[Code Analysis] ClamAV Antivirus Scan #2

	---
	# SPDX-FileCopyrightText: (C) 2025 Intel Corporation
	# SPDX-License-Identifier: Apache-2.0

	name: "[Code Analysis] ClamAV Antivirus Scan"
	run-name: "[Code Analysis] ClamAV Antivirus Scan"

	on:
	workflow_dispatch: {}
	pull_request:
	branches:
	- main
	- release-*
	types:
	- opened
	- synchronize
	- reopened
	push:
	branches:
	- main
	- release-*

	# Trigger workflow when enqueued to a merge group
	# (must be under 'on')
	merge_group:

	# Only run at most 1 workflow concurrently per PR or per branch to keep costs down
	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read # needed for actions/checkout

	jobs:
	clamav-antivirus-scan:
	name: "Run ClamAV Antivirus Scan"
	permissions:
	contents: read
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	with:
	persist-credentials: false
	- name: Run ClamAV Scan
	uses: open-edge-platform/orch-ci/.github/actions/clamav@8b0ae64836f0395b21ff9dd7d9438284e8e8beda
	with:
	report-path: clamav_scan_report.txt
	project-folder: .
	- name: Upload ClamAV Scan Report
	if: always()
	uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
	with:
	name: ${{ env.CLAMAV_ARTIFACT_NAME }}
	path: ${{ env.SANITIZED_CLAMAV_REPORT_PATH }}

Provide feedback