handled assets in not scanned status

Author: Your Name

.talismanrc

@@ -1,11 +1,5 @@
 fileignoreconfig:
 
 - filename: pnpm-lock.yaml
-  checksum: 31e333d6769adbaae042c92ea0930fab168a0e06fc1bda406d49fd1042a7a9c7
-- filename: packages/contentstack-audit/src/audit-base-command.ts
-  checksum: 14275f241e4a194cfd1fb33d277df194011eba4458ccaab7e0d0bd3a1c9ccfe7
-- filename: packages/contentstack-audit/src/modules/entries.ts
-  checksum: b0fa5f7b390ef2d64bd4834a5b848780b902373e2c644833842b42c6b767d54e
-- filename: packages/contentstack-audit/test/unit/modules/entries.test.ts
-  checksum: ff448c79d436d5e8b141efcc76f19892bfe96039ea9a60fae4e995b5ccbc2960
+  checksum: 423213f918d2052ec37ad421d23057e159c8633d200bfa688d34bbcb73a19285
   version: '1.0'

packages/contentstack-audit/src/config/index.ts

@@ -55,6 +55,9 @@ const config = {
       name: 'assets',
       dirName: 'assets',
       fileName: 'assets.json',
+      // Asset scan statuses that must block import/reference; any other value (including
+      // 'not_scanned', 'clean', or the field being absent) is treated as safe.
+      blockingScanStatuses: ['pending', 'quarantined'],
     },
     environments: {
       name: 'environments',

packages/contentstack-audit/src/modules/assets.ts

@@ -187,7 +187,7 @@ export default class Assets {
         log.debug(`Processing asset: ${assetUid}`, this.config.auditContext);
 
         const scanStatus = this.assets[assetUid]?._asset_scan_status;
-        if (scanStatus && scanStatus !== 'clean') {
+        if (this.config.moduleConfig.assets.blockingScanStatuses.includes(scanStatus)) {
           log.debug(`Asset ${assetUid} has a non-clean scan status: ${scanStatus}`, this.config.auditContext);
           cliux.print($t(auditMsg.SCAN_ASSET_QUARANTINE_MSG, { uid: assetUid, status: scanStatus }), {
             color: 'yellow',

packages/contentstack-audit/src/modules/entries.ts

@@ -929,16 +929,17 @@ export default class Entries {
 
   /**
    * Returns true when the given asset uid should be treated as unusable — either it doesn't
-   * exist in the exported assets.json at all, or it exists but its scan status is present and
-   * not 'clean' (e.g. 'pending'/'quarantined'). Returns false (never flag) when asset metadata
+   * exist in the exported assets.json at all, or it exists but its scan status is one of
+   * config.moduleConfig.assets.blockingScanStatuses (e.g. 'pending'/'quarantined'). Any other
+   * status — including 'clean', 'not_scanned' (org has asset scanning disabled), or the field
+   * being absent — is not a blocking condition. Returns false (never flag) when asset metadata
    * wasn't available at all, since we can't validate what we don't have data for.
    */
   isAssetBad(uid?: string): boolean {
     if (!this.assetsDataAvailable || !uid) return false;
     const assetRecord = this.assetMetaData[uid];
     if (!assetRecord) return true;
-    const scanStatus = assetRecord._asset_scan_status;
-    return Boolean(scanStatus) && scanStatus !== 'clean';
+    return this.config.moduleConfig.assets.blockingScanStatuses.includes(assetRecord._asset_scan_status ?? '');
   }
 
   /**

packages/contentstack-audit/test/unit/mock/contents/assets/chunk1-assets.json

@@ -29,5 +29,13 @@
     "url": "https://images.contentstack.io/v3/assets/blt/blt-no-status-asset/no-status.png",
     "_version": 1,
     "publish_details": []
+  },
+  "blt-not-scanned-asset": {
+    "uid": "blt-not-scanned-asset",
+    "filename": "not-scanned.png",
+    "url": "https://images.contentstack.io/v3/assets/blt/blt-not-scanned-asset/not-scanned.png",
+    "_version": 1,
+    "_asset_scan_status": "not_scanned",
+    "publish_details": []
   }
 }

packages/contentstack-audit/test/unit/modules/assets.test.ts

@@ -48,6 +48,7 @@ describe('Assets module', () => {
         });
         expect(assetsInstance.missingScanStatusAssets).to.not.have.property('blt-clean-asset');
         expect(assetsInstance.missingScanStatusAssets).to.not.have.property('blt-no-status-asset');
+        expect(assetsInstance.missingScanStatusAssets).to.not.have.property('blt-not-scanned-asset');
       });
 
     fancy
@@ -69,6 +70,7 @@ describe('Assets module', () => {
         expect(writtenContent).to.not.have.property('blt-quarantined-asset');
         expect(writtenContent).to.have.property('blt-clean-asset');
         expect(writtenContent).to.have.property('blt-no-status-asset');
+        expect(writtenContent).to.have.property('blt-not-scanned-asset');
       });
   });
 });

packages/contentstack-audit/test/unit/modules/entries.test.ts

@@ -1557,6 +1557,10 @@ describe('Entries module', () => {
           uid: 'blt-pending-asset',
           _asset_scan_status: 'pending',
         });
+        expect(ctInstance.assetMetaData['blt-not-scanned-asset']).to.deep.include({
+          uid: 'blt-not-scanned-asset',
+          _asset_scan_status: 'not_scanned',
+        });
       });
 
     fancy
@@ -1611,6 +1615,17 @@ describe('Entries module', () => {
       expect(ctInstance.isAssetBad('blt-clean')).to.be.false;
       expect(ctInstance.isAssetBad('blt-legacy')).to.be.false;
     });
+
+    fancy
+      .stdout({ print: process.env.PRINT === 'true' || false })
+      .it('returns false when the asset scan status is not_scanned (org has asset scanning disabled)', () => {
+        const ctInstance = new Entries(constructorParam);
+        (ctInstance as any).assetsDataAvailable = true;
+        (ctInstance as any).assetMetaData = {
+          'blt-not-scanned': { uid: 'blt-not-scanned', _asset_scan_status: 'not_scanned' },
+        };
+        expect(ctInstance.isAssetBad('blt-not-scanned')).to.be.false;
+      });
   });
 
   describe('validateFileField method', () => {

packages/contentstack-export/src/config/index.ts

@@ -118,6 +118,9 @@ const config: DefaultConfig = {
       displayExecutionTime: false,
       enableDownloadStatus: false,
       includeVersionedAssets: false,
+      // Asset scan statuses that must block download; any other value (including 'not_scanned',
+      // 'clean', or the field being absent) is treated as safe to download.
+      blockingScanStatuses: ['pending', 'quarantined'],
     },
     content_types: {
       dirName: 'content_types',

packages/contentstack-export/src/export/modules/assets.ts

@@ -337,7 +337,7 @@ export default class ExportAssets extends BaseClass {
     listOfAssets = uniqBy(listOfAssets, 'url');
     log.debug(`Total unique assets to download: ${listOfAssets.length}`, this.exportConfig.context);
 
-    const isNotClean = (asset: any) => asset._asset_scan_status && asset._asset_scan_status !== 'clean';
+    const isNotClean = (asset: any) => this.assetConfig.blockingScanStatuses.includes(asset._asset_scan_status);
     const skippedAssets = filter(listOfAssets, isNotClean);
     listOfAssets = filter(listOfAssets, (asset: any) => !isNotClean(asset));
 

packages/contentstack-export/src/types/default-config.ts

@@ -102,6 +102,7 @@ export default interface DefaultConfig {
       displayExecutionTime: boolean;
       enableDownloadStatus: boolean;
       includeVersionedAssets: boolean;
+      blockingScanStatuses: string[];
       dependencies?: Modules[];
     };
     content_types: {