RYM
/
Rym_Horizon
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): execution directe des binaires gitleaks et trivy
DevSecOps Pipeline - Universal Quality Gate / System & Environment Check (push) Successful in 6s Details
DevSecOps Pipeline - Universal Quality Gate / Secret Detection (Gitleaks) (push) Successful in 28s Details
DevSecOps Pipeline - Universal Quality Gate / System & Environment Check (pull_request) Successful in 5s Details
DevSecOps Pipeline - Universal Quality Gate / IaC Security & Vulnerability Scan (Trivy) (push) Failing after 21s Details
DevSecOps Pipeline - Universal Quality Gate / Secret Detection (Gitleaks) (pull_request) Successful in 26s Details
DevSecOps Pipeline - Universal Quality Gate / IaC Security & Vulnerability Scan (Trivy) (pull_request) Failing after 20s Details

This commit is contained in:
Marc Lasserre 2026-08-08 19:54:55 +02:00
parent 07309cca6b
commit 55fc15461c
Signed by: M7s
GPG Key ID: F74837410959661B
1 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
.gitea/workflows/secops.yml
View File

@ -13,7 +13,7 @@ jobs:
steps: steps:
- name: System Check - name: System Check
run: | run: |
echo "🚀 Pipeline CI/CD opérationnel !" echo "🚀 Pipeline CI/CD opérationnel sur le VPS !"
uname -a uname -a
gitleaks-scan: gitleaks-scan:
@ -25,9 +25,11 @@ jobs:
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Run Gitleaks - name: Download and Run Gitleaks
run: | run: |
docker run --rm -v "$PWD":/path:z zricethezav/gitleaks:v8.18.2 detect --source="/path" --verbose --redact wget -q https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz
tar -xzf gitleaks_8.18.2_linux_x64.tar.gz gitleaks
./gitleaks detect --source="." --verbose --redact
trivy-iac-scan: trivy-iac-scan:
name: IaC Security & Vulnerability Scan (Trivy) name: IaC Security & Vulnerability Scan (Trivy)
@ -37,6 +39,8 @@ jobs:
- name: Checkout Code - name: Checkout Code
uses: actions/checkout@v4 uses: actions/checkout@v4
- name: Run Trivy Scan - name: Download and Run Trivy
run: | run: |
docker run --rm -v "$PWD":/path:z aquasec/trivy:0.49.1 config /path wget -q https://github.com/aquasec/trivy/releases/download/v0.49.1/trivy_0.49.1_Linux-64bit.tar.gz
tar -xzf trivy_0.49.1_Linux-64bit.tar.gz trivy
./trivy config .