From 07309cca6ba01ad34183024d46a2e34282faf66d Mon Sep 17 00:00:00 2001
From: Marc Lasserre <marc.lasserre@gorym.fr>
Date: Sat, 8 Aug 2026 19:34:11 +0200
Subject: [PATCH] fix(ci): utilisation des conteneurs direct via socket

---
 .gitea/workflows/secops.yml | 14 +++++---------
 1 file changed, 5 insertions(+), 9 deletions(-)

diff --git a/.gitea/workflows/secops.yml b/.gitea/workflows/secops.yml
index 01f60d8..99c2774 100644
--- a/.gitea/workflows/secops.yml
+++ b/.gitea/workflows/secops.yml
@@ -13,34 +13,30 @@ jobs:
     steps:
       - name: System Check
         run: |
-          echo "🚀 Pipeline CI/CD opérationnel sur le VPS !"
+          echo "🚀 Pipeline CI/CD opérationnel !"
           uname -a
 
   gitleaks-scan:
-    name: Secret Detection (Gitleaks Open Source)
+    name: Secret Detection (Gitleaks)
     runs-on: ubuntu-latest
-    container:
-      image: zricethezav/gitleaks:v8.18.2
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
-      - name: Run Gitleaks Detect
+      - name: Run Gitleaks
         run: |
-          gitleaks detect --source=. --verbose --redact
+          docker run --rm -v "$PWD":/path:z zricethezav/gitleaks:v8.18.2 detect --source="/path" --verbose --redact
 
   trivy-iac-scan:
     name: IaC Security & Vulnerability Scan (Trivy)
     runs-on: ubuntu-latest
     needs: gitleaks-scan
-    container:
-      image: aquasec/trivy:0.49.1
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
 
       - name: Run Trivy Scan
         run: |
-          trivy config .
+          docker run --rm -v "$PWD":/path:z aquasec/trivy:0.49.1 config /path