Add [malware scanning](https://cloud.google.com/architecture/automating-malware-scanning-for-documents-uploaded-to-cloud-storage) to photo uploads. UIC is a good template for this: https://github.com/uic-utah/uic-inventory/blob/main/.github/workflows/schedule.yml https://github.com/uic-utah/uic-inventory/blob/main/.github/workflows/workflow_dispatch.yml And terraform. Steve suggested that it would be nice to make the two workflows above into composite actions.