From 0ed6f139d235edf6718bd959c0b576171ae1be9f Mon Sep 17 00:00:00 2001
From: Marc Lasserre <marc.lasserre@gorym.fr>
Date: Thu, 6 Aug 2026 23:48:10 +0200
Subject: [PATCH] fix(ci): run gitleaks container via podman on host

Execute Gitleaks inside Podman from the host runner to bypass Node.js PATH requirements in minimal containers.
---
 .gitea/workflows/test-ci.yml | 19 +++++++++----------
 1 file changed, 9 insertions(+), 10 deletions(-)

diff --git a/.gitea/workflows/test-ci.yml b/.gitea/workflows/test-ci.yml
index 637b49b..62f7e43 100644
--- a/.gitea/workflows/test-ci.yml
+++ b/.gitea/workflows/test-ci.yml
@@ -15,15 +15,14 @@ jobs:
 
   gitleaks-scan:
     name: Secret Detection (Gitleaks)
-    runs-on: ubuntu-latest
-    container:
-      image: zricethezav/gitleaks:latest
+    runs-on: host
     steps:
-      - name: Check Out Code
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
-
-      - name: Run Gitleaks Scan
+      - name: Fetch Code
         run: |
-          gitleaks detect --source . -v
+          git config --global --add safe.directory "$PWD"
+          git fetch --all
+
+      - name: Run Gitleaks via Container Engine
+        run: |
+          echo "🔍 Lancement du scan Gitleaks..."
+          podman run --rm -v "$PWD":/path zricethezav/gitleaks:v8.18.2 detect --source="/path" -v