Ensure ClamAV workflow validates EICAR detection

Author: riatzukiza

.github/workflows/clam-av.yml

@@ -43,9 +43,15 @@ jobs:
       # Scan extracted bundle so counts reflect actual files
       - name: Verify ClamAV detects EICAR signature
         run: |
-          set -e
+          set -euo pipefail
           printf 'X5O!P%%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*' > eicar.com
-          clamscan eicar.com | tee eicar.log
+          status=0
+          clamscan eicar.com > eicar.log || status=$?
+          cat eicar.log
+          if [ "$status" -ne 1 ]; then
+            echo "ClamAV failed to report the EICAR signature" >&2
+            exit 1
+          fi
           grep -q 'eicar.com: Eicar-Test-Signature FOUND' eicar.log
           grep -q 'Infected files: 1' eicar.log
           rm -f eicar.com eicar.log