Modify scanning workflows to support FAC ClamAV Image

[asteel-gsa]

When this PR is approved and merged @asteel-gsa will run the workflow and generate a new package with the name of clamav:YYYYMMDD and will be accessible via docker pull ghcr.io/GSA-TTS/FAC/clamav:20230525 (TBD after run)

The Trivy Scan, matrix and docker pull need to be modified to support this new package, pull the package from the GSA-TTS/FAC packages, and scan that image instead of using the docker hub clamav-rest:latest

Follow on from #1064

[asteel-gsa]

@JeanMarie-TTS TTS clamav: https://github.com/GSA-TTS/clamav-rest/pkgs/container/clamav-rest%2Fclamav

A new image will be built every sunday with YYYYMMDD
docker pull ghcr.io/gsa-tts/clamav-rest/clamav:20230530

[JeanMarie-PM]

@asteel-gsa Can you provide more context? We already have clamav in GHCR - https://github.com/orgs/GSA-TTS/packages/container/package/fac%2Fclamav

[asteel-gsa]

@asteel-gsa Can you provide more context? We already have clamav in GHCR - https://github.com/orgs/GSA-TTS/packages/container/package/fac%2Fclamav

Reference Ticket: Here
Upstream PR that was not merged into clamav-rest: PR
Comment to build our own image, that supports the freshclam proxy information: Here
Repo: TTS ClamAV
Replicating Freshclam entrypoint that would have been the original PR into upstream: Here
TTS ClamAV Packages: Here
Modified Entrypoint with freshclam proxy information: entrypoint.sh

[JeanMarie-PM]

#1185 addresses using the image from ghcr/gsa-tts instead of the one from docker hub.

[mogul]

Can we close this one now?

[asteel-gsa]

Can we close this one now?

I believe so