Marc Lasserre
e74f92c265
Merge pull request 'fix(ci): TCP 2375 inside pod' ( #8 ) from dev/m7s into main
...
Build & Publish DevSecOps Runner / Build & Publish Runner Image to Giteastry (push) Failing after 9s
Details
Reviewed-on: #8
2026-08-26 19:08:39 +00:00
Marc Lasserre
f6078c3f10
fix(ci): TCP 2375 inside pod
2026-08-26 21:07:48 +02:00
Marc Lasserre
decc0ab5f8
Merge pull request 'fix(ci): DOCKER_HOST TCP > +' ( #7 ) from dev/m7s into main
...
Build & Publish DevSecOps Runner / Build & Publish Runner Image to Giteastry (push) Failing after 8s
Details
Reviewed-on: #7
2026-08-26 19:05:07 +00:00
Marc Lasserre
f10de44f29
fix(ci): DOCKER_HOST TCP > +
2026-08-26 21:04:24 +02:00
Marc Lasserre
e27ee99cb5
Merge pull request 'fix(ci) point container registry | gorym.net' ( #6 ) from dev/m7s into main
...
Build & Publish DevSecOps Runner / Build & Publish Runner Image to Giteastry (push) Failing after 8s
Details
Reviewed-on: #6
2026-08-26 19:01:51 +00:00
Marc Lasserre
202b69feed
fix(ci) point container registry | gorym.net
2026-08-26 21:00:07 +02:00
Marc Lasserre
e3463dc1fe
Merge pull request 'fix(ci): pass add-host 2 docker build for TLS validatiion' ( #5 ) from dev/m7s into main
...
Build & Publish DevSecOps Runner / Build & Publish Runner Image to Giteastry (push) Failing after 47s
Details
Reviewed-on: #5
2026-08-26 17:45:56 +00:00
Marc Lasserre
ae18eba3d4
fix(ci): pass add-host 2 docker build for TLS validatiion
2026-08-26 19:43:48 +02:00
Marc Lasserre
6edb515c6c
Merge pull request 'fix(cicd): add k3s arguents 4 runner' ( #4 ) from dev/m7s into main
...
Build & Push DevSecOps Runner / Build & Publish Runner Image to Giteastry (push) Failing after 46s
Details
Reviewed-on: #4
2026-08-26 17:31:18 +00:00
Marc Lasserre
619e4d27c5
fix(cicd): add k3s arguents 4 runner
2026-08-26 19:30:15 +02:00
Marc Lasserre
40d44760df
Merge pull request 'ci(giteastry): passage au build hermétique dind et image giteastry' ( #3 ) from dev/m7s into main
...
Build & Push DevSecOps Runner / Build & Publish Runner Image to Giteastry (push) Failing after 46s
Details
Reviewed-on: #3
2026-08-26 11:21:02 +00:00
Marc Lasserre
f3277b5407
ci(giteastry): passage au build hermétique dind et image giteastry
2026-08-26 13:19:12 +02:00
Marc Lasserre
b5bd3edf76
Merge pull request 'docs(iso) ajout du socle de gouvernance ISO 27001 & runner devSecops' ( #2 ) from dev/m7s into main
...
Build & Push DevSecOps Runner / Build & Publish Runner Image to Giteastry (push) Waiting to run
Details
Reviewed-on: #2
2026-08-26 10:57:22 +00:00
Marc Lasserre
5abfa91145
docs(iso) ajout du socle de gouvernance ISO 27001 & runner devSecops
2026-08-26 12:50:42 +02:00
Marc Lasserre
0257edd466
fix(ci): add docker.io domain prefix for trivy image
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 1s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Successful in 4s
Details
DevSecOps Pipeline - V1 Infrastructure / IaC Security & Vulnerability Scan (Trivy) (push) Successful in 11s
Details
Specify docker.io registry prefix and pin Trivy version to resolve Podman short-name resolution error.
2026-08-07 01:16:02 +02:00
Marc Lasserre
2ceda3bf2c
sec(ci): add Trivy IaC scanner to pipeline
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Successful in 4s
Details
DevSecOps Pipeline - V1 Infrastructure / IaC Security & Vulnerability Scan (Trivy) (push) Failing after 3s
Details
Integrate Aqua Security Trivy scanner to automatically check podman-compose configurations for security misconfigurations and CVEs.
2026-08-07 01:13:59 +02:00
Marc Lasserre
79fd93e7ce
fix(ci): add volume permissions flag for podman gitleaks scan
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Successful in 4s
Details
Add :z flag to Podman volume mount to resolve exit status 126 permission issues on SELinux/host runner.
2026-08-07 01:09:27 +02:00
Marc Lasserre
04540ce152
fix(ci): add docker.io registry prefix for podman
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 6s
Details
Explicitly specify docker.io registry domain for gitleaks image to resolve Podman short-name error.
2026-08-07 01:07:11 +02:00
Marc Lasserre
c4b8975659
fix(ci): use actions/checkout v4 on host
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 1s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 4s
Details
Use official checkout action to fetch repository before running Gitleaks in Podman.
2026-08-07 00:59:46 +02:00
Marc Lasserre
0ed6f139d2
fix(ci): run gitleaks container via podman on host
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 0s
Details
Execute Gitleaks inside Podman from the host runner to bypass Node.js PATH requirements in minimal containers.
2026-08-06 23:48:10 +02:00
Marc Lasserre
087aa6f8db
fix(ci): use free gitleaks docker image
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 11s
Details
Switch from gitleaks-action to zricethezav/gitleaks docker image to bypass commercial license requirements.
2026-08-06 23:45:33 +02:00
Marc Lasserre
5eacabb167
fix(ci): use official gitleaks action
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 32s
Details
Replace manual curl binary download with gitleaks/gitleaks-action to resolve CLI flag parsing issues.
2026-08-06 23:41:36 +02:00
Marc Lasserre
1330f04308
fix(ci): use ubuntu-latest container for gitleaks scan
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 39s
Details
Switch Gitleaks job to docker container execution to satisfy actions/checkout Node.js dependency.
2026-08-06 23:38:00 +02:00
Marc Lasserre
97df70a53f
fix(ci): replace checkout action with native git commands
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 0s
Details
Bypass Node.js requirement in host execution mode by using system git.
2026-08-06 23:20:20 +02:00
Marc Lasserre
fae7df9d30
sec(ci): add Gitleaks secret scanner to pipeline
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 11s
Details
Integrate Gitleaks step in Gitea Actions to automatically detect hardcoded secrets and credentials on every push. Aligns with ISO 27001 traceability and security-by-design requirements.
2026-08-06 23:00:11 +02:00
Marc Lasserre
c2e51ac70d
fix(ci): passage du runner en mode host
Test Runner VPS / health-check (push) Successful in 0s
Details
2026-08-06 09:35:34 +02:00
Marc Lasserre
28f0d18234
ci: ajout du premier workflow gitea actions
2026-08-06 09:26:22 +02:00
Marc Lasserre
d373483eb9
fix(infra): alignement utf8 postgres
2026-08-02 21:31:02 +02:00
Marc Lasserre
068a68a6ef
fix: ajout du registre complet docker.io et lien db
2026-08-02 21:16:40 +02:00
Marc Lasserre
6bf673c836
fix: configuration host passbolt_db
2026-08-02 21:05:05 +02:00
Marc Lasserre
97154afdfa
fix: utilisation de postgres alpine et stabilisation stack
2026-08-02 20:22:30 +02:00
Marc Lasserre
ffbbda2d8e
fix: passage en network_mode host pour bypasser le bridge Podman
2026-07-24 02:32:11 +02:00
Marc Lasserre
72f3538481
fix: IP explicite 10.88.0.1 dans extra_hosts pour Podman 4.3
2026-07-24 02:28:49 +02:00
Marc Lasserre
1ebfa3036e
fix: routage BDD via host-gateway pour contourner le DNS Podman
2026-07-24 02:25:56 +02:00
Marc Lasserre
41639fef2d
fix(passbolt): simplification podman-compose pour compatibilité v1.0.3
2026-07-24 02:20:55 +02:00
Marc Lasserre
4450fce8ea
fix(passbolt): explicit bridge network with aliases for Podman DNS
2026-07-24 02:15:42 +02:00
Marc Lasserre
2c3f012f4e
fix(passbolt): add link DNS 4 Podman
2026-07-24 02:02:15 +02:00
Marc Lasserre
0a499bc348
fix(passbolt): add PostGresql driver and Podman-compose port
2026-07-24 01:57:26 +02:00
Marc Lasserre
6f748968ef
docs: simple README on project
2026-07-24 01:23:36 +02:00
Marc Lasserre
531679596e
feat(CaC): add podman-compose 4 PassBolt
2026-07-24 01:17:13 +02:00
Marc Lasserre
b199cf6de0
Initial commit
2026-07-23 21:58:23 +00:00
Marc Lasserre