RYM
/
Rym_Infrastructure
1
0
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity

sec(ci): add Trivy IaC scanner to pipeline
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Successful in 4s Details
DevSecOps Pipeline - V1 Infrastructure / IaC Security & Vulnerability Scan (Trivy) (push) Failing after 3s Details 

Integrate Aqua Security Trivy scanner to automatically check podman-compose configurations for security misconfigurations and CVEs.
This commit is contained in:
Marc Lasserre 2026-08-07 01:13:59 +02:00
parent 79fd93e7ce
commit 2ceda3bf2c
Signed by: M7s
GPG Key ID: F74837410959661B
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
.gitea/workflows/test-ci.yml
View File

@ -24,3 +24,16 @@ jobs:
run: |
echo "🔍 Lancement du scan Gitleaks..."
podman run --rm -v "$PWD":/path:z docker.io/zricethezav/gitleaks:v8.18.2 detect --source="/path" -v
trivy-iac-scan:
name: IaC Security & Vulnerability Scan (Trivy)
runs-on: host
needs: gitleaks-scan
steps:
- name: Checkout Code
uses: actions/checkout@v4
- name: Run Trivy IaC Scan
run: |
echo "🛡️ Analyse des fichiers d'infrastructure et des vulnérabilités..."
podman run --rm -v "$PWD":/path:z aquasec/trivy:latest config /path