.gitea/workflows/secops.yml

@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: System Check
         run: |
-          echo "🚀 Pipeline CI/CD opérationnel !"
+          echo "🚀 Pipeline CI/CD opérationnel sur le VPS !"
           uname -a
 
   gitleaks-scan:
@@ -25,9 +25,11 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Run Gitleaks
+      - name: Download and Run Gitleaks
         run: |
-          docker run --rm -v "$PWD":/path:z zricethezav/gitleaks:v8.18.2 detect --source="/path" --verbose --redact
+          wget -q https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz
+          tar -xzf gitleaks_8.18.2_linux_x64.tar.gz gitleaks
+          ./gitleaks detect --source="." --verbose --redact
 
   trivy-iac-scan:
     name: IaC Security & Vulnerability Scan (Trivy)
@@ -37,6 +39,8 @@ jobs:
       - name: Checkout Code
         uses: actions/checkout@v4
 
-      - name: Run Trivy Scan
+      - name: Download and Run Trivy
         run: |
-          docker run --rm -v "$PWD":/path:z aquasec/trivy:0.49.1 config /path
+          wget -q https://github.com/aquasec/trivy/releases/download/v0.49.1/trivy_0.49.1_Linux-64bit.tar.gz
+          tar -xzf trivy_0.49.1_Linux-64bit.tar.gz trivy
+          ./trivy config .