Marc Lasserre
f10de44f29
fix(ci): DOCKER_HOST TCP > +
2026-08-26 21:04:24 +02:00
Marc Lasserre
202b69feed
fix(ci) point container registry | gorym.net
2026-08-26 21:00:07 +02:00
Marc Lasserre
ae18eba3d4
fix(ci): pass add-host 2 docker build for TLS validatiion
2026-08-26 19:43:48 +02:00
Marc Lasserre
619e4d27c5
fix(cicd): add k3s arguents 4 runner
2026-08-26 19:30:15 +02:00
Marc Lasserre
f3277b5407
ci(giteastry): passage au build hermétique dind et image giteastry
2026-08-26 13:19:12 +02:00
Marc Lasserre
5abfa91145
docs(iso) ajout du socle de gouvernance ISO 27001 & runner devSecops
2026-08-26 12:50:42 +02:00
Marc Lasserre
0257edd466
fix(ci): add docker.io domain prefix for trivy image
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 1s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Successful in 4s
Details
DevSecOps Pipeline - V1 Infrastructure / IaC Security & Vulnerability Scan (Trivy) (push) Successful in 11s
Details
Specify docker.io registry prefix and pin Trivy version to resolve Podman short-name resolution error.
2026-08-07 01:16:02 +02:00
Marc Lasserre
2ceda3bf2c
sec(ci): add Trivy IaC scanner to pipeline
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Successful in 4s
Details
DevSecOps Pipeline - V1 Infrastructure / IaC Security & Vulnerability Scan (Trivy) (push) Failing after 3s
Details
Integrate Aqua Security Trivy scanner to automatically check podman-compose configurations for security misconfigurations and CVEs.
2026-08-07 01:13:59 +02:00
Marc Lasserre
79fd93e7ce
fix(ci): add volume permissions flag for podman gitleaks scan
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Successful in 4s
Details
Add :z flag to Podman volume mount to resolve exit status 126 permission issues on SELinux/host runner.
2026-08-07 01:09:27 +02:00
Marc Lasserre
04540ce152
fix(ci): add docker.io registry prefix for podman
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 6s
Details
Explicitly specify docker.io registry domain for gitleaks image to resolve Podman short-name error.
2026-08-07 01:07:11 +02:00
Marc Lasserre
c4b8975659
fix(ci): use actions/checkout v4 on host
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 1s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 4s
Details
Use official checkout action to fetch repository before running Gitleaks in Podman.
2026-08-07 00:59:46 +02:00
Marc Lasserre
0ed6f139d2
fix(ci): run gitleaks container via podman on host
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 0s
Details
Execute Gitleaks inside Podman from the host runner to bypass Node.js PATH requirements in minimal containers.
2026-08-06 23:48:10 +02:00
Marc Lasserre
087aa6f8db
fix(ci): use free gitleaks docker image
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 11s
Details
Switch from gitleaks-action to zricethezav/gitleaks docker image to bypass commercial license requirements.
2026-08-06 23:45:33 +02:00
Marc Lasserre
5eacabb167
fix(ci): use official gitleaks action
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 32s
Details
Replace manual curl binary download with gitleaks/gitleaks-action to resolve CLI flag parsing issues.
2026-08-06 23:41:36 +02:00
Marc Lasserre
1330f04308
fix(ci): use ubuntu-latest container for gitleaks scan
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 39s
Details
Switch Gitleaks job to docker container execution to satisfy actions/checkout Node.js dependency.
2026-08-06 23:38:00 +02:00
Marc Lasserre
97df70a53f
fix(ci): replace checkout action with native git commands
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 0s
Details
Bypass Node.js requirement in host execution mode by using system git.
2026-08-06 23:20:20 +02:00
Marc Lasserre
fae7df9d30
sec(ci): add Gitleaks secret scanner to pipeline
...
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s
Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 11s
Details
Integrate Gitleaks step in Gitea Actions to automatically detect hardcoded secrets and credentials on every push. Aligns with ISO 27001 traceability and security-by-design requirements.
2026-08-06 23:00:11 +02:00
Marc Lasserre
c2e51ac70d
fix(ci): passage du runner en mode host
Test Runner VPS / health-check (push) Successful in 0s
Details
2026-08-06 09:35:34 +02:00
Marc Lasserre
28f0d18234
ci: ajout du premier workflow gitea actions
2026-08-06 09:26:22 +02:00
Marc Lasserre