[Code Analysis] ClamAV Antivirus Scan #6754

	---
	# SPDX-FileCopyrightText: (C) 2025 Intel Corporation
	# SPDX-License-Identifier: Apache-2.0

	name: "[Code Analysis] ClamAV Antivirus Scan"
	run-name: "[Code Analysis] ClamAV Antivirus Scan"

	on:
	workflow_dispatch: {}
	pull_request:
	branches:
	- main
	- release-*
	types:
	- opened
	- synchronize
	- reopened
	push:
	branches:
	- main
	- release-*

	# Trigger workflow when enqueued to a merge group
	# (must be under 'on')
	merge_group:

	# Only run at most 1 workflow concurrently per PR or per branch to keep costs down
	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read # needed for actions/checkout

	jobs:
	clamav-antivirus-scan:
	name: "Run ClamAV Antivirus Scan"
	permissions:
	contents: read
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false
	- name: Run ClamAV Scan
	uses: open-edge-platform/orch-ci/.github/actions/clamav@8b0ae64836f0395b21ff9dd7d9438284e8e8beda
	with:
	report-path: clamav_scan_report.txt
	project-folder: .
	- name: Upload ClamAV Scan Report
	if: always()
	uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
	with:
	name: ${{ env.CLAMAV_ARTIFACT_NAME }}
	path: ${{ env.SANITIZED_CLAMAV_REPORT_PATH }}

Provide feedback