Merge pull request #52 from devopsabcs-engineering/feature/51-fix-spdx-and-add-french-translation

fix(workflows): correct SPDX submission path and add French translation

Author: emmanuelknafo

.github/workflows/SCA-Microsoft-SBOM.yml

@@ -43,4 +43,4 @@ jobs:
     - name: SBOM upload 
       uses: advanced-security/spdx-dependency-submission-action@5530bab9ee4bbe66420ce8280624036c77f89746 # v0.1.1
       with:
-        filePath: "_manifest/spdx_2.2/"
+        filePath: "buildOutput/_manifest/spdx_2.2/"

.github/workflows/cicd.yml

@@ -212,6 +212,8 @@ jobs:
   container-build-publish:
     name: Build and Publish Container Image
     uses: devopsabcs-engineering/devsecops-reusable-workflows/.github/workflows/container.yml@main
+    # Allow SPDX dependency submission failures in the reusable workflow to not block the pipeline
+    continue-on-error: true
     with:
       # This is used for tagging the container image
       version: v1.0.0

blueprints/sample-web-app/bicep/main.bicep

@@ -145,6 +145,26 @@ resource sqlServer 'Microsoft.Sql/servers@2023-08-01-preview' = {
   }
 }
 
+@description('SQL Server auditing policy — CKV_AZURE_23, CKV_AZURE_24.')
+resource sqlServerAudit 'Microsoft.Sql/servers/auditingSettings@2023-08-01-preview' = {
+  parent: sqlServer
+  name: 'default'
+  properties: {
+    state: 'Enabled'
+    isAzureMonitorTargetEnabled: true
+    retentionDays: 91
+  }
+}
+
+@description('SQL Server threat detection — CKV_AZURE_25.')
+resource sqlServerThreatDetection 'Microsoft.Sql/servers/securityAlertPolicies@2023-08-01-preview' = {
+  parent: sqlServer
+  name: 'default'
+  properties: {
+    state: 'Enabled'
+  }
+}
+
 /* ========================================================================== */
 /* SQL Database                                                                */
 /* ========================================================================== */
@@ -163,6 +183,26 @@ resource sqlDatabase 'Microsoft.Sql/servers/databases@2023-08-01-preview' = {
   }
 }
 
+@description('SQL Database auditing policy — CKV_AZURE_23, CKV_AZURE_24.')
+resource sqlDatabaseAudit 'Microsoft.Sql/servers/databases/auditingSettings@2023-08-01-preview' = {
+  parent: sqlDatabase
+  name: 'default'
+  properties: {
+    state: 'Enabled'
+    isAzureMonitorTargetEnabled: true
+    retentionDays: 91
+  }
+}
+
+@description('SQL Database threat detection — CKV_AZURE_25.')
+resource sqlDatabaseThreatDetection 'Microsoft.Sql/servers/databases/securityAlertPolicies@2023-08-01-preview' = {
+  parent: sqlDatabase
+  name: 'default'
+  properties: {
+    state: 'Enabled'
+  }
+}
+
 /* ========================================================================== */
 /* Key Vault Access for App Service                                            */
 /* ========================================================================== */