Skip to main content
Version: v0.20

Container Image

The maintained image is published on Docker Hub.

Pull an image​

docker pull marcocesarato/php-antimalware-scanner:latest

Use latest for an interactive scan of the current stable release. Pin a complete release tag such as 0.19.1 for automated jobs.

Run a report-only scan​

Mount the directory to scan as read only. Use a separate output directory for reports so the scanner cannot change the target files:

docker run --rm \
  --volume "/var/www/example:/scan:ro" \
  --volume "$PWD/amwscan-output:/output" \
  marcocesarato/php-antimalware-scanner:latest /scan \
  --lite --report-only --report-format=html \
  --path-report=/output/report.html \
  --disable-checksum --disable-definitions-update

The command writes report.html to amwscan-output. Open it in a browser to review the findings.

Build from source​

Build the included image when testing a source checkout:

docker build --tag amwscan .

Replace the Docker Hub image name in the scan command with amwscan to use the local build.

For CI integrations, see GitHub Actions, Jenkins, or GitLab CI.