Skip to content

Commit ff50c40

Browse files
committed
chore: automatically set s3 scan status in dev
1 parent a2230e9 commit ff50c40

File tree

1 file changed

+7
-1
lines changed
  • packages/backend/src/helpers

1 file changed

+7
-1
lines changed

packages/backend/src/helpers/s3.ts

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ import StepError from '@/errors/step'
2121
export const COMMON_S3_BUCKET = appConfig.s3CommonBucket
2222
export const COMMON_S3_MOCK_FOLDER_PREFIX = `s3:${COMMON_S3_BUCKET}:mock/`
2323

24+
const MALWARE_SCAN_TAG_KEY = 'GuardDutyMalwareScanStatus'
2425
export const MALWARE_SCAN_STATUS = {
2526
THREATS_FOUND: 'THREATS_FOUND',
2627
NO_THREATS_FOUND: 'NO_THREATS_FOUND',
@@ -144,6 +145,11 @@ export async function getPresignedUrl(
144145
Key: objectKey,
145146
ContentType: contentType,
146147
Metadata: metadata,
148+
// There's no guard duty scanning in dev environment
149+
// so we just tag the object as scanned
150+
Tagging: appConfig.isDev
151+
? `${MALWARE_SCAN_TAG_KEY}=${MALWARE_SCAN_STATUS.NO_THREATS_FOUND}`
152+
: undefined,
147153
})
148154

149155
const presignedUrl = await getSignedUrl(s3Client, putObjectCommand, {
@@ -280,7 +286,7 @@ export async function checkObjectScanStatus(bucket: string, objectKey: string) {
280286
return { isValid: false, scanStatus: MALWARE_SCAN_STATUS.PENDING }
281287
}
282288
const scanStatus = TagSet.find(
283-
(obj) => obj.Key === 'GuardDutyMalwareScanStatus',
289+
(obj) => obj.Key === MALWARE_SCAN_TAG_KEY,
284290
)?.Value
285291

286292
if (scanStatus === MALWARE_SCAN_SUCCESS) {

0 commit comments

Comments
 (0)