feat(infra): add ClamAV file scanner and fail-closed scan configuration

2026-08-01 12:17:54 +08:00
parent 0eba587459
commit 04361a5880
14 changed files with 245 additions and 6 deletions
--- a/yudao-server/src/main/resources/application.yaml
+++ b/yudao-server/src/main/resources/application.yaml
@@ -198,6 +198,15 @@ spring:
          enabled: false # TODO @管理员：有 bug https://github.com/spring-projects/spring-ai/issues/4917 需要官方修复

 yudao:
+  infra:
+    file-scan:
+      enabled: ${CLAMAV_ENABLED:false}
+      host: ${CLAMAV_HOST:127.0.0.1}
+      port: ${CLAMAV_PORT:3310}
+      connect-timeout-millis: ${CLAMAV_CONNECT_TIMEOUT_MILLIS:2000}
+      read-timeout-millis: ${CLAMAV_READ_TIMEOUT_MILLIS:10000}
+      chunk-bytes: ${CLAMAV_CHUNK_BYTES:8192}
+      max-response-bytes: ${CLAMAV_MAX_RESPONSE_BYTES:4096}
  ai:
    doubao: # 字节豆包
      enable: true