clamav | Docker based ClamAV® service provides an easy to deploy open source antivirus engine for detecting t | Continuous Deployment library

Try:

0.102.4 is outdated and old version. Actual version is 0.103.5 or newer.

Here is some reasons why you can't update ClamAV:

1. Amazon remote repository is outdated and not maintained anymore (you should to update your Linux OS to be able migrate to new repository). This case is most possible if you using current EC2 instance couple of years without updates
2. Local repository info is outdated. Try to run sudo yum update before ClamAV installation to update local info

If sudo yum update won't help try to Download newest clamav-0.104.2.linux.x86_64.rpm and install it manually (don't forget to delete old versions first).

Each file type can be identified by first bites (file signature), here is the list of most used file types https://en.wikipedia.org/wiki/List_of_file_signatures. You can check the uploaded file type by this signature and if it's unknown then trigger an error for the user

It depends on what that VM is going to do. Does this machine really receive external files that are going to be kept in the VM?. if so you may need an antivirus installed in the VM.

If this VM has your own software, your security could be the firewalls, Security Command Center, and Shielded VMs. If your VM is serving web apps, you could look for other Googles security tools like Cloud Armor.

For Cloud SQL instances, as they are a managed service, Google is responsible for security at OS and DB software levels. Although data access security is the customer's responsibility.

From experimentation it seems the answers are:

1. Nothing - they're a convention used by the Synology packaging system, it appears.
2. With one exception I didn't need to consider the consequences of removing the file system on which these stood. The @appstore directory clearly holds the installed Synology packages, and after pulling /volume1 they showed in the Package Center as "needing repair". Once they were repaired, the same @ prefixed directories appeared in the new volume - and the configuration was retained - so it appears these directories hold only the immutable software components.

The exception: I use ipkg mostly for fetchmail. I took a listing of the installed packages as well as the fetchmailrc, and then reinstalled the same packages once "Easy Bootstrap Installer" was ready for use (repair didn't work on this, but uninstall and reinstall worked fine).

Ansible loop can solve like below.

Those examples are both showing how to scan the host OS, which kind of includes everything running. If you want to scan containers in particular you would probably use something totally different, like an image policy webhook and some custom glue code. If you mean something more like you have a service that accepts user uploads and you want to scan those, you would probably integrate ClamAV directly into the app as a sidecar and your app would talk to the daemon (or just run clamscan itself on demand maybe).

Here is some example code:

Check for the session cookies or tokens from browser, as some websites place similar kind of security