{"ref":"capability:malware-scanning","page":"/capabilities/malware-scanning","json":"/capabilities/malware-scanning.json","generated":"2026-10-26","drafted_with_ai":true,"entity":{"id":"malware-scanning","name":"Malware scanning","domain":"security-and-compliance","ecosystems":["btp","cap"],"universal":true,"description":"Checking a file somebody uploaded before anyone else can download it — where the scan runs, what happens to the file meanwhile, and who is told when it fails.","short":"Checking an uploaded file before anyone can download it","core_coverage":{"state":"core-only","assessed_at":"2026-09-09","what_core_does":"The Malware Scanning service scans a file over a REST call with ClamAV behind it. In CAP the attachments plugin submits every upload to it and withholds the download until the scan is clean.","sources":[{"url":"https://github.com/SAP-samples/btp-service-metadata/blob/main/v1/developer/malware-scanner.json","title":"SAP Malware Scanning service — SAP btp-service-metadata v1","checked":"2026-09-09"},{"url":"https://github.com/cap-js/attachments/blob/main/README.md","title":"@cap-js/attachments README","checked":"2026-09-09"}]},"coverage_by_ecosystem":{"cap":{"state":"core-only","assessed_at":"2026-09-14","what_core_does":"The answer in CAP is the same BTP service: the [attachments plugin](artifact:cap-js-attachments) submits every upload to the [Malware Scanning service](artifact:btp-malware-scanning) over REST, with ClamAV behind it, and withholds the download until the scan comes back clean.","where_it_stops":"The service returns only a scan verdict; the plugin around it decides what happens next — retrying against the service's 30-concurrent-request limit, rescanning attachments older than three days, and marking an oversize file failed rather than resubmitting it.","sources":[{"url":"https://github.com/SAP-samples/btp-service-metadata/blob/main/v1/developer/malware-scanner.json","title":"SAP Malware Scanning service — SAP btp-service-metadata v1","checked":"2026-09-14"},{"url":"https://github.com/cap-js/attachments/blob/main/README.md","title":"@cap-js/attachments README","checked":"2026-09-14"}]}},"history":[{"date":"2026-09-14","field":"coverage_by_ecosystem.cap","from":null,"to":"core-only","reason":"Only [SAP Malware Scanning service](artifact:btp-malware-scanning) provides this capability, and its own ecosystem is btp, not cap — it serves CAP rather than being one of CAP's own providers. With no own CAP provider, CAP's map borrows the BTP reading rather than asserting a separate community answer."}],"drafted_with_ai":true},"sap_delivery":{"door":"btp","all":{"built_in":[],"documented_pattern":[],"announced":[],"packages":[{"ref":"artifact:btp-malware-scanning","name":"SAP Malware Scanning service","json":"/artifacts/btp-malware-scanning.json"}]},"by_flavor":{}},"edges":{"use_cases":[],"shared_tasks":[],"related_tasks":[],"options":[{"ref":"artifact:btp-malware-scanning","name":"SAP Malware Scanning service","json":"/artifacts/btp-malware-scanning.json","ecosystem":"btp","origin_ring":"sap-official"}],"samples":[],"explained_by":[{"ref":"content:cap-foundry-engineering-sap-cap-applications-from-business-intent-with-guardrail","name":"CAP Foundry: Engineering SAP CAP Applications from Business Intent with Guardrailed AI","json":"/content/cap-foundry-engineering-sap-cap-applications-from-business-intent-with-guardrail.json"}],"normative_context":[]}}