fix(ci): use actions/checkout v4 on host
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 1s Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 4s Details

Use official checkout action to fetch repository before running Gitleaks in Podman.
This commit is contained in:
Marc Lasserre 2026-08-07 00:59:46 +02:00
parent 0ed6f139d2
commit c4b8975659
Signed by: M7s
GPG Key ID: F74837410959661B
1 changed files with 4 additions and 5 deletions

View File

@ -17,12 +17,11 @@ jobs:
name: Secret Detection (Gitleaks)
runs-on: host
steps:
- name: Fetch Code
run: |
git config --global --add safe.directory "$PWD"
git fetch --all
- name: Checkout Code
uses: actions/checkout@v4
- name: Run Gitleaks via Container Engine
- name: Run Gitleaks via Podman
run: |
echo "🔍 Lancement du scan Gitleaks..."
podman run --rm -v "$PWD":/path zricethezav/gitleaks:v8.18.2 detect --source="/path" -v