ALTER TABLE attachments
  ADD COLUMN virus_scan_status TEXT NOT NULL DEFAULT 'skipped'
    CHECK (virus_scan_status IN ('clean', 'skipped', 'malicious'));