# The scanner configuration is baked in rather than bind-mounted.
# A containerised CI runner shares the host's Docker daemon, so a host path from
# the runner's workspace does not exist where the daemon creates the mount: it
# makes an empty directory instead and the container fails to start.
ARG CLAMAV_IMAGE=clamav/clamav@sha256:9cb27d7660bdf66e9878c832cb433dd8aa152cfbe16f3c2c0084c80b04ae22b4
FROM ${CLAMAV_IMAGE}
COPY infra/clamd.conf /etc/clamav/clamd.conf