanning for trusted files?

[bdmartin]

@Artotim - After you asked this question there was an update submitted that allows you to tag an object with scan-status == "N/A" and it will get skipped from the full scan. (Although the lambda will still get triggered, it just short-circuits)

Documentation: https://github.com/awslabs/cdk-serverless-clamscan#optionally-skip-files

I see that there is also an open PR to be able to specify scan filters: #1378