44 lines
1.0 KiB
Markdown
44 lines
1.0 KiB
Markdown
---
|
|
title: "[bojemoi] security(network): isoler postgres du réseau pentest pour les workers"
|
|
date: 2026-07-22T17:14:57+02:00
|
|
draft: false
|
|
tags: ["commit", "bojemoi", "main"]
|
|
categories: ["Git Activity"]
|
|
summary: "Commit 5f62eb5 par grafana-watcher dans bojemoi"
|
|
author: "grafana-watcher"
|
|
---
|
|
|
|
## Commit `5f62eb5`
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Repository** | bojemoi |
|
|
| **Branch** | `main` |
|
|
| **Author** | grafana-watcher |
|
|
| **Hash** | `5f62eb522c088d2c5a78a89725d6c06a08be5bc4` |
|
|
|
|
|
|
### Description
|
|
|
|
Ajoute le réseau pentest au service postgres afin que les workers
|
|
borodino (ak47, bm12, uzi, zap, nuclei, sliver, masscan) puissent
|
|
y accéder sans passer par backend.
|
|
|
|
Contexte: suite à l'incident OpenAI/HuggingFace (2026-07-22), réduction
|
|
de la blast radius en cas de compromission d'un worker via input hostile.
|
|
|
|
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
|
|
### Files Changed
|
|
|
|
```
|
|
M stack/01-service-hl.yml
|
|
```
|
|
|
|
### Diff Summary
|
|
|
|
```
|
|
stack/01-service-hl.yml | 7 ++++++-
|
|
1 file changed, 6 insertions(+), 1 deletion(-)
|
|
```
|