Marc Lasserre
af70194f71
fix(ci): add docker.io registry prefix for yamllint image
...
Explicitly set docker.io domain prefix for yamllint container image to prevent Podman short-name resolution failure.
2026-08-07 01:38:57 +02:00
Marc Lasserre
caf1a19432
sec(ci): add Yamllint and Hadolint stages to pipeline
...
DevSecOps Pipeline - V1 Infrastructure / Code & Config Linting (Yamllint & Hadolint) (push) Failing after 3s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Has been skipped
Details
DevSecOps Pipeline - V1 Infrastructure / IaC Security & Vulnerability Scan (Trivy) (push) Has been skipped
Details
Integrate linting for YAML and Dockerfiles alongside Gitleaks and Trivy to enforce full DevSecOps compliance.
2026-08-07 01:36:44 +02:00
Marc Lasserre
0257edd466
fix(ci): add docker.io domain prefix for trivy image
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 1s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Successful in 4s
Details
DevSecOps Pipeline - V1 Infrastructure / IaC Security & Vulnerability Scan (Trivy) (push) Successful in 11s
Details
Specify docker.io registry prefix and pin Trivy version to resolve Podman short-name resolution error.
2026-08-07 01:16:02 +02:00
Marc Lasserre
2ceda3bf2c
sec(ci): add Trivy IaC scanner to pipeline
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Successful in 4s
Details
DevSecOps Pipeline - V1 Infrastructure / IaC Security & Vulnerability Scan (Trivy) (push) Failing after 3s
Details
Integrate Aqua Security Trivy scanner to automatically check podman-compose configurations for security misconfigurations and CVEs.
2026-08-07 01:13:59 +02:00
Marc Lasserre
79fd93e7ce
fix(ci): add volume permissions flag for podman gitleaks scan
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Successful in 4s
Details
Add :z flag to Podman volume mount to resolve exit status 126 permission issues on SELinux/host runner.
2026-08-07 01:09:27 +02:00
Marc Lasserre
04540ce152
fix(ci): add docker.io registry prefix for podman
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 6s
Details
Explicitly specify docker.io registry domain for gitleaks image to resolve Podman short-name error.
2026-08-07 01:07:11 +02:00
Marc Lasserre
c4b8975659
fix(ci): use actions/checkout v4 on host
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 1s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 4s
Details
Use official checkout action to fetch repository before running Gitleaks in Podman.
2026-08-07 00:59:46 +02:00
Marc Lasserre
0ed6f139d2
fix(ci): run gitleaks container via podman on host
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 0s
Details
Execute Gitleaks inside Podman from the host runner to bypass Node.js PATH requirements in minimal containers.
2026-08-06 23:48:10 +02:00
Marc Lasserre
087aa6f8db
fix(ci): use free gitleaks docker image
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 11s
Details
Switch from gitleaks-action to zricethezav/gitleaks docker image to bypass commercial license requirements.
2026-08-06 23:45:33 +02:00
Marc Lasserre
5eacabb167
fix(ci): use official gitleaks action
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 32s
Details
Replace manual curl binary download with gitleaks/gitleaks-action to resolve CLI flag parsing issues.
2026-08-06 23:41:36 +02:00
Marc Lasserre
1330f04308
fix(ci): use ubuntu-latest container for gitleaks scan
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 39s
Details
Switch Gitleaks job to docker container execution to satisfy actions/checkout Node.js dependency.
2026-08-06 23:38:00 +02:00
Marc Lasserre
97df70a53f
fix(ci): replace checkout action with native git commands
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 0s
Details
Bypass Node.js requirement in host execution mode by using system git.
2026-08-06 23:20:20 +02:00
Marc Lasserre
fae7df9d30
sec(ci): add Gitleaks secret scanner to pipeline
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 11s
Details
Integrate Gitleaks step in Gitea Actions to automatically detect hardcoded secrets and credentials on every push. Aligns with ISO 27001 traceability and security-by-design requirements.
2026-08-06 23:00:11 +02:00
Marc Lasserre
c2e51ac70d
fix(ci): passage du runner en mode host
Test Runner VPS / health-check (push) Successful in 0s
Details
2026-08-06 09:35:34 +02:00
Marc Lasserre
28f0d18234
ci: ajout du premier workflow gitea actions
2026-08-06 09:26:22 +02:00
Marc Lasserre