search

dotnet / source-build

A repository to track efforts to produce a source tarball of the .NET Core SDK and all its components
MIT License
264 stars 129 forks source link

Malware scan execution error in VMR #4526

Closed Winniexu01 closed 1 month ago

Winniexu01 commented 1 month ago

The 1ES PT: AntiMalware ClamD Linux Scanner (Binary) step from the 1ES templates shows Pass but with the following error in latest build:

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 0.000 sec (0 m 0 s)
Start Date: 2024:07:25 10:33:56
End Date:   2024:07:25 10:33:56
ERROR: Could not connect to clamd on LocalSocket /var/run/clamav/clamd.ctl: No such file or directory
##[error]1ES PT Warning: Malware scan execution error in '/mnt/vss/_work/1/a/BuildLogs' with exit code '2'. This could be because the 'freshclam' could not update the virus databases.
dotnet-issue-labeler[bot] commented 1 month ago

I couldn't figure out the best area label to add to this issue. If you have write-permissions please help me learn by adding exactly one area label.

dotnet-issue-labeler[bot] commented 1 month ago

I couldn't figure out the best area label to add to this issue. If you have write-permissions please help me learn by adding exactly one area label.

MichaelSimons commented 1 month ago

From an internal discussion with the 1ES folks.

"This is a known issue. Unfortunately we cannot influence clamd behavior as it is a third party tool. Because of the amount of requests to clamd database it gets throttled. We are actively working on replacing it with Defender for Linux."

Given this isn't actually failing our builds I am going to close this issue as there is no action for us to take.