595129 - Automate virus detection

Status: RESOLVED FIXED

(Mozilla Messaging Graveyard :: Release Engineering, enhancement)

Description

[Ludovic Hirlimann [:Usul]]

Today I verify that our builds are ok wrt viruses manually. I download a windows exe and submit it to virustotal.com and wait a few minutes to see the results. 
If something is detected I usually contact the software vendor so he can white list the binaries before release.

For a few weeks now I noticed that virus total proposes ways to make that automatic. If you have a look at http://www.virustotal.com/advanced.html, they offer two methods :

  1) send an email - get an answer by email
  2) do the same using an http api

Would it be possible to add a step when we are pushing the builds to beta, to automate this virus checking process ? I'd prefer Method one, because the email can be bounced to a group and people doing the push don't need to stay and see what the script is going to say about pass or fail for the virus.

Comment 1

[John Hopkins (:jhopkins)]

See proposed script: http://hg.mozilla.org/users/john.hopkins_mozillamessaging.com/misc/file/abbe2cdaca83/virus-scanning/build-scanner.pl

Comment 2

[Ludovic Hirlimann [:Usul]]

(In reply to comment #1)
> See proposed script:
> http://hg.mozilla.org/users/john.hopkins_mozillamessaging.com/misc/file/abbe2cdaca83/virus-scanning/build-scanner.pl

Should do wi32 only at the moment. As documented in bug 617335 I wasn't able to find anything alike for other oses ( we could run some stuff locally ( but that's being done by moco IT on the mirror sites).

I think we should try this on our next Alpha/beta ie 3.3 !

Comment 3

[John Hopkins (:jhopkins)]

Usul - please reopen this bug if you have any issues with the script.  If it's not what you wanted, then please detail another workflow.  Thanks!