The Attachment Checker allows all attachments to be checked scanned with an external 3rd party anti-virus scanner when after they are uploaded.
This addresses the feature following issues:
Feature request raised in
...
JRA-8626 (Virus
...
scan attachments)
...
Performance issue listed in Anti-virus
...
with Jira application where Jira users experience slowness due to scanning of temporary files
...
When an attachment is uploaded, it is added , a request is sent to scan the uploaded file. The request is handled asynchronously into a queue for scanning, so that users need do not have to wait for the scanning to completed especially if the file is largecomplete, which may take some time especially for large files.
When a file is suspected If attachment is found to be infected, it will post a comment to the issue in the format "Filename" - "Alert Message". 
The user will receive a Jira email notification of the comment to follow up.
will be added in the issue to inform users for follow up.
| Info |
|---|
Any non-zero exit code by the virus scanner is treated as infected. |
...
Virus scanning can be configured at Attachment Checker Configuration → Virus Scanning
...
| Info |
|---|
Please refer to Additional steps for |
...
virus scanning set up for detailed instructions. |
Infection vs Error
Admins can configure the actions to be taken for infection vs error:
Delete file
Email Jira Sysadmin Group
This can be used to prevent attachments from being deleted due to other reasons such as permission or out of memory error.
However, if the virus scanner used is unknown, all errors will be treated as an infection as we are unable to differentiate them.
| Info |
|---|
Let us know about your virus scanner via our Service Desk if virus scanner is unknown or incorrect virus scanner is detected. |
When an infection or error occurs:
A comment will always be added to the issue.
An email will be sent to the Jira Sysadmin Group if configured.
The file will be deleted if configured.