npmpackage.info

Gathering detailed insights and metrics for monocdk-serverless-clamscan

monocdk-serverless-clamscan - 1.2.18 | npmpackage.info

monocdk-serverless-clamscan

1.2.18

258

Apache-2.0

TypeScript

339.99 kB

6.9

Installations

npm install monocdk-serverless-clamscan

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Node Version

14.19.2

NPM Version

6.14.17 Pull Requests

Open

4

Total

1,436

Closed

37

Merged

1,395

Issues

Open

27

Total

90

Closed

63

Releases

1,390

v2.11.78

Updated on Jul 15, 2025

v2.11.77

Updated on Jul 13, 2025

v2.11.76

Updated on Jul 12, 2025

v2.11.75

Updated on Jul 11, 2025

v2.11.74

Updated on Jul 10, 2025

v2.11.73

Updated on Jul 09, 2025

View All 1,390 releases

Languages

TypeScript

Python

JavaScript

Dockerfile

TypeScript (70.04%)

Python (25.87%)

JavaScript (2.39%)

Dockerfile (1.71%)

Developer

awslabs

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

Apache-2.0 License

258 Stars

1,252 Commits

73 Forks

4 Watchers

3 Branches

19 Contributors

Updated on Jul 15, 2025

Maintainers

View All 19 Contributors

Package Meta Information

Latest Version

1.2.18

Package Id

monocdk-serverless-clamscan@1.2.18

Unpacked Size

339.99 kB

Size

136.31 kB

File Count

NPM Version

6.14.17

Node Version

14.19.2

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

cdk-serverless-clamscan

Language	cdk-serverless-clamscan	monocdk-serverless-clamscan
Python
TypeScript

If your project uses cdk version 1.x.x use cdk-serverless-clamscan ^1.0.0
If your project uses cdk version 2.x.x use cdk-serverless-clamscan ^2.0.0
If your project uses monocdk use monocdk-serverless-clamscan ^1.0.0

An aws-cdk construct that uses ClamAV® to scan objects in Amazon S3 for viruses. The construct provides a flexible interface for a system to act based on the results of a ClamAV virus scan.

Overview

Pre-Requisites

Docker: The ClamAV Lambda functions utilizes a container image that is built locally using docker bundling

Examples

This project uses projen and thus all the constructs follow language specific standards and naming patterns. For more information on how to translate the following examples into your desired language read the CDK guide on Translating TypeScript AWS CDK code to other languages

Example 1. (Default destinations with rule target)

typescript

1import { RuleTargetInput } from '@aws-cdk/aws-events';
2import { SnsTopic } from '@aws-cdk/aws-events-targets';
3import { Bucket } from '@aws-cdk/aws-s3';
4import { Topic } from '@aws-cdk/aws-sns';
5import { Construct, Stack, StackProps } from '@aws-cdk/core';
6import { ServerlessClamscan } from 'cdk-serverless-clamscan';
7
8export class CdkTestStack extends Stack {
9  constructor(scope: Construct, id: string, props?: StackProps) {
10    super(scope, id, props);
11
12    const bucket_1 = new Bucket(this, 'rBucket1');
13    const bucket_2 = new Bucket(this, 'rBucket2');
14    const bucketList = [bucket_1, bucket_2];
15    const sc = new ServerlessClamscan(this, 'rClamscan', {
16      buckets: bucketList,
17    });
18    const bucket_3 = new Bucket(this, 'rBucket3');
19    sc.addSourceBucket(bucket_3);
20    const infectedTopic = new Topic(this, 'rInfectedTopic');
21    sc.infectedRule?.addTarget(
22      new SnsTopic(infectedTopic, {
23        message: RuleTargetInput.fromEventPath(
24          '$.detail.responsePayload.message',
25        ),
26      }),
27    );
28  }
29}

python

1from aws_cdk import (
2  core as core,
3  aws_events as events,
4  aws_events_targets as events_targets,
5  aws_s3 as s3,
6  aws_sns as sns
7)
8from cdk_serverless_clamscan import ServerlessClamscan
9
10class CdkTestStack(core.Stack):
11
12  def __init__(self, scope: core.Construct, construct_id: str, **kwargs) -> None:
13    super().__init__(scope, construct_id, **kwargs)
14
15    bucket_1 = s3.Bucket(self, "rBucket1")
16    bucket_2 = s3.Bucket(self, "rBucket2")
17    bucketList = [ bucket_1, bucket_2 ]
18    sc = ServerlessClamscan(self, "rClamScan",
19      buckets=bucketList,
20    )
21    bucket_3 = s3.Bucket(self, "rBucket3")
22    sc.add_source_bucket(bucket_3)
23    infected_topic = sns.Topic(self, "rInfectedTopic")
24    if sc.infected_rule != None:
25      sc.infected_rule.add_target(
26        events_targets.SnsTopic(
27          infected_topic,
28          message=events.RuleTargetInput.from_event_path('$.detail.responsePayload.message'),
29        )
30      )

Example 2. (Bring your own destinations)

typescript

1import {
2  SqsDestination,
3  EventBridgeDestination,
4} from '@aws-cdk/aws-lambda-destinations';
5import { Bucket } from '@aws-cdk/aws-s3';
6import { Queue } from '@aws-cdk/aws-sqs';
7import { Construct, Stack, StackProps } from '@aws-cdk/core';
8import { ServerlessClamscan } from 'cdk-serverless-clamscan';
9
10export class CdkTestStack extends Stack {
11  constructor(scope: Construct, id: string, props?: StackProps) {
12    super(scope, id, props);
13
14    const bucket_1 = new Bucket(this, 'rBucket1');
15    const bucket_2 = new Bucket(this, 'rBucket2');
16    const bucketList = [bucket_1, bucket_2];
17    const queue = new Queue(this, 'rQueue');
18    const sc = new ServerlessClamscan(this, 'default', {
19      buckets: bucketList,
20      onResult: new EventBridgeDestination(),
21      onError: new SqsDestination(queue),
22    });
23    const bucket_3 = new Bucket(this, 'rBucket3');
24    sc.addSourceBucket(bucket_3);
25  }
26}

python

1from aws_cdk import (
2  core as core,
3  aws_lambda_destinations as lambda_destinations,
4  aws_s3 as s3,
5  aws_sqs as sqs
6)
7from cdk_serverless_clamscan import ServerlessClamscan
8
9class CdkTestStack(core.Stack):
10
11  def __init__(self, scope: core.Construct, construct_id: str, **kwargs) -> None:
12    super().__init__(scope, construct_id, **kwargs)
13
14    bucket_1 = s3.Bucket(self, "rBucket1")
15    bucket_2 = s3.Bucket(self, "rBucket2")
16    bucketList = [ bucket_1, bucket_2 ]
17    queue = sqs.Queue(self, "rQueue")
18    sc = ServerlessClamscan(self, "rClamScan",
19      buckets=bucketList,
20      on_result=lambda_destinations.EventBridgeDestination(),
21      on_error=lambda_destinations.SqsDestination(queue),
22    )
23    bucket_3 = s3.Bucket(self, "rBucket3")
24    sc.add_source_bucket(bucket_3)

Operation and Maintenance

When ClamAV publishes updates to the scanner you will see “Your ClamAV installation is OUTDATED” in your scan results. While the construct creates a system to keep the database definitions up to date, you must update the scanner to detect all the latest Viruses.

Update the docker images of the Lambda functions with the latest version of ClamAV by re-running cdk deploy.

API Reference

See API.md.

Contributing

See CONTRIBUTING for more information.

License

This project is licensed under the Apache-2.0 License.

No vulnerabilities found.

10

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

10

Security-Policy

Determines if the project has published a security policy.

7

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

6

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: third-party GitHubAction not pinned by hash: .github/workflows/auto-approve.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/auto-approve.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/build.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pull-request-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/pull-request-lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/upgrade-main.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/upgrade-main.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/upgrade-main.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/upgrade-main.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/upgrade-main.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/upgrade-main.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/upgrade-main.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/upgrade-main.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/upgrade-main.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/upgrade-main.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/upgrade-main.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/awslabs/cdk-serverless-clamscan/upgrade-main.yml/main?enable=pin
Warn: containerImage not pinned by hash: assets/lambda/code/download_defs/Dockerfile:4: pin your Docker image by updating public.ecr.aws/lambda/python:3.12 to public.ecr.aws/lambda/python:3.12@sha256:f8a12468c1757e0eb389f75541f950b2913aaed84bf06976e2998cd04ec7bcc3
Warn: containerImage not pinned by hash: assets/lambda/code/scan/Dockerfile:4: pin your Docker image by updating public.ecr.aws/lambda/python:3.12 to public.ecr.aws/lambda/python:3.12@sha256:f8a12468c1757e0eb389f75541f950b2913aaed84bf06976e2998cd04ec7bcc3
Warn: pipCommand not pinned by hash: assets/lambda/code/download_defs/Dockerfile:9-13
Warn: pipCommand not pinned by hash: assets/lambda/code/scan/Dockerfile:9-13
Info: 0 out of 30 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned
Info: 0 out of 2 containerImage dependencies pinned
Info: 0 out of 2 pipCommand dependencies pinned

0

SAST

Determines if the project uses static code analysis.

Score

6.9

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

monocdk-serverless-clamscan

Installations

Developer Guide

Yes

CommonJS

14.19.2

6.14.17

Pull Requests

4

1,436

37

1,395

Issues

27

90

63

Releases

Languages

Developer

awslabs

Download Statistics

GitHub Statistics

Maintainers

Package Meta Information

Total Downloads

NaN

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Peer Dependencies

Dev Dependencies

cdk-serverless-clamscan

Pre-Requisites

Examples

Example 1. (Default destinations with rule target)

Example 2. (Bring your own destinations)

Operation and Maintenance

API Reference

Contributing

License

10

10

10

10

10

10

7

6

0

0

0

0

6.9

/10