32 lines
840 B
YAML
32 lines
840 B
YAML
name: DevSecOps Pipeline - V1 Infrastructure
|
|
|
|
on: [push]
|
|
|
|
jobs:
|
|
health-check:
|
|
name: System & Environment Check
|
|
runs-on: host
|
|
steps:
|
|
- name: System Check
|
|
run: |
|
|
echo "Pipeline CI/CD opérationnel sur le VPS RYM !"
|
|
uname -a
|
|
podman --version
|
|
|
|
gitleaks-scan:
|
|
name: Secret Detection (Gitleaks)
|
|
runs-on: host
|
|
steps:
|
|
- name: Fetch Code
|
|
run: |
|
|
git config --global --add safe.directory "$PWD"
|
|
git fetch --all
|
|
git checkout $GITEA_SHA
|
|
|
|
- name: Run Gitleaks Scan
|
|
run: |
|
|
echo "🔍 Lancement du scan Gitleaks..."
|
|
curl -sSFL https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz | tar -xz gitleaks
|
|
./gitleaks detect --source . -v
|
|
rm gitleaks
|