SourceCode-AI / aura

Python source code auditing and static analysis on a large scale
GNU General Public License v3.0
487 stars 31 forks source link

Add ClamAV integration #9

Open RootLUG opened 3 years ago

RootLUG commented 3 years ago

Add raw file analyzer to data pipeline that integrates with the ClamAV for scanning input files, this would be particularly helpful during global PyPI scans.

Preliminary research however shows that most of the python ClamAV bindings are very outdated and have not been updated in some time. PyClamd (https://xael.org/pages/pyclamd-en.html) appears to be somewhat most used out there but the bitbucket repo is a dead-end (404), best bet might be to fork or create our own ClamAV binding perhaps?