diff --git a/.gitea/workflows/secops.yml b/.gitea/workflows/secops.yml index 01f60d8..99c2774 100644 --- a/.gitea/workflows/secops.yml +++ b/.gitea/workflows/secops.yml @@ -13,34 +13,30 @@ jobs: steps: - name: System Check run: | - echo "🚀 Pipeline CI/CD opérationnel sur le VPS !" + echo "🚀 Pipeline CI/CD opérationnel !" uname -a gitleaks-scan: - name: Secret Detection (Gitleaks Open Source) + name: Secret Detection (Gitleaks) runs-on: ubuntu-latest - container: - image: zricethezav/gitleaks:v8.18.2 steps: - name: Checkout Code uses: actions/checkout@v4 with: fetch-depth: 0 - - name: Run Gitleaks Detect + - name: Run Gitleaks run: | - gitleaks detect --source=. --verbose --redact + docker run --rm -v "$PWD":/path:z zricethezav/gitleaks:v8.18.2 detect --source="/path" --verbose --redact trivy-iac-scan: name: IaC Security & Vulnerability Scan (Trivy) runs-on: ubuntu-latest needs: gitleaks-scan - container: - image: aquasec/trivy:0.49.1 steps: - name: Checkout Code uses: actions/checkout@v4 - name: Run Trivy Scan run: | - trivy config . + docker run --rm -v "$PWD":/path:z aquasec/trivy:0.49.1 config /path