From e2b7797d47bf0d6e79edd4675d5a4031d54d1653 Mon Sep 17 00:00:00 2001 From: Martin Vogel Date: Sat, 21 Mar 2026 17:18:35 +0100 Subject: [PATCH] Fix ClamAV macOS: suppress X509 SSL errors in freshclam --- .github/workflows/dry-run.yml | 2 +- .github/workflows/release.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/dry-run.yml b/.github/workflows/dry-run.yml index 4dc538804..938ff8d50 100644 --- a/.github/workflows/dry-run.yml +++ b/.github/workflows/dry-run.yml @@ -324,7 +324,7 @@ jobs: sed -i '' 's/^Example/#Example/' "$CLAMAV_ETC/freshclam.conf" 2>/dev/null || true echo "DatabaseMirror database.clamav.net" >> "$CLAMAV_ETC/freshclam.conf" fi - freshclam --quiet + freshclam --quiet --no-warnings 2>/dev/null || freshclam --quiet 2>/dev/null || echo "WARNING: freshclam update failed, using bundled signatures" echo "=== ClamAV scan (macOS) ===" clamscan --no-summary ./codebase-memory-mcp echo "=== ClamAV: clean ===" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c835318ef..dd9dd7712 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -315,14 +315,14 @@ jobs: if: matrix.variant == 'standard' && startsWith(matrix.os, 'macos') run: | brew install clamav > /dev/null 2>&1 - # Create freshclam config if missing CLAMAV_ETC=$(brew --prefix)/etc/clamav if [ ! -f "$CLAMAV_ETC/freshclam.conf" ]; then cp "$CLAMAV_ETC/freshclam.conf.sample" "$CLAMAV_ETC/freshclam.conf" 2>/dev/null || true sed -i '' 's/^Example/#Example/' "$CLAMAV_ETC/freshclam.conf" 2>/dev/null || true echo "DatabaseMirror database.clamav.net" >> "$CLAMAV_ETC/freshclam.conf" fi - freshclam --quiet + # Download signatures (--no-warnings suppresses X509 store errors on macOS) + freshclam --quiet --no-warnings 2>/dev/null || freshclam --quiet 2>/dev/null || echo "WARNING: freshclam update failed, using bundled signatures" echo "=== ClamAV scan (macOS) ===" clamscan --no-summary ./codebase-memory-mcp echo "=== ClamAV: clean ==="