Skip to content

Update clamav/clamav-debian Docker tag to v1.5.2-31 #2341

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
AlexSkrypnyk merged 1 commit into from
Mar 8, 2026
Merged

Update clamav/clamav-debian Docker tag to v1.5.2-31 #2341

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .docker/clamav.dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@

FROM uselagoon/commons:26.2.0 AS commons

FROM clamav/clamav-debian:1.5.1-30
FROM clamav/clamav-debian:1.5.2-31
Copy link

@coderabbitai coderabbitai bot Mar 6, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick | 🔵 Trivial

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

repo="clamav/clamav-debian"
tag="1.5.2-31"

echo "Attempting to resolve digest for ${repo}:${tag}..."

# Get token
token="$(curl -fsSL "https://auth.docker.io/token?service=registry.docker.io&scope=repository:${repo}:pull" 2>&1 | jq -r '.token' 2>&1)"

if [ -z "$token" ] || [ "$token" = "null" ]; then
  echo "Error: Failed to get authentication token"
  exit 1
fi

echo "Token obtained: ${token:0:20}..."

# Get digest
digest="$(
  curl -fsSI \
    -H "Authorization: Bearer ${token}" \
    -H "Accept: application/vnd.docker.distribution.manifest.v2+json" \
    "https://registry-1.docker.io/v2/${repo}/manifests/${tag}" \
  2>&1 | tr -d '\r' \
  | awk -F': ' '/Docker-Content-Digest/ {print $2}'
)"

if [ -z "$digest" ]; then
  echo "Error: Failed to resolve digest. Tag may not exist or be accessible."
  exit 1
fi

echo "Successfully resolved digest:"
echo "${repo}:${tag}@${digest}"

Repository: drevops/vortex

Length of output: 232

🏁 Script executed:

#!/bin/bash

# Try a simpler curl request to check if the tag exists
repo="clamav/clamav-debian"
tag="1.5.2-31"

# Get token
token=$(curl -fsSL "https://auth.docker.io/token?service=registry.docker.io&scope=repository:${repo}:pull" | jq -r '.token')

# Try to get manifest metadata (without -I flag to get more info)
echo "Checking if tag exists..."
curl -fsSL \
  -H "Authorization: Bearer ${token}" \
  -H "Accept: application/vnd.docker.distribution.manifest.v2+json" \
  "https://registry-1.docker.io/v2/${repo}/manifests/${tag}" 2>&1 | head -50

echo ""
echo "---"
echo "Attempting to list available tags..."

# Try to get tags list
curl -fsSL \
  -H "Authorization: Bearer ${token}" \
  "https://registry-1.docker.io/v2/${repo}/tags/list" 2>&1 | jq '.tags | sort | .[-10:]'

Repository: drevops/vortex

Length of output: 2005

Pin the updated ClamAV image to an immutable digest.

Line 15 uses a mutable tag. Pinning clamav/clamav-debian:1.5.2-31 to its digest improves reproducibility and prevents silent upstream retags.

Suggested change (amd64 example) 
-FROM clamav/clamav-debian:1.5.2-31
+FROM clamav/clamav-debian:1.5.2-31@sha256:83f8128fadcd26bb3a177ea66b995efa6b1a22a13d11b6e4d2679681e2873bab

Note: This image supports multiple architectures (amd64, arm64). If targeting a specific platform, use the corresponding digest. For multi-arch support, prefer pinning to the image index digest rather than individual platform digests.

📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
FROM clamav/clamav-debian:1.5.2-31
FROM clamav/clamav-debian:1.5.2-31@sha256:83f8128fadcd26bb3a177ea66b995efa6b1a22a13d11b6e4d2679681e2873bab
🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In @.docker/clamav.dockerfile at line 15, The Dockerfile uses a mutable tag in
the FROM instruction ("FROM clamav/clamav-debian:1.5.2-31"); replace that tag
with the corresponding immutable digest (preferably the image index digest for
multi-arch support) so the base image is pinned and reproducible—update the FROM
line to reference the canonical sha256 digest for the desired release (or
platform-specific digest if intentionally targeting amd64/arm64).


COPY --from=commons /lagoon /lagoon
COPY --from=commons /bin/fix-permissions /bin/ep /bin/docker-sleep /bin/wait-for /bin/
Expand Down