diff --git a/.gitea/workflows/secops.yml b/.gitea/workflows/secops.yml index 99c2774..41127ea 100644 --- a/.gitea/workflows/secops.yml +++ b/.gitea/workflows/secops.yml @@ -13,7 +13,7 @@ jobs: steps: - name: System Check run: | - echo "🚀 Pipeline CI/CD opérationnel !" + echo "🚀 Pipeline CI/CD opérationnel sur le VPS !" uname -a gitleaks-scan: @@ -25,9 +25,11 @@ jobs: with: fetch-depth: 0 - - name: Run Gitleaks + - name: Download and Run Gitleaks run: | - docker run --rm -v "$PWD":/path:z zricethezav/gitleaks:v8.18.2 detect --source="/path" --verbose --redact + wget -q https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz + tar -xzf gitleaks_8.18.2_linux_x64.tar.gz gitleaks + ./gitleaks detect --source="." --verbose --redact trivy-iac-scan: name: IaC Security & Vulnerability Scan (Trivy) @@ -37,6 +39,8 @@ jobs: - name: Checkout Code uses: actions/checkout@v4 - - name: Run Trivy Scan + - name: Download and Run Trivy run: | - docker run --rm -v "$PWD":/path:z aquasec/trivy:0.49.1 config /path + wget -q https://github.com/aquasec/trivy/releases/download/v0.49.1/trivy_0.49.1_Linux-64bit.tar.gz + tar -xzf trivy_0.49.1_Linux-64bit.tar.gz trivy + ./trivy config .