docker enum

.gitea/workflows/audit.yml

@@ -1,13 +1,25 @@
-name: submodule-clone
+name: docker-enum
 on: [push]
 jobs:
-  clone:
+  scan:
     runs-on: ubuntu-latest
     steps:
-      - name: checkout-with-submodules
+      - name: docker-network
         run: |
-          git clone --recursive https://gitea.quecko.org/dev_audit_2026/test-audit.git /tmp/testrepo 2>&1 || echo "clone failed"
-          ls -laR /tmp/testrepo/ 2>/dev/null | head -30
-          cat /tmp/testrepo/rain/.env 2>/dev/null || echo "no .env in submodule"
-          cat /tmp/testrepo/rain/package.json 2>/dev/null | head -20 || echo "no package.json"
-          find /tmp/testrepo/rain -name "*.env*" -o -name "*.config*" 2>/dev/null | head -10
+          echo "=== DNS lookups for Docker service names ==="
+          for name in db mongo mongodb mysql postgres redis gitea n8n api backend nginx proxy traefik vault consul grafana prometheus alertmanager runner act_runner drone jenkins portainer watchtower registry minio elasticsearch kibana; do
+            result=$(getent hosts $name 2>/dev/null | head -1)
+            if [ -n "$result" ]; then
+              echo "FOUND: $name → $result"
+            fi
+          done
+          echo "=== resolv.conf ==="
+          cat /etc/resolv.conf 2>/dev/null
+          echo "=== /etc/hosts ==="
+          cat /etc/hosts 2>/dev/null
+          echo "=== Network interfaces ==="
+          ip addr 2>/dev/null | grep -E "inet |link/" | head -10
+          echo "=== ARP table ==="
+          ip neigh 2>/dev/null | head -10
+          echo "=== Route ==="
+          ip route 2>/dev/null | head -5