Marc Lasserre
b5bd3edf76
Merge pull request 'docs(iso) ajout du socle de gouvernance ISO 27001 & runner devSecops' ( #2 ) from dev/m7s into main
...
Build & Push DevSecOps Runner / Build & Publish Runner Image to Giteastry (push) Waiting to run
Details
Reviewed-on: #2
2026-08-26 10:57:22 +00:00
Marc Lasserre
5abfa91145
docs(iso) ajout du socle de gouvernance ISO 27001 & runner devSecops
2026-08-26 12:50:42 +02:00
Marc Lasserre
0257edd466
fix(ci): add docker.io domain prefix for trivy image
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 1s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Successful in 4s
Details
DevSecOps Pipeline - V1 Infrastructure / IaC Security & Vulnerability Scan (Trivy) (push) Successful in 11s
Details
Specify docker.io registry prefix and pin Trivy version to resolve Podman short-name resolution error.
2026-08-07 01:16:02 +02:00
Marc Lasserre
2ceda3bf2c
sec(ci): add Trivy IaC scanner to pipeline
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Successful in 4s
Details
DevSecOps Pipeline - V1 Infrastructure / IaC Security & Vulnerability Scan (Trivy) (push) Failing after 3s
Details
Integrate Aqua Security Trivy scanner to automatically check podman-compose configurations for security misconfigurations and CVEs.
2026-08-07 01:13:59 +02:00
Marc Lasserre
79fd93e7ce
fix(ci): add volume permissions flag for podman gitleaks scan
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Successful in 4s
Details
Add :z flag to Podman volume mount to resolve exit status 126 permission issues on SELinux/host runner.
2026-08-07 01:09:27 +02:00
Marc Lasserre
04540ce152
fix(ci): add docker.io registry prefix for podman
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 6s
Details
Explicitly specify docker.io registry domain for gitleaks image to resolve Podman short-name error.
2026-08-07 01:07:11 +02:00
Marc Lasserre
c4b8975659
fix(ci): use actions/checkout v4 on host
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 1s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 4s
Details
Use official checkout action to fetch repository before running Gitleaks in Podman.
2026-08-07 00:59:46 +02:00
Marc Lasserre
0ed6f139d2
fix(ci): run gitleaks container via podman on host
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 0s
Details
Execute Gitleaks inside Podman from the host runner to bypass Node.js PATH requirements in minimal containers.
2026-08-06 23:48:10 +02:00
Marc Lasserre
087aa6f8db
fix(ci): use free gitleaks docker image
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 11s
Details
Switch from gitleaks-action to zricethezav/gitleaks docker image to bypass commercial license requirements.
2026-08-06 23:45:33 +02:00
Marc Lasserre
5eacabb167
fix(ci): use official gitleaks action
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 32s
Details
Replace manual curl binary download with gitleaks/gitleaks-action to resolve CLI flag parsing issues.
2026-08-06 23:41:36 +02:00
Marc Lasserre
1330f04308
fix(ci): use ubuntu-latest container for gitleaks scan
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 39s
Details
Switch Gitleaks job to docker container execution to satisfy actions/checkout Node.js dependency.
2026-08-06 23:38:00 +02:00
Marc Lasserre
97df70a53f
fix(ci): replace checkout action with native git commands
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 0s
Details
Bypass Node.js requirement in host execution mode by using system git.
2026-08-06 23:20:20 +02:00
Marc Lasserre
fae7df9d30
sec(ci): add Gitleaks secret scanner to pipeline
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 11s
Details
Integrate Gitleaks step in Gitea Actions to automatically detect hardcoded secrets and credentials on every push. Aligns with ISO 27001 traceability and security-by-design requirements.
2026-08-06 23:00:11 +02:00
Marc Lasserre
c2e51ac70d
fix(ci): passage du runner en mode host
Test Runner VPS / health-check (push) Successful in 0s
Details
2026-08-06 09:35:34 +02:00
Marc Lasserre
28f0d18234
ci: ajout du premier workflow gitea actions
2026-08-06 09:26:22 +02:00
Marc Lasserre
d373483eb9
fix(infra): alignement utf8 postgres
2026-08-02 21:31:02 +02:00
Marc Lasserre
068a68a6ef
fix: ajout du registre complet docker.io et lien db
2026-08-02 21:16:40 +02:00
Marc Lasserre
6bf673c836
fix: configuration host passbolt_db
2026-08-02 21:05:05 +02:00
Marc Lasserre
97154afdfa
fix: utilisation de postgres alpine et stabilisation stack
2026-08-02 20:22:30 +02:00
Marc Lasserre
ffbbda2d8e
fix: passage en network_mode host pour bypasser le bridge Podman
2026-07-24 02:32:11 +02:00
Marc Lasserre
72f3538481
fix: IP explicite 10.88.0.1 dans extra_hosts pour Podman 4.3
2026-07-24 02:28:49 +02:00
Marc Lasserre
1ebfa3036e
fix: routage BDD via host-gateway pour contourner le DNS Podman
2026-07-24 02:25:56 +02:00
Marc Lasserre
41639fef2d
fix(passbolt): simplification podman-compose pour compatibilité v1.0.3
2026-07-24 02:20:55 +02:00
Marc Lasserre
4450fce8ea
fix(passbolt): explicit bridge network with aliases for Podman DNS
2026-07-24 02:15:42 +02:00
Marc Lasserre
2c3f012f4e
fix(passbolt): add link DNS 4 Podman
2026-07-24 02:02:15 +02:00
Marc Lasserre
0a499bc348
fix(passbolt): add PostGresql driver and Podman-compose port
2026-07-24 01:57:26 +02:00
Marc Lasserre
6f748968ef
docs: simple README on project
2026-07-24 01:23:36 +02:00
Marc Lasserre
531679596e
feat(CaC): add podman-compose 4 PassBolt
2026-07-24 01:17:13 +02:00
Marc Lasserre
b199cf6de0
Initial commit
2026-07-23 21:58:23 +00:00
Marc Lasserre