post: commit 5f62eb5 in bojemoi

content/posts/commits/2026-07-22-commit-5f62eb5.md

@@ -0,0 +1,43 @@
+---
+title: "[bojemoi] security(network): isoler postgres du réseau pentest pour les workers"
+date: 2026-07-22T17:14:57+02:00
+draft: false
+tags: ["commit", "bojemoi", "main"]
+categories: ["Git Activity"]
+summary: "Commit 5f62eb5 par grafana-watcher dans bojemoi"
+author: "grafana-watcher"
+---
+
+## Commit `5f62eb5`
+
+| | |
+|---|---|
+| **Repository** | bojemoi |
+| **Branch** | `main` |
+| **Author** | grafana-watcher |
+| **Hash** | `5f62eb522c088d2c5a78a89725d6c06a08be5bc4` |
+
+
+### Description
+
+Ajoute le réseau pentest au service postgres afin que les workers
+borodino (ak47, bm12, uzi, zap, nuclei, sliver, masscan) puissent
+y accéder sans passer par backend.
+
+Contexte: suite à l'incident OpenAI/HuggingFace (2026-07-22), réduction
+de la blast radius en cas de compromission d'un worker via input hostile.
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+M	stack/01-service-hl.yml
+```
+
+### Diff Summary
+
+```
+ stack/01-service-hl.yml | 7 ++++++-
+ 1 file changed, 6 insertions(+), 1 deletion(-)
+```