There is NO clamav in the component/s list.....so I just picked one close to the top, sorry!

When the "Scan artifacts for viruses" option is checked, and an exclusion is entered in the "Exclude files" field, it does not honor those exclusions. Entering the example in the help text ".git/**/*" results in the .git and all subdirectories being scanned for viruses, and failing as a result of broken pipes, which results in our project being set to unstable as a result of the ClamAV scan.