- Both stages on alpine:3.23 (was python:3-alpine + alpine:latest).
Major.minor pin gives security patches without breaking on rebase.
- fangfrisch installed in /opt/fangfrisch venv (PEP 668 blocks
system pip on modern Alpine).
- Drop deprecated MAINTAINER instruction in favour of LABEL.
- test_smoke.sh: image present + version + sig count + EICAR.
Validated end-to-end on amd64 Linux: ClamAV 1.4.4, 3.85M sigs.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
tobias