diff --git a/.gitea/workflows/test-ci.yml b/.gitea/workflows/test-ci.yml index 1697a94..3d9136e 100644 --- a/.gitea/workflows/test-ci.yml +++ b/.gitea/workflows/test-ci.yml @@ -1,9 +1,10 @@ -name: Test Runner VPS +name: DevSecOps Pipeline - V1 Infrastructure on: [push] jobs: health-check: + name: System & Environment Check runs-on: host steps: - name: System Check @@ -11,3 +12,19 @@ jobs: echo "Pipeline CI/CD opérationnel sur le VPS RYM !" uname -a podman --version + + gitleaks-scan: + name: Secret Detection (Gitleaks) + runs-on: host + steps: + - name: Check Out Code + uses: actions/checkout@v3 + with: + fetch-depth: 0 + + - name: Run Gitleaks Scan + run: | + echo "🔍 Lancement du scan Gitleaks..." + curl -sSFL https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz | tar -xz gitleaks + ./gitleaks detect --source . -v + rm gitleaks